last executing test programs: 20m11.548065426s ago: executing program 1 (id=430): prctl$PR_PAC_RESET_KEYS(0x36, 0x1a) 20m11.387518968s ago: executing program 1 (id=431): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0x1, 0xf7, 0xfffff038}, {0x6, 0x6, 0xff, 0xfffffff8}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xa052) 20m10.869398038s ago: executing program 1 (id=433): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000400)=' ', 0x1) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) 20m10.486769757s ago: executing program 1 (id=435): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 20m10.177082791s ago: executing program 1 (id=437): r0 = inotify_init() setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x610) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x103) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 20m9.051337257s ago: executing program 1 (id=438): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0xd, r1, 0x2e, r0}, 0x10) 20m9.051080738s ago: executing program 32 (id=438): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0xd, r1, 0x2e, r0}, 0x10) 16m47.979274921s ago: executing program 0 (id=629): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x1c4c0) syz_usb_disconnect(r0) r1 = socket$netlink(0x10, 0x3, 0x6) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) 16m47.690811143s ago: executing program 0 (id=630): futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 16m45.088705673s ago: executing program 0 (id=631): r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 16m45.019566218s ago: executing program 0 (id=632): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000040000090000000300000018bb3de9", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x5, 0x0, 0x3}, 'syz0\x00', 0x1}) r0 = syz_io_uring_setup(0x53d6, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x41, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x21, 0x1, {0x1}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 16m44.920353796s ago: executing program 0 (id=633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @random="98c8ca7120df"}, 0x14) 16m44.701858692s ago: executing program 0 (id=634): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) socket$inet6_udplite(0xa, 0x2, 0x88) tkill(0x0, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) futex(&(0x7f0000000280)=0x1, 0x7, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f00000003c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x2c) tkill(r1, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002400), 0x80040, 0x0) ioctl$TCXONC(r5, 0x5453, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05150000000000000109022400010000c00509040000810300000009210000280122070009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_012={0x0, 0x1, 0x8}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x0, 0x2, 0x5}]}}, 0x0}, 0x0) 15m58.746358048s ago: executing program 33 (id=634): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) socket$inet6_udplite(0xa, 0x2, 0x88) tkill(0x0, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) futex(&(0x7f0000000280)=0x1, 0x7, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f00000003c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x2c) tkill(r1, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002400), 0x80040, 0x0) ioctl$TCXONC(r5, 0x5453, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05150000000000000109022400010000c00509040000810300000009210000280122070009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_012={0x0, 0x1, 0x8}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x0, 0x2, 0x5}]}}, 0x0}, 0x0) 12m27.938026359s ago: executing program 3 (id=828): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) 12m27.788555821s ago: executing program 3 (id=830): io_uring_setup(0x549d, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x4e14, 0x912a, 0x41, 0x0, 0x0) 12m27.379870152s ago: executing program 3 (id=832): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 12m27.1463675s ago: executing program 3 (id=833): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde6, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 12m26.35918929s ago: executing program 3 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="03000000040000000100"/21], 0x50) r4 = fsopen(0x0, 0x1) fsmount(r4, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x7, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[r3, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="210f00000000000000002000", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 12m8.468366848s ago: executing program 3 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) syz_pidfd_open(r0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x70, 0x0, "1cdc0dca1d9f68846960e56de429"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) 11m23.280113294s ago: executing program 34 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) syz_pidfd_open(r0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x70, 0x0, "1cdc0dca1d9f68846960e56de429"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) 6m27.479691337s ago: executing program 4 (id=1030): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 6m27.260303163s ago: executing program 4 (id=1031): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto(r0, 0x0, 0x0, 0x8080, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0xa031, 0xffffffffffffffff, 0xeb92e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xc6, 0x4) sendto$inet(r0, &(0x7f0000000200)='\x00', 0x1, 0x4048015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 6m11.379407978s ago: executing program 4 (id=1032): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200180100000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a3000000000ec000380e8000080d00001800c0002800800034000000002c00001000e80"], 0x1ac}}, 0x0) 6m1.02944727s ago: executing program 4 (id=1037): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@p, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1fffffff}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x28000000}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xa}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5m51.768833737s ago: executing program 4 (id=1040): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00039b9b7a8f2a6e380001003773de6ce8e86042876ebedd9da484ff998970a2e5ae8a27d3c913987ae4c7005220db4a0de9d656bc8362efaa3697321937d917458a0573c7c9ffff74c08fca82d4624c35b2e5e7041bed51c15a2e4a58087b00501761075b9b96"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) 5m51.519763147s ago: executing program 4 (id=1041): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) 5m5.648348955s ago: executing program 35 (id=1041): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) 4m4.099433272s ago: executing program 5 (id=1081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 4m3.307867472s ago: executing program 5 (id=1082): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="632a1eb3", 0x4}], 0x1, 0x0, 0x0, 0x4090}, 0x0) read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000) 4m3.178598273s ago: executing program 5 (id=1083): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x30a28, 0x59629}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x4}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) 4m2.9487208s ago: executing program 5 (id=1084): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000040) 4m2.859160637s ago: executing program 5 (id=1085): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x77f31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f0000000240)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 3m48.978149179s ago: executing program 5 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) io_setup(0x9, &(0x7f00000000c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x20001, 0x2e) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000100)='9', 0x20000101}]) 3m3.967409271s ago: executing program 36 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) io_setup(0x9, &(0x7f00000000c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x20001, 0x2e) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000100)='9', 0x20000101}]) 59.137364848s ago: executing program 2 (id=1165): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) 58.999227048s ago: executing program 2 (id=1166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r5, 0x4b46, &(0x7f0000000140)) 34.848441565s ago: executing program 2 (id=1169): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x28) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0x7) 19.430225084s ago: executing program 2 (id=1172): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) fanotify_mark(r1, 0x441, 0x40000010, r0, 0x0) 19.35776743s ago: executing program 2 (id=1173): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a00003000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c0000000000000000000000c8af33c3cd515542000000000000000000ffffffffffffffffd0f400000000000000000000000000000000000000000000000a000016000000feffffffff7f40000200000000000008000000000000000001"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000"], 0xfc}}, 0x0) 19.344559891s ago: executing program 2 (id=1174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x180, 0x9) 18.230064586s ago: executing program 6 (id=1179): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x4800) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x1008000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_open_dev$dri(0x0, 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb0300050000"], 0x50}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80}, 0x1c) 2.209009291s ago: executing program 6 (id=1180): signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f00000002c0)={0x3, 0xffffffff, 0x0, 0x4, 0x0, 0x9ff}) 2.078052251s ago: executing program 6 (id=1181): r0 = io_uring_setup(0x748d, &(0x7f0000000180)={0x0, 0x2c3f, 0x40, 0x21, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000240), &(0x7f0000000580)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.847688709s ago: executing program 6 (id=1182): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x54, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3ff}]}}]}, 0x54}}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.394796184s ago: executing program 6 (id=1183): setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=1184): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x3, 0x4, 0x1, 0xc, 0x7, 0x4, 0xa, 0x7, 0x2, 0x1, 0xfffffffe, 0x1, 0x2, 0x101, 0x4, 0x9, 0x3, 0x352f, 0x99, 0xcaa7, 0x84, 0x20001e58, 0x7, 0x2000e67, 0x1c, 0x4, 0x7f, 0x0, 0xfffffff8]}) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f0000000580)) kernel console output (not intermixed with test programs): [ 51.967051][ T29] audit: type=1400 audit(51.870:56): avc: denied { read write } for pid=3092 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.969378][ T29] audit: type=1400 audit(51.880:57): avc: denied { open } for pid=3092 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:65041' (ED25519) to the list of known hosts. [ 66.124489][ T29] audit: type=1400 audit(66.030:58): avc: denied { name_bind } for pid=3095 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 67.521163][ T29] audit: type=1400 audit(67.430:59): avc: denied { execute } for pid=3096 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 67.525157][ T29] audit: type=1400 audit(67.430:60): avc: denied { execute_no_trans } for pid=3096 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 69.461157][ T29] audit: type=1400 audit(69.370:61): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 69.464547][ T29] audit: type=1400 audit(69.370:62): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.476140][ T3096] cgroup: Unknown subsys name 'net' [ 69.482742][ T29] audit: type=1400 audit(69.390:63): avc: denied { unmount } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.648133][ T3096] cgroup: Unknown subsys name 'cpuset' [ 69.655808][ T3096] cgroup: Unknown subsys name 'hugetlb' [ 69.659443][ T3096] cgroup: Unknown subsys name 'rlimit' [ 69.930666][ T29] audit: type=1400 audit(69.840:64): avc: denied { setattr } for pid=3096 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.937176][ T29] audit: type=1400 audit(69.840:65): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 69.937611][ T29] audit: type=1400 audit(69.850:66): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 70.169710][ T3098] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 70.173650][ T29] audit: type=1400 audit(70.080:67): avc: denied { relabelto } for pid=3098 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 77.324726][ T3096] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.929528][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 78.937208][ T29] audit: type=1400 audit(78.840:71): avc: denied { execmem } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.982584][ T29] audit: type=1400 audit(78.890:72): avc: denied { read } for pid=3101 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.987088][ T29] audit: type=1400 audit(78.890:73): avc: denied { open } for pid=3101 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.992362][ T29] audit: type=1400 audit(78.900:74): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 79.015225][ T29] audit: type=1400 audit(78.920:75): avc: denied { module_request } for pid=3101 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 79.090570][ T29] audit: type=1400 audit(79.000:76): avc: denied { sys_module } for pid=3102 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 79.721511][ T29] audit: type=1400 audit(79.630:77): avc: denied { ioctl } for pid=3102 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=676 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.847208][ T3101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.879135][ T3101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.904108][ T3102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.931721][ T3102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.784847][ T3101] hsr_slave_0: entered promiscuous mode [ 81.789865][ T3101] hsr_slave_1: entered promiscuous mode [ 81.824965][ T3102] hsr_slave_0: entered promiscuous mode [ 81.828392][ T3102] hsr_slave_1: entered promiscuous mode [ 81.831675][ T3102] debugfs: 'hsr0' already exists in 'hsr' [ 81.833137][ T3102] Cannot create hsr debugfs directory [ 82.255495][ T29] audit: type=1400 audit(82.160:78): avc: denied { create } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.261096][ T29] audit: type=1400 audit(82.160:79): avc: denied { write } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.262902][ T29] audit: type=1400 audit(82.170:80): avc: denied { read } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.278251][ T3101] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.289693][ T3101] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.298430][ T3101] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.312748][ T3101] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.392058][ T3102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.412504][ T3102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.423444][ T3102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.432494][ T3102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.971868][ T3101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.048549][ T3102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.360299][ T3102] veth0_vlan: entered promiscuous mode [ 85.395182][ T3102] veth1_vlan: entered promiscuous mode [ 85.422755][ T3101] veth0_vlan: entered promiscuous mode [ 85.455119][ T3101] veth1_vlan: entered promiscuous mode [ 85.471088][ T3102] veth0_macvtap: entered promiscuous mode [ 85.488421][ T3102] veth1_macvtap: entered promiscuous mode [ 85.544526][ T3101] veth0_macvtap: entered promiscuous mode [ 85.560892][ T3101] veth1_macvtap: entered promiscuous mode [ 85.611695][ T54] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.612420][ T54] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.612772][ T54] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.612989][ T54] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.713360][ T38] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.713917][ T38] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.714344][ T38] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.714682][ T38] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.773799][ T29] audit: type=1400 audit(85.680:81): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.782798][ T29] audit: type=1400 audit(85.690:82): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.iRsNmQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.798559][ T29] audit: type=1400 audit(85.700:83): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 85.811180][ T29] audit: type=1400 audit(85.720:84): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.iRsNmQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 85.821106][ T29] audit: type=1400 audit(85.730:85): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.iRsNmQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 85.851791][ T29] audit: type=1400 audit(85.760:86): avc: denied { unmount } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 85.860729][ T29] audit: type=1400 audit(85.770:87): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 85.864825][ T29] audit: type=1400 audit(85.770:88): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="gadgetfs" ino=3146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 85.873291][ T29] audit: type=1400 audit(85.780:89): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.878281][ T29] audit: type=1400 audit(85.790:90): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 85.960103][ T3102] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.858508][ T2889] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.027580][ T2889] usb 2-1: Using ep0 maxpacket: 8 [ 87.058783][ T2889] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 87.060118][ T2889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 87.061713][ T2889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.063190][ T2889] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.065692][ T2889] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.067416][ T2889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.312619][ T2889] usb 2-1: GET_CAPABILITIES returned 0 [ 87.317359][ T2889] usbtmc 2-1:16.0: can't read capabilities [ 87.533857][ T23] usb 2-1: USB disconnect, device number 2 [ 91.228313][ T2880] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.441192][ T2880] usb 2-1: Using ep0 maxpacket: 16 [ 91.472470][ T2880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 91.617291][ T2880] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 91.617587][ T2880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.617854][ T2880] usb 2-1: Product: syz [ 91.618001][ T2880] usb 2-1: Manufacturer: syz [ 91.618150][ T2880] usb 2-1: SerialNumber: syz [ 91.641800][ T2880] usb 2-1: config 0 descriptor?? [ 101.887849][ T43] usb 2-1: USB disconnect, device number 3 [ 102.160221][ T29] kauditd_printk_skb: 1711 callbacks suppressed [ 102.161292][ T29] audit: type=1400 audit(102.070:1802): avc: denied { create } for pid=3867 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 102.170705][ T29] audit: type=1400 audit(102.080:1803): avc: denied { setopt } for pid=3867 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 102.691684][ T29] audit: type=1400 audit(102.600:1804): avc: denied { connect } for pid=3878 comm="syz.1.17" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.459662][ T29] audit: type=1400 audit(103.370:1805): avc: denied { mounton } for pid=3891 comm="syz.1.22" path="/proc/43/task" dev="proc" ino=2390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 103.717707][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.959315][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.961726][ T43] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 103.961971][ T43] usb 2-1: can't read configurations, error -71 [ 104.214445][ T29] audit: type=1400 audit(104.120:1806): avc: denied { append } for pid=3908 comm="syz.0.27" name="pcmC0D0p" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.374434][ T3915] syz.1.30 uses obsolete (PF_INET,SOCK_PACKET) [ 104.379867][ T29] audit: type=1400 audit(104.290:1807): avc: denied { ioctl } for pid=3914 comm="syz.1.30" path="socket:[2420]" dev="sockfs" ino=2420 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.488357][ T29] audit: type=1400 audit(104.390:1808): avc: denied { create } for pid=3916 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.493352][ T29] audit: type=1400 audit(104.400:1809): avc: denied { setopt } for pid=3916 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.658435][ T29] audit: type=1400 audit(104.560:1810): avc: denied { bind } for pid=3916 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.663106][ T29] audit: type=1400 audit(104.570:1811): avc: denied { read } for pid=3916 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.339924][ T3942] random: crng reseeded on system resumption [ 106.354808][ T3942] Restarting kernel threads ... [ 106.358174][ T3942] Done restarting kernel threads. [ 107.707912][ T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 107.927361][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 108.014555][ T43] usb 2-1: config 1 has an invalid interface number: 62 but max is 0 [ 108.015523][ T43] usb 2-1: config 1 has no interface number 0 [ 108.015741][ T43] usb 2-1: config 1 interface 62 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.015882][ T43] usb 2-1: config 1 interface 62 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 64 [ 108.015986][ T43] usb 2-1: config 1 interface 62 altsetting 253 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 108.016070][ T43] usb 2-1: config 1 interface 62 has no altsetting 0 [ 108.105528][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.105831][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 108.106115][ T43] usb 2-1: SerialNumber: syz [ 108.188909][ T3956] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 113.281958][ T43] cdc_acm 2-1:1.62: ttyACM0: USB ACM device [ 120.293772][ T43] usb 2-1: USB disconnect, device number 6 [ 120.822034][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 120.823190][ T29] audit: type=1400 audit(120.730:1814): avc: denied { write } for pid=3982 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.869884][ T29] audit: type=1400 audit(122.780:1815): avc: denied { allowed } for pid=3982 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 122.884222][ T29] audit: type=1400 audit(122.790:1816): avc: denied { create } for pid=3982 comm="syz.1.51" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.902075][ T3987] random: crng reseeded on system resumption [ 122.955639][ T29] audit: type=1400 audit(122.860:1817): avc: denied { create } for pid=3988 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.037727][ T29] audit: type=1400 audit(122.950:1818): avc: denied { create } for pid=3988 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 123.120519][ T3989] vlan2: entered promiscuous mode [ 123.121396][ T3989] vlan2: entered allmulticast mode [ 123.121547][ T3989] veth1_vlan: entered allmulticast mode [ 123.142025][ T3989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 123.233409][ T3989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 123.402864][ T3989] hsr_slave_1 (unregistering): left promiscuous mode [ 135.608022][ T2889] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.968640][ T2889] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 135.969704][ T2889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 135.970951][ T2889] usb 2-1: Product: syz [ 135.971674][ T2889] usb 2-1: Manufacturer: syz [ 135.972357][ T2889] usb 2-1: SerialNumber: syz [ 135.982137][ T2889] usb 2-1: config 0 descriptor?? [ 136.369866][ T2889] usb 2-1: USB disconnect, device number 7 [ 136.620640][ T29] audit: type=1400 audit(136.530:1819): avc: denied { create } for pid=4035 comm="syz.1.61" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.639817][ T29] audit: type=1400 audit(136.550:1820): avc: denied { mounton } for pid=4035 comm="syz.1.61" path="/47/file0" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 139.179887][ T29] audit: type=1400 audit(139.090:1821): avc: denied { unlink } for pid=3102 comm="syz-executor" name="file0" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.278989][ T4047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 144.957695][ T29] audit: type=1400 audit(144.840:1822): avc: denied { ioctl } for pid=4061 comm="syz.1.68" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=2610 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 147.734593][ T29] audit: type=1400 audit(147.640:1823): avc: denied { execute } for pid=4065 comm="syz.0.69" dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.741452][ T4066] process 'syz.0.69' launched '/dev/fd/5' with NULL argv: empty string added [ 147.743058][ T29] audit: type=1400 audit(147.650:1824): avc: denied { execute_no_trans } for pid=4065 comm="syz.0.69" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.359636][ T29] audit: type=1400 audit(151.260:1825): avc: denied { read } for pid=4073 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.506787][ C1] hrtimer: interrupt took 9953200 ns [ 157.269424][ T4094] netlink: 40 bytes leftover after parsing attributes in process `syz.1.77'. [ 157.293516][ T4094] bond0: (slave bond_slave_0): Releasing backup interface [ 157.310586][ T4094] bond0: (slave bond_slave_1): Releasing backup interface [ 157.329722][ T4094] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 162.975283][ T4098] comedi comedi0: Minor 131075 is invalid! [ 163.163276][ T29] audit: type=1400 audit(163.070:1826): avc: denied { mounton } for pid=4101 comm="syz.0.80" path="/21/file0" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 163.274793][ T29] audit: type=1400 audit(163.180:1827): avc: denied { bind } for pid=4105 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.547384][ T29] audit: type=1400 audit(167.450:1828): avc: denied { name_bind } for pid=4112 comm="syz.1.84" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 167.547746][ T29] audit: type=1400 audit(167.450:1829): avc: denied { node_bind } for pid=4112 comm="syz.1.84" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 167.557530][ T4113] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 168.105438][ T4117] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 168.332953][ T4119] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 172.772985][ T29] audit: type=1400 audit(172.680:1830): avc: denied { map } for pid=4126 comm="syz.0.88" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.774582][ T29] audit: type=1400 audit(172.680:1831): avc: denied { read write } for pid=4126 comm="syz.0.88" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.819974][ T29] audit: type=1400 audit(178.730:1832): avc: denied { create } for pid=4135 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.841671][ T29] audit: type=1400 audit(178.750:1833): avc: denied { bind } for pid=4135 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.854111][ T29] audit: type=1400 audit(178.760:1834): avc: denied { setopt } for pid=4135 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.452319][ T29] audit: type=1400 audit(179.360:1835): avc: denied { mount } for pid=4140 comm="syz.1.93" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 180.857276][ T29] audit: type=1400 audit(180.730:1836): avc: denied { create } for pid=4142 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 180.977731][ T29] audit: type=1400 audit(180.770:1837): avc: denied { write } for pid=4142 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 180.977984][ T29] audit: type=1400 audit(180.860:1838): avc: denied { setopt } for pid=4142 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.988864][ T29] audit: type=1400 audit(190.900:1839): avc: denied { watch watch_reads } for pid=4154 comm="syz.0.97" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 193.512554][ T29] audit: type=1400 audit(193.420:1840): avc: denied { write } for pid=4164 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 193.514559][ T29] audit: type=1400 audit(193.420:1841): avc: denied { nlmsg_write } for pid=4164 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 193.615157][ T29] audit: type=1400 audit(193.520:1842): avc: denied { setopt } for pid=4166 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.550768][ T4169] lo: entered promiscuous mode [ 194.552332][ T4169] lo: entered allmulticast mode [ 194.996222][ T4201] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 195.117772][ T29] audit: type=1400 audit(195.020:1843): avc: denied { mount } for pid=4211 comm="syz.0.109" name="/" dev="ramfs" ino=2793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 195.161790][ T4203] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 195.211771][ T4294] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 195.230725][ T29] audit: type=1400 audit(195.140:1844): avc: denied { bind } for pid=4293 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.234417][ T29] audit: type=1400 audit(195.140:1845): avc: denied { name_bind } for pid=4293 comm="syz.0.110" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 195.240495][ T29] audit: type=1400 audit(195.140:1846): avc: denied { node_bind } for pid=4293 comm="syz.0.110" saddr=172.30.246.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 195.346326][ T4298] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 195.645715][ T29] audit: type=1400 audit(195.550:1847): avc: denied { block_suspend } for pid=4305 comm="syz.1.116" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 196.883137][ T4315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'. [ 204.178426][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 204.366161][ T23] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.367955][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 204.368031][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 204.368066][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.368143][ T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.368178][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.373996][ T23] usb 1-1: config 0 descriptor?? [ 204.875016][ T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 205.661564][ T3792] usb 1-1: USB disconnect, device number 2 [ 206.902889][ T29] audit: type=1400 audit(206.810:1848): avc: denied { watch } for pid=4361 comm="syz.0.127" path="/49" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 208.631660][ T29] audit: type=1400 audit(208.530:1849): avc: denied { read } for pid=4364 comm="syz.1.128" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 208.633940][ T29] audit: type=1400 audit(208.540:1850): avc: denied { open } for pid=4364 comm="syz.1.128" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 208.641254][ T4368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.977992][ T23] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 209.276937][ T23] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 209.278125][ T23] usb 2-1: config 0 has no interface number 0 [ 209.280676][ T23] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 209.287704][ T23] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 209.291504][ T23] usb 2-1: config 0 interface 113 has no altsetting 0 [ 209.458931][ T23] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 209.460461][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.463433][ T23] usb 2-1: Product: syz [ 209.464973][ T23] usb 2-1: Manufacturer: syz [ 209.467346][ T23] usb 2-1: SerialNumber: syz [ 209.472494][ T23] usb 2-1: config 0 descriptor?? [ 209.495137][ C1] usb 2-1: NFC: Urb failure (status -71) [ 209.502076][ T23] usb 2-1: NFC: Unable to get FW version [ 209.503631][ T23] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -90 [ 209.627232][ T3809] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 209.861101][ T3809] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 209.862313][ T3809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.865561][ T3809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.868481][ T3809] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 209.885422][ T3809] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 209.889918][ T3809] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 209.892624][ T3809] usb 1-1: Manufacturer: syz [ 209.899567][ T3809] usb 1-1: config 0 descriptor?? [ 210.379356][ T3809] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 210.387580][ T3809] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 215.508764][ T29] audit: type=1400 audit(215.420:1851): avc: denied { getopt } for pid=4406 comm="syz.0.134" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 216.019249][ T2889] usb 1-1: USB disconnect, device number 3 [ 221.907602][ T3809] usb 2-1: USB disconnect, device number 8 [ 226.163885][ T29] audit: type=1400 audit(226.070:1852): avc: denied { create } for pid=4448 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 226.326243][ T4449] Zero length message leads to an empty skb [ 235.850529][ T29] audit: type=1326 audit(235.760:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.1.148" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef5d8 code=0x7ffc0000 [ 235.851135][ T29] audit: type=1326 audit(235.760:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.1.148" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 235.851274][ T29] audit: type=1326 audit(235.760:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.1.148" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 235.853194][ T29] audit: type=1326 audit(235.760:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.1.148" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef5d8 code=0x7ffc0000 [ 235.854315][ T29] audit: type=1326 audit(235.760:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.1.148" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef5d8 code=0x7ffc0000 [ 235.855545][ T29] audit: type=1326 audit(235.760:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.1.148" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef5d8 code=0x7ffc0000 [ 235.857230][ T29] audit: type=1326 audit(235.760:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.1.148" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef5d8 code=0x7ffc0000 [ 235.861462][ T29] audit: type=1326 audit(235.770:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.1.148" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef5d8 code=0x7ffc0000 [ 235.878732][ T29] audit: type=1326 audit(235.790:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.1.148" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef5d8 code=0x7ffc0000 [ 235.880297][ T29] audit: type=1326 audit(235.790:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.1.148" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef5d8 code=0x7ffc0000 [ 236.342659][ T4478] syzkaller1: entered promiscuous mode [ 236.343901][ T4478] syzkaller1: entered allmulticast mode [ 238.470871][ T4492] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 239.189580][ T4498] syz.0.157(4498): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 239.617420][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 239.869910][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 239.898575][ T23] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 239.899826][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.901148][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.902160][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.921975][ T23] usbtmc 1-1:16.0: bulk endpoints not found [ 243.184572][ T4516] netlink: 'syz.1.162': attribute type 28 has an invalid length. [ 250.145630][ T2880] usb 1-1: USB disconnect, device number 4 [ 253.987331][ T2880] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 254.137970][ T2880] usb 2-1: Using ep0 maxpacket: 8 [ 254.144461][ T2880] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 254.147831][ T2880] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 254.151518][ T2880] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 254.152925][ T2880] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 254.155756][ T2880] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.158048][ T2880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.169873][ T2880] usbtmc 2-1:16.0: bulk endpoints not found [ 262.709287][ T4560] netlink: 36 bytes leftover after parsing attributes in process `syz.0.172'. [ 264.392494][ T2889] usb 2-1: USB disconnect, device number 9 [ 272.950828][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 272.952040][ T29] audit: type=1400 audit(272.860:1897): avc: denied { create } for pid=4578 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 272.958697][ T29] audit: type=1400 audit(272.870:1898): avc: denied { setopt } for pid=4578 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 275.557393][ T2880] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 275.707609][ T2880] usb 1-1: Using ep0 maxpacket: 8 [ 275.737797][ T2880] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 275.738255][ T2880] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 275.740740][ T2880] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 275.740950][ T2880] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 275.741188][ T2880] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.741355][ T2880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.814064][ T2880] usbtmc 1-1:16.0: bulk endpoints not found [ 286.044416][ T2889] usb 1-1: USB disconnect, device number 5 [ 286.497993][ T2889] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 286.657704][ T2889] usb 1-1: Using ep0 maxpacket: 32 [ 286.689975][ T2889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.691744][ T2889] usb 1-1: config 0 has no interfaces? [ 286.698785][ T2889] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 286.702580][ T2889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.711472][ T2889] usb 1-1: config 0 descriptor?? [ 294.419218][ T29] audit: type=1400 audit(294.330:1899): avc: denied { bind } for pid=4633 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 295.517510][ T2880] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 295.667528][ T2880] usb 2-1: Using ep0 maxpacket: 8 [ 295.677933][ T2880] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 295.678293][ T2880] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 295.678483][ T2880] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 295.678678][ T2880] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 295.678776][ T2880] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 295.678812][ T2880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.692058][ T2880] usbtmc 2-1:16.0: bulk endpoints not found [ 301.153966][ T2889] usb 1-1: USB disconnect, device number 6 [ 301.718028][ T2880] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 301.880680][ T2880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.881006][ T2880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.881284][ T2880] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 301.881388][ T2880] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 301.881424][ T2880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.888193][ T2880] usb 1-1: config 0 descriptor?? [ 302.317273][ T2880] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 302.322167][ T2880] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 304.411685][ T2880] usb 1-1: USB disconnect, device number 7 [ 305.928296][ T3791] usb 2-1: USB disconnect, device number 10 [ 306.460337][ T29] audit: type=1400 audit(306.370:1900): avc: denied { write } for pid=4707 comm="syz.1.194" name="vlan0" dev="proc" ino=4026532917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 307.565735][ T29] audit: type=1400 audit(307.470:1901): avc: denied { write } for pid=4720 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 307.584323][ T4722] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 308.602684][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.023339][ T4733] syzkaller0: entered promiscuous mode [ 310.024080][ T4733] syzkaller0: entered allmulticast mode [ 310.260185][ T29] audit: type=1400 audit(310.170:1902): avc: denied { getopt } for pid=4740 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 310.389928][ T2880] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 310.547234][ T2880] usb 1-1: Using ep0 maxpacket: 32 [ 310.554585][ T2880] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 310.557326][ T2880] usb 1-1: config 0 has no interface number 0 [ 310.557623][ T2880] usb 1-1: config 0 interface 130 has no altsetting 0 [ 310.564124][ T2880] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1201, bcdDevice=69.37 [ 310.564378][ T2880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.564544][ T2880] usb 1-1: Product: syz [ 310.564826][ T2880] usb 1-1: Manufacturer: syz [ 310.564879][ T2880] usb 1-1: SerialNumber: syz [ 310.571815][ T2880] usb 1-1: config 0 descriptor?? [ 310.801323][ T2880] option 1-1:0.130: GSM modem (1-port) converter detected [ 310.812347][ T2880] usb 1-1: USB disconnect, device number 8 [ 310.815786][ T2880] option 1-1:0.130: device disconnected [ 311.370721][ T4774] netlink: 7 bytes leftover after parsing attributes in process `syz.0.212'. [ 313.097703][ T2880] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 313.247367][ T2880] usb 1-1: Using ep0 maxpacket: 32 [ 313.261534][ T2880] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 313.261861][ T2880] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 313.262135][ T2880] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.262307][ T2880] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 313.277857][ T2880] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 313.278209][ T2880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.278394][ T2880] usb 1-1: Product: syz [ 313.278438][ T2880] usb 1-1: Manufacturer: syz [ 313.278512][ T2880] usb 1-1: SerialNumber: syz [ 313.298923][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 313.301337][ T2880] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input4 [ 313.518638][ T2880] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 313.519218][ T2880] (id 0x00) [ 313.628767][ T2880] rc_core: IR keymap rc-imon-pad not found [ 313.629591][ T2880] Registered IR keymap rc-empty [ 313.630637][ T2880] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 313.630738][ T2880] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 313.731420][ T2880] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 313.735572][ T2880] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input5 [ 313.747588][ T2880] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:9> initialized [ 313.925773][ T2880] usb 1-1: USB disconnect, device number 9 [ 314.093561][ T29] audit: type=1400 audit(314.000:1903): avc: denied { ioctl } for pid=4827 comm="syz.0.223" path="socket:[4003]" dev="sockfs" ino=4003 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 314.584229][ T29] audit: type=1400 audit(314.490:1904): avc: denied { getopt } for pid=4832 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 315.064104][ T29] audit: type=1400 audit(314.970:1905): avc: denied { create } for pid=4841 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 315.069043][ T29] audit: type=1400 audit(314.980:1906): avc: denied { setopt } for pid=4841 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 315.794930][ T29] audit: type=1400 audit(315.700:1907): avc: denied { write } for pid=4849 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 315.814902][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 323.811711][ T3791] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 324.057612][ T3791] usb 1-1: Using ep0 maxpacket: 8 [ 324.077557][ T3791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 324.079146][ T3791] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 324.080220][ T3791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.110160][ T3791] usb 1-1: config 0 descriptor?? [ 324.338701][ T3791] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 325.151745][ T2880] usb 1-1: USB disconnect, device number 10 [ 325.739957][ T3791] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 325.934129][ T3791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.944242][ T3791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.945996][ T3791] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 325.948178][ T3791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.968304][ T3791] usb 1-1: config 0 descriptor?? [ 326.456404][ T3791] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 326.468656][ T3791] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 326.471295][ T3791] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 326.477030][ T3791] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 326.478258][ T3791] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 326.538879][ T3791] cm6533_jd 0003:0D8C:0022.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 326.700856][ T2880] usb 1-1: USB disconnect, device number 11 [ 330.309182][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.249'. [ 331.881497][ T29] audit: type=1326 audit(331.790:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.1.257" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 331.883868][ T29] audit: type=1326 audit(331.790:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.1.257" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x132510 code=0x7ffc0000 [ 331.887560][ T29] audit: type=1326 audit(331.800:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.1.257" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 331.890020][ T29] audit: type=1326 audit(331.800:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.1.257" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 331.895232][ T29] audit: type=1326 audit(331.800:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.1.257" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x132510 code=0x7ffc0000 [ 331.900064][ T4948] netlink: 56 bytes leftover after parsing attributes in process `syz.1.257'. [ 331.901932][ T29] audit: type=1326 audit(331.800:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.1.257" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 331.904274][ T29] audit: type=1326 audit(331.800:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.1.257" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 331.910077][ T29] audit: type=1326 audit(331.800:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.1.257" exe="/syz-executor" sig=0 arch=40000028 syscall=296 compat=0 ip=0x132510 code=0x7ffc0000 [ 331.913273][ T29] audit: type=1326 audit(331.810:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.1.257" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 331.917634][ T29] audit: type=1326 audit(331.810:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.1.257" exe="/syz-executor" sig=0 arch=40000028 syscall=296 compat=0 ip=0x132510 code=0x7ffc0000 [ 333.581243][ T4965] netlink: 'syz.1.263': attribute type 28 has an invalid length. [ 338.431735][ T4984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 349.628786][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 349.630408][ T29] audit: type=1400 audit(349.530:1930): avc: denied { write } for pid=4993 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 350.263636][ T29] audit: type=1400 audit(350.170:1931): avc: denied { create } for pid=5003 comm="syz.1.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 351.179509][ T29] audit: type=1400 audit(351.090:1932): avc: denied { create } for pid=5034 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 351.355032][ T5035] netlink: 'syz.0.286': attribute type 27 has an invalid length. [ 351.778278][ T5035] vlan2: left promiscuous mode [ 351.779098][ T5035] vlan2: left allmulticast mode [ 351.779164][ T5035] veth1_vlan: left allmulticast mode [ 351.783474][ T1313] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.785708][ T1313] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.786113][ T1313] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.786322][ T1313] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.822974][ T5035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.895450][ T5035] veth1_vlan: left promiscuous mode [ 351.901014][ T5035] veth0_vlan: left promiscuous mode [ 351.904201][ T5035] veth0_vlan: entered promiscuous mode [ 351.911331][ T5035] veth1_vlan: entered promiscuous mode [ 351.934823][ T5035] veth1_macvtap: left promiscuous mode [ 351.937929][ T5035] veth0_macvtap: left promiscuous mode [ 351.940636][ T5035] veth0_macvtap: entered promiscuous mode [ 351.944048][ T5035] veth1_macvtap: entered promiscuous mode [ 352.001398][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.001897][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.002223][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.002458][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.238640][ T2880] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 352.388193][ T2880] usb 1-1: Using ep0 maxpacket: 16 [ 352.411553][ T2880] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.411789][ T2880] usb 1-1: config 0 has no interface number 0 [ 352.449198][ T2880] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 352.449370][ T2880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.449505][ T2880] usb 1-1: Product: syz [ 352.449588][ T2880] usb 1-1: Manufacturer: syz [ 352.449664][ T2880] usb 1-1: SerialNumber: syz [ 352.453868][ T2880] usb 1-1: config 0 descriptor?? [ 352.469434][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 352.472853][ T5052] netlink: 80 bytes leftover after parsing attributes in process `syz.1.292'. [ 352.699618][ T3791] usb 1-1: USB disconnect, device number 12 [ 353.534721][ T5091] netlink: 'syz.0.301': attribute type 6 has an invalid length. [ 355.704886][ T29] audit: type=1400 audit(355.610:1933): avc: denied { watch } for pid=5101 comm="syz.1.304" path="/163/file1" dev="tmpfs" ino=855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 355.958018][ T5108] input: syz0 as /devices/virtual/input/input7 [ 356.253545][ T5118] netlink: 68 bytes leftover after parsing attributes in process `syz.0.310'. [ 358.576096][ T29] audit: type=1400 audit(358.480:1934): avc: denied { read } for pid=5131 comm="syz.0.315" path="socket:[5356]" dev="sockfs" ino=5356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 358.816987][ T29] audit: type=1400 audit(358.720:1935): avc: denied { getopt } for pid=5157 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 359.093476][ T29] audit: type=1400 audit(359.000:1936): avc: denied { create } for pid=5159 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 359.101330][ T29] audit: type=1400 audit(359.010:1937): avc: denied { bind } for pid=5159 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 359.114781][ T29] audit: type=1400 audit(359.020:1938): avc: denied { write } for pid=5159 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 361.678317][ T29] audit: type=1400 audit(361.590:1939): avc: denied { setopt } for pid=5162 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 361.682057][ T29] audit: type=1400 audit(361.590:1940): avc: denied { read } for pid=5162 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 364.767882][ T29] audit: type=1400 audit(364.680:1941): avc: denied { connect } for pid=5171 comm="syz.1.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 371.303606][ T29] audit: type=1400 audit(371.210:1942): avc: denied { watch_reads } for pid=5194 comm="syz.0.328" path="/148/file1" dev="tmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 371.758408][ T29] audit: type=1400 audit(371.670:1943): avc: denied { execute } for pid=5198 comm="syz.0.330" path="/dev/dri/card1" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 374.160099][ T29] audit: type=1400 audit(374.070:1944): avc: denied { kexec_image_load } for pid=5218 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 376.843150][ T29] audit: type=1400 audit(376.750:1945): avc: denied { accept } for pid=5223 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 377.552550][ T5249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 377.994170][ T5260] ip6gretap0: entered promiscuous mode [ 377.994593][ T5260] macsec1: entered promiscuous mode [ 378.004544][ T5260] ip6gretap0: left promiscuous mode [ 378.117746][ T5260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 378.118170][ T5260] netlink: 'syz.1.350': attribute type 18 has an invalid length. [ 378.118234][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 378.255769][ T29] audit: type=1400 audit(378.160:1946): avc: denied { write } for pid=5256 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 378.271517][ T29] audit: type=1400 audit(378.180:1947): avc: denied { read } for pid=5256 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 378.997938][ T5291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.208896][ T29] audit: type=1400 audit(379.110:1948): avc: denied { write } for pid=5307 comm="syz.0.361" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 379.220108][ T29] audit: type=1400 audit(379.130:1949): avc: denied { ioctl } for pid=5307 comm="syz.0.361" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 379.227903][ T29] audit: type=1400 audit(379.130:1950): avc: denied { set_context_mgr } for pid=5307 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 379.716289][ T29] audit: type=1400 audit(379.620:1951): avc: denied { create } for pid=5326 comm="syz.0.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 381.115880][ T5353] capability: warning: `syz.0.380' uses 32-bit capabilities (legacy support in use) [ 385.518532][ T29] audit: type=1400 audit(385.420:1952): avc: denied { unmount } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 401.486159][ T5396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'. [ 402.392724][ T5401] fuse: Unknown parameter 'use00000000000000000003' [ 403.020655][ T5407] netlink: 36 bytes leftover after parsing attributes in process `syz.1.398'. [ 403.571555][ T5411] fuse: Unknown parameter 'user_i00000000000000000003' [ 404.197835][ T29] audit: type=1400 audit(404.110:1953): avc: denied { create } for pid=5412 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 404.233110][ T29] audit: type=1400 audit(404.140:1954): avc: denied { write } for pid=5412 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 427.546002][ T29] audit: type=1326 audit(427.450:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5456 comm="syz.1.419" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x0 [ 449.307278][ T29] audit: type=1400 audit(449.210:1956): avc: denied { bind } for pid=5503 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 449.307615][ T29] audit: type=1400 audit(449.210:1957): avc: denied { listen } for pid=5503 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 449.353756][ T29] audit: type=1400 audit(449.260:1958): avc: denied { shutdown } for pid=5503 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 449.879004][ T1374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.015756][ T1374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.171958][ T1374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.359223][ T1374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.794943][ T1374] bond0 (unregistering): Released all slaves [ 451.952701][ T1374] hsr_slave_0: left promiscuous mode [ 451.956263][ T1374] hsr_slave_1: left promiscuous mode [ 452.057935][ T1374] veth1_macvtap: left promiscuous mode [ 452.058315][ T1374] veth0_macvtap: left promiscuous mode [ 452.058547][ T1374] veth1_vlan: left promiscuous mode [ 452.058766][ T1374] veth0_vlan: left promiscuous mode [ 453.170711][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 453.458554][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 453.584362][ T23] usb 1-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 453.584776][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.589126][ T23] usb 1-1: config 0 descriptor?? [ 457.376447][ T5508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.395886][ T5508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.188235][ T5508] hsr_slave_0: entered promiscuous mode [ 460.208037][ T5508] hsr_slave_1: entered promiscuous mode [ 460.210285][ T5508] debugfs: 'hsr0' already exists in 'hsr' [ 460.211244][ T5508] Cannot create hsr debugfs directory [ 460.782437][ T5508] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 460.796251][ T5508] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 460.815848][ T5508] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 460.869571][ T5508] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 461.722275][ T5508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.339526][ T5508] veth0_vlan: entered promiscuous mode [ 464.359441][ T5508] veth1_vlan: entered promiscuous mode [ 464.428230][ T5508] veth0_macvtap: entered promiscuous mode [ 464.437811][ T5508] veth1_macvtap: entered promiscuous mode [ 464.514818][ T1313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.515561][ T1313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.515672][ T1313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.515726][ T1313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.967317][ T3809] usb 1-1: USB disconnect, device number 13 [ 469.914193][ T5950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.915927][ T5950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.779999][ T6005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.781264][ T6005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.003280][ T6010] netlink: 236 bytes leftover after parsing attributes in process `syz.2.462'. [ 474.007361][ T29] audit: type=1400 audit(473.910:1959): avc: denied { nlmsg_read } for pid=6009 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 479.128501][ T29] audit: type=1400 audit(479.040:1960): avc: denied { write } for pid=6053 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 479.138735][ T29] audit: type=1400 audit(479.050:1961): avc: denied { accept } for pid=6053 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 479.145359][ T29] audit: type=1400 audit(479.050:1962): avc: denied { read } for pid=6053 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 480.085131][ T6063] cgroup: Unknown subsys name 'cpuset' [ 481.239798][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 487.567126][ T29] audit: type=1400 audit(487.470:1963): avc: denied { mount } for pid=6084 comm="syz.2.482" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 487.630357][ T29] audit: type=1400 audit(487.520:1964): avc: denied { read } for pid=6084 comm="syz.2.482" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 487.637096][ T29] audit: type=1400 audit(487.540:1965): avc: denied { open } for pid=6084 comm="syz.2.482" path="/18/file0" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 494.672855][ T29] audit: type=1400 audit(494.580:1966): avc: denied { mount } for pid=6095 comm="syz.0.486" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 496.276392][ T29] audit: type=1400 audit(496.180:1967): avc: denied { unmount } for pid=5508 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 497.022567][ T29] audit: type=1400 audit(496.930:1968): avc: denied { read } for pid=6104 comm="syz.2.490" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 497.022948][ T29] audit: type=1400 audit(496.930:1969): avc: denied { open } for pid=6104 comm="syz.2.490" path="/21/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 500.555449][ T6120] input: syz1 as /devices/virtual/input/input8 [ 501.079661][ T6126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.081303][ T6126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.183626][ T6165] input: syz1 as /devices/virtual/input/input9 [ 509.799611][ T6181] netlink: 280 bytes leftover after parsing attributes in process `syz.0.512'. [ 509.802274][ T6181] netlink: 280 bytes leftover after parsing attributes in process `syz.0.512'. [ 512.050005][ T29] audit: type=1400 audit(511.930:1970): avc: denied { map_create } for pid=6192 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 512.050371][ T29] audit: type=1400 audit(511.960:1971): avc: denied { perfmon } for pid=6192 comm="syz.0.518" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 512.050682][ T29] audit: type=1400 audit(511.960:1972): avc: denied { map_read map_write } for pid=6192 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 512.064904][ T29] audit: type=1400 audit(511.970:1973): avc: denied { prog_load } for pid=6192 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 512.084203][ T29] audit: type=1400 audit(511.990:1974): avc: denied { bpf } for pid=6192 comm="syz.0.518" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 512.207392][ T29] audit: type=1400 audit(512.110:1975): avc: denied { read write } for pid=3101 comm="syz-executor" name="loop0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 512.207748][ T29] audit: type=1400 audit(512.110:1976): avc: denied { open } for pid=3101 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 512.208049][ T29] audit: type=1400 audit(512.110:1977): avc: denied { ioctl } for pid=3101 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=634 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 512.514581][ T29] audit: type=1400 audit(512.420:1978): avc: denied { read } for pid=6194 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 512.803440][ T29] audit: type=1400 audit(512.710:1979): avc: denied { open } for pid=6196 comm="syz.0.520" path="/dev/ttyS3" dev="devtmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 518.079061][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 518.090063][ T29] audit: type=1400 audit(517.990:1994): avc: denied { create } for pid=6206 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 518.090524][ T29] audit: type=1400 audit(517.990:1995): avc: denied { setopt } for pid=6206 comm="syz.0.523" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 522.548131][ T29] audit: type=1400 audit(522.460:1996): avc: denied { prog_run } for pid=6209 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 523.174003][ T6218] netlink: 'syz.2.526': attribute type 12 has an invalid length. [ 523.628336][ T6220] sock: sock_timestamping_bind_phc: sock not bind to device [ 524.547071][ T29] audit: type=1400 audit(524.450:1997): avc: denied { create } for pid=6225 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 525.377883][ T29] audit: type=1400 audit(525.280:1998): avc: denied { bind } for pid=6225 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 525.382712][ T29] audit: type=1400 audit(525.290:1999): avc: denied { unmount } for pid=6225 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 536.441227][ T29] audit: type=1400 audit(536.350:2000): avc: denied { name_bind } for pid=6234 comm="syz.2.533" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 537.510636][ T29] audit: type=1400 audit(537.420:2001): avc: denied { create } for pid=6239 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 537.533042][ T29] audit: type=1400 audit(537.440:2002): avc: denied { write } for pid=6239 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 537.693401][ T29] audit: type=1400 audit(537.600:2003): avc: denied { connect } for pid=6241 comm="syz.2.536" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 537.725370][ T29] audit: type=1400 audit(537.630:2004): avc: denied { write } for pid=6241 comm="syz.2.536" laddr=fe80::cc66:e2ff:fe96:8faa lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 540.943286][ T29] audit: type=1400 audit(540.850:2005): avc: denied { write } for pid=6245 comm="syz.2.538" path="/net/tun" dev="devtmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 541.569815][ T29] audit: type=1400 audit(541.480:2006): avc: denied { create } for pid=6249 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 541.575984][ T29] audit: type=1400 audit(541.480:2007): avc: denied { write } for pid=6249 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 541.588084][ T29] audit: type=1400 audit(541.500:2008): avc: denied { nlmsg_write } for pid=6249 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 542.767358][ T29] audit: type=1400 audit(542.670:2009): avc: denied { mount } for pid=6258 comm="syz.2.541" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 543.340846][ T29] audit: type=1400 audit(543.250:2010): avc: denied { mounton } for pid=6262 comm="syz.2.543" path="/50/file0" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 543.341612][ T6263] fuse: Bad value for 'fd' [ 546.875765][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.549'. [ 546.876180][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 547.687568][ T6281] Illegal XDP return value 4294967274 on prog (id 36) dev syz_tun, expect packet loss! [ 548.593673][ T29] audit: type=1400 audit(548.500:2011): avc: denied { create } for pid=6288 comm="syz.2.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 548.620132][ T29] audit: type=1400 audit(548.530:2012): avc: denied { write } for pid=6288 comm="syz.2.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 548.810416][ T29] audit: type=1400 audit(548.720:2013): avc: denied { create } for pid=6290 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 548.817994][ T29] audit: type=1400 audit(548.720:2014): avc: denied { bind } for pid=6290 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 549.100649][ T29] audit: type=1400 audit(549.010:2015): avc: denied { setopt } for pid=6290 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 565.658406][ T29] audit: type=1400 audit(565.560:2016): avc: denied { name_bind } for pid=6320 comm="syz.2.564" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 565.662702][ T29] audit: type=1400 audit(565.570:2017): avc: denied { node_bind } for pid=6320 comm="syz.2.564" saddr=::ffff:224.0.0.1 src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 567.567779][ T23] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 567.688187][ T29] audit: type=1400 audit(567.600:2018): avc: denied { execute } for pid=6330 comm="syz.2.567" path="/71/cpuacct.usage_percpu" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 567.734731][ T23] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 567.735458][ T23] usb 1-1: config 1 has no interface number 0 [ 567.738256][ T23] usb 1-1: config 1 interface 105 has no altsetting 0 [ 567.750269][ T23] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 567.750642][ T23] usb 1-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 567.751161][ T23] usb 1-1: Product: syz [ 567.751211][ T23] usb 1-1: Manufacturer: syz [ 567.751277][ T23] usb 1-1: SerialNumber: syz [ 568.810018][ T23] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 568.830579][ T23] aqc111 1-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 42:f9:99:d5:e7:79 [ 569.033757][ T3792] usb 1-1: USB disconnect, device number 14 [ 569.045380][ T3792] aqc111 1-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 569.102018][ T3792] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 569.102703][ T3792] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 569.103188][ T3792] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 569.215060][ T29] audit: type=1400 audit(569.120:2019): avc: denied { write } for pid=6341 comm="dhcpcd-run-hook" name="null" dev="devtmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 569.219609][ T29] audit: type=1400 audit(569.130:2020): avc: denied { open } for pid=6341 comm="dhcpcd-run-hook" path="/dev/null" dev="devtmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 569.322133][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.569'. [ 569.436160][ T29] audit: type=1400 audit(569.340:2021): avc: denied { search } for pid=6355 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.441460][ T29] audit: type=1400 audit(569.350:2022): avc: denied { search } for pid=6355 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=11 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.443314][ T29] audit: type=1400 audit(569.350:2023): avc: denied { search } for pid=6355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.445193][ T29] audit: type=1400 audit(569.350:2024): avc: denied { search } for pid=6355 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=16 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.472138][ T29] audit: type=1400 audit(569.380:2025): avc: denied { read open } for pid=6358 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=16 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.787667][ T3792] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 569.987267][ T3792] usb 1-1: Using ep0 maxpacket: 8 [ 570.012719][ T3792] usb 1-1: unable to get BOS descriptor or descriptor too short [ 570.035043][ T3792] usb 1-1: config 246 has an invalid interface number: 233 but max is 0 [ 570.036146][ T3792] usb 1-1: config 246 has no interface number 0 [ 570.038837][ T3792] usb 1-1: config 246 interface 233 has no altsetting 0 [ 570.063250][ T3792] usb 1-1: string descriptor 0 read error: -22 [ 570.064317][ T3792] usb 1-1: New USB device found, idVendor=0b05, idProduct=18f0, bcdDevice=af.9c [ 570.067827][ T3792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.316393][ T3792] usb 1-1: USB disconnect, device number 15 [ 580.807813][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 580.811087][ T29] audit: type=1400 audit(580.700:2037): avc: denied { mounton } for pid=6387 comm="syz.0.573" path="/272/file0" dev="tmpfs" ino=1403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 580.812924][ T29] audit: type=1400 audit(580.710:2038): avc: denied { mount } for pid=6387 comm="syz.0.573" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 583.305765][ T29] audit: type=1400 audit(583.210:2039): avc: denied { unmount } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 583.518293][ T29] audit: type=1400 audit(583.430:2040): avc: denied { name_bind } for pid=6395 comm="syz.2.576" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 585.372991][ T29] audit: type=1400 audit(585.280:2041): avc: denied { create } for pid=6403 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 585.382422][ T29] audit: type=1400 audit(585.290:2042): avc: denied { allowed } for pid=6403 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 585.394870][ T29] audit: type=1400 audit(585.290:2043): avc: denied { create } for pid=6403 comm="syz.0.578" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 585.395271][ T29] audit: type=1400 audit(585.290:2044): avc: denied { map } for pid=6403 comm="syz.0.578" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 585.395473][ T29] audit: type=1400 audit(585.290:2045): avc: denied { read write } for pid=6403 comm="syz.0.578" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 585.409890][ T29] audit: type=1400 audit(585.320:2046): avc: denied { write } for pid=6403 comm="syz.0.578" path="socket:[8430]" dev="sockfs" ino=8430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 588.163545][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 588.165145][ T29] audit: type=1400 audit(588.070:2051): avc: denied { read } for pid=6409 comm="syz.0.581" dev="nsfs" ino=4026532654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 588.177081][ T29] audit: type=1400 audit(588.070:2052): avc: denied { open } for pid=6409 comm="syz.0.581" path="net:[4026532654]" dev="nsfs" ino=4026532654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 592.545748][ T29] audit: type=1400 audit(592.450:2053): avc: denied { setopt } for pid=6433 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 601.565528][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 602.237539][ T2880] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 602.440136][ T2880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.440644][ T2880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.441206][ T2880] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 602.441267][ T2880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.450929][ T2880] usb 1-1: config 0 descriptor?? [ 603.121971][ T2880] usb 1-1: string descriptor 0 read error: -22 [ 603.555926][ T2880] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71 [ 603.556365][ T2880] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 603.557171][ T2880] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71 [ 603.557550][ T2880] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 603.557692][ T2880] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 603.577541][ T2880] usb 1-1: USB disconnect, device number 16 [ 604.677149][ T29] audit: type=1400 audit(604.580:2054): avc: denied { create } for pid=6474 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 604.870377][ T29] audit: type=1400 audit(604.780:2055): avc: denied { ioctl } for pid=6474 comm="syz.2.598" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8529 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 605.555014][ T29] audit: type=1400 audit(605.460:2056): avc: denied { create } for pid=6470 comm="syz.0.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 605.562022][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 605.563319][ T29] audit: type=1400 audit(605.470:2057): avc: denied { write } for pid=6470 comm="syz.0.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 605.612418][ T6480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.596'. [ 615.798280][ T6492] binder: 6491:6492 ioctl c0306201 200003c0 returned -22 [ 615.903365][ T6494] input: syz0 as /devices/virtual/input/input10 [ 620.262417][ T29] audit: type=1400 audit(620.170:2058): avc: denied { nlmsg_read } for pid=6525 comm="syz.2.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 620.264606][ T6526] netlink: 60 bytes leftover after parsing attributes in process `syz.2.613'. [ 620.280189][ T29] audit: type=1400 audit(620.190:2059): avc: denied { read } for pid=6525 comm="syz.2.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 641.007446][ T29] audit: type=1400 audit(640.900:2060): avc: denied { accept } for pid=6542 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 650.847340][ T29] audit: type=1400 audit(650.750:2061): avc: denied { create } for pid=6564 comm="syz.2.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 650.854056][ T29] audit: type=1400 audit(650.760:2062): avc: denied { write } for pid=6564 comm="syz.2.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 652.786103][ T6572] netlink: 'syz.2.628': attribute type 3 has an invalid length. [ 654.584136][ T6579] syzkaller0: entered promiscuous mode [ 654.584651][ T6579] syzkaller0: entered allmulticast mode [ 654.623924][ T29] audit: type=1400 audit(654.530:2063): avc: denied { write } for pid=6578 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 657.297121][ T23] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 657.455436][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 657.456684][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.457638][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.458363][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 657.459341][ T23] usb 1-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 657.460156][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.464611][ T23] usb 1-1: config 0 descriptor?? [ 663.089304][ T23] usbhid 1-1:0.0: can't add hid device: -32 [ 663.090311][ T23] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 665.768308][ T29] audit: type=1400 audit(665.670:2064): avc: denied { ioctl } for pid=6635 comm="syz.2.653" path="socket:[8647]" dev="sockfs" ino=8647 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 669.651201][ T29] audit: type=1400 audit(669.550:2065): avc: denied { create } for pid=6652 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 675.086188][ T6677] netlink: 184 bytes leftover after parsing attributes in process `syz.2.668'. [ 683.537661][ T29] audit: type=1400 audit(683.450:2066): avc: denied { ioctl } for pid=6688 comm="syz.2.673" path="socket:[7901]" dev="sockfs" ino=7901 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 692.393376][ T29] audit: type=1400 audit(692.300:2067): avc: denied { read } for pid=6705 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 692.902911][ T29] audit: type=1400 audit(692.810:2068): avc: denied { write } for pid=6705 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 693.123341][ T29] audit: type=1400 audit(693.030:2069): avc: denied { create } for pid=6712 comm="syz.2.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 693.128295][ T29] audit: type=1400 audit(693.040:2070): avc: denied { bind } for pid=6712 comm="syz.2.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 694.907416][ T29] audit: type=1400 audit(694.810:2071): avc: denied { write } for pid=6739 comm="syz.2.693" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 700.795472][ T29] audit: type=1400 audit(700.700:2072): avc: denied { execute } for pid=6750 comm="syz-executor" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 700.800586][ T29] audit: type=1400 audit(700.710:2073): avc: denied { execute_no_trans } for pid=6750 comm="syz-executor" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 701.008347][ T29] audit: type=1400 audit(700.920:2074): avc: denied { mounton } for pid=6751 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 703.963467][ T6751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.975284][ T6751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.026052][ T6751] hsr_slave_0: entered promiscuous mode [ 705.032421][ T6751] hsr_slave_1: entered promiscuous mode [ 705.035463][ T6751] debugfs: 'hsr0' already exists in 'hsr' [ 705.037348][ T6751] Cannot create hsr debugfs directory [ 705.425545][ T6751] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 705.437565][ T6751] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 705.447488][ T6751] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 705.456355][ T6751] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 706.392173][ T6751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.928118][ T6751] veth0_vlan: entered promiscuous mode [ 709.955731][ T6751] veth1_vlan: entered promiscuous mode [ 710.029002][ T6751] veth0_macvtap: entered promiscuous mode [ 710.040600][ T6751] veth1_macvtap: entered promiscuous mode [ 710.129211][ T54] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.130967][ T54] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.132142][ T54] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.133281][ T54] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.242781][ T29] audit: type=1400 audit(710.150:2075): avc: denied { mounton } for pid=6751 comm="syz-executor" path="/syzkaller.ChHeAX/syz-tmp" dev="vda" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 710.246383][ T29] audit: type=1400 audit(710.150:2076): avc: denied { mount } for pid=6751 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 710.254964][ T29] audit: type=1400 audit(710.160:2077): avc: denied { mount } for pid=6751 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 710.262355][ T29] audit: type=1400 audit(710.170:2078): avc: denied { mounton } for pid=6751 comm="syz-executor" path="/syzkaller.ChHeAX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 710.266326][ T29] audit: type=1400 audit(710.170:2079): avc: denied { mounton } for pid=6751 comm="syz-executor" path="/syzkaller.ChHeAX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 710.288762][ T29] audit: type=1400 audit(710.180:2080): avc: denied { unmount } for pid=6751 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 710.289112][ T29] audit: type=1400 audit(710.190:2081): avc: denied { mounton } for pid=6751 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 710.289184][ T29] audit: type=1400 audit(710.190:2082): avc: denied { mount } for pid=6751 comm="syz-executor" name="/" dev="gadgetfs" ino=3146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 710.289243][ T29] audit: type=1400 audit(710.190:2083): avc: denied { mount } for pid=6751 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 710.289290][ T29] audit: type=1400 audit(710.190:2084): avc: denied { mounton } for pid=6751 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 711.038811][ T7105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.041366][ T7105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.757920][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.758999][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.234496][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.235324][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.081633][ T2880] usb 1-1: USB disconnect, device number 17 [ 738.503622][ T7177] capability: warning: `syz.2.723' uses deprecated v2 capabilities in a way that may be insecure [ 741.310433][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 741.310805][ T29] audit: type=1400 audit(741.220:2088): avc: denied { write } for pid=7197 comm="syz.2.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 747.781510][ T7213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.782323][ T7213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.365676][ T29] audit: type=1400 audit(760.270:2089): avc: denied { bind } for pid=7230 comm="syz.3.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 791.033305][ T29] audit: type=1400 audit(790.940:2090): avc: denied { create } for pid=7282 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 794.895452][ T7316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.902822][ T7316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.224550][ T7332] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 812.934328][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'. [ 814.879926][ T7361] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44 sclass=netlink_xfrm_socket pid=7361 comm=syz.2.778 [ 815.909399][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 817.983670][ T7374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.992566][ T7374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.225841][ T29] audit: type=1400 audit(821.130:2091): avc: denied { create } for pid=7404 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 821.823448][ T29] audit: type=1400 audit(821.730:2092): avc: denied { append } for pid=7404 comm="syz.3.794" name="ptmx" dev="devtmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 823.926355][ T29] audit: type=1400 audit(823.830:2093): avc: denied { setopt } for pid=7409 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 837.913305][ T29] audit: type=1400 audit(837.820:2094): avc: denied { mount } for pid=7420 comm="syz.2.799" name="/" dev="ramfs" ino=10427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 837.937914][ T29] audit: type=1400 audit(837.840:2095): avc: denied { mounton } for pid=7420 comm="syz.2.799" path="/file0" dev="ramfs" ino=10428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 884.957198][ T29] audit: type=1400 audit(884.830:2096): avc: denied { connect } for pid=7467 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 899.288920][ T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.589687][ T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.069908][ T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.184552][ T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.845364][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.870362][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.874355][ T54] bond0 (unregistering): Released all slaves [ 900.969210][ T54] hsr_slave_0: left promiscuous mode [ 900.973057][ T54] veth1_macvtap: left promiscuous mode [ 900.973260][ T54] veth0_macvtap: left promiscuous mode [ 900.973592][ T54] veth1_vlan: left promiscuous mode [ 900.973665][ T54] veth0_vlan: left promiscuous mode [ 910.621054][ T7539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.623680][ T7539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.450256][ T7554] netlink: 'syz.3.827': attribute type 10 has an invalid length. [ 911.759639][ T29] audit: type=1400 audit(911.670:2097): avc: denied { sqpoll } for pid=7560 comm="syz.3.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 911.781222][ T29] audit: type=1400 audit(911.690:2098): avc: denied { write } for pid=7560 comm="syz.3.830" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 911.937756][ T29] audit: type=1400 audit(911.800:2099): avc: denied { override_creds } for pid=7560 comm="syz.3.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 912.159541][ T29] audit: type=1400 audit(912.050:2100): avc: denied { mount } for pid=7564 comm="syz.3.832" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 912.273576][ T29] audit: type=1400 audit(912.180:2101): avc: denied { unmount } for pid=6751 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 930.736333][ T29] audit: type=1400 audit(930.640:2102): avc: denied { create } for pid=7620 comm="syz.2.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 933.567869][ T29] audit: type=1400 audit(933.470:2103): avc: denied { create } for pid=7649 comm="syz.2.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 933.579157][ T29] audit: type=1400 audit(933.490:2104): avc: denied { write } for pid=7649 comm="syz.2.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 935.377555][ T29] audit: type=1400 audit(935.280:2105): avc: denied { setopt } for pid=7626 comm="syz.3.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 935.379742][ T7660] lo: Caught tx_queue_len zero misconfig [ 938.178006][ T29] audit: type=1400 audit(938.090:2106): avc: denied { getopt } for pid=7665 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 950.493846][ T29] audit: type=1400 audit(950.400:2107): avc: denied { setopt } for pid=7690 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 979.079353][ T7721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.084440][ T7721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.255105][ T7721] hsr_slave_0: entered promiscuous mode [ 980.266118][ T7721] hsr_slave_1: entered promiscuous mode [ 980.733901][ T7721] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 980.744622][ T7721] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 980.753175][ T7721] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 980.773184][ T7721] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 981.875923][ T7721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.340558][ T7721] veth0_vlan: entered promiscuous mode [ 986.380574][ T7721] veth1_vlan: entered promiscuous mode [ 986.489115][ T7721] veth0_macvtap: entered promiscuous mode [ 986.513709][ T7721] veth1_macvtap: entered promiscuous mode [ 986.632863][ T2009] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.634178][ T2009] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.635382][ T2009] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.636383][ T2009] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.255804][ T1313] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.311362][ T1313] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.369157][ T1313] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.432736][ T1313] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.771868][ T1313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.782506][ T1313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.786371][ T1313] bond0 (unregistering): Released all slaves [ 1006.902754][ T1313] hsr_slave_0: left promiscuous mode [ 1006.905463][ T1313] hsr_slave_1: left promiscuous mode [ 1006.914861][ T1313] veth1_macvtap: left promiscuous mode [ 1006.917507][ T1313] veth0_macvtap: left promiscuous mode [ 1006.918479][ T1313] veth1_vlan: left promiscuous mode [ 1006.920124][ T1313] veth0_vlan: left promiscuous mode [ 1076.721604][ T29] audit: type=1400 audit(1076.630:2108): avc: denied { wake_alarm } for pid=8273 comm="syz.2.907" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1089.108498][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.110304][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.237871][ T8332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.244378][ T8332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.661604][ T8375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.664482][ T8375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.867366][ T29] audit: type=1400 audit(1133.770:2109): avc: denied { setopt } for pid=8381 comm="syz.2.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1147.861834][ T8392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.863637][ T8392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.040999][ T29] audit: type=1400 audit(1153.950:2110): avc: denied { bind } for pid=8399 comm="syz.2.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1154.313169][ T8402] netlink: 120 bytes leftover after parsing attributes in process `syz.2.954'. [ 1154.319198][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 1157.578365][ T29] audit: type=1400 audit(1157.490:2111): avc: denied { setopt } for pid=8403 comm="syz.2.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1158.324946][ T8408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.326226][ T8408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.370030][ T8422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.370674][ T8422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.436950][ T29] audit: type=1400 audit(1168.340:2112): avc: denied { relabelfrom } for pid=8425 comm="syz.4.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1168.437982][ T29] audit: type=1400 audit(1168.350:2113): avc: denied { relabelto } for pid=8425 comm="syz.4.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1170.629612][ T8447] syz_tun: entered allmulticast mode [ 1170.655890][ T8446] syz_tun: left allmulticast mode [ 1181.691968][ T8589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.701975][ T8589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.669330][ T29] audit: type=1400 audit(1186.360:2114): avc: denied { connect } for pid=8600 comm="syz.4.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1186.669700][ T29] audit: type=1400 audit(1186.380:2115): avc: denied { read } for pid=8600 comm="syz.4.974" laddr=fe80::a8aa:aaff:feaa:aa10 lport=36662 faddr=ff02::1 fport=19977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1195.099096][ T8615] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1195.384092][ T8619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.385700][ T8619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.003636][ T29] audit: type=1400 audit(1197.910:2116): avc: denied { write } for pid=8626 comm="syz.4.984" name="icmp" dev="proc" ino=4026532719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1205.173651][ T29] audit: type=1400 audit(1205.080:2117): avc: denied { create } for pid=8630 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1205.188362][ T29] audit: type=1400 audit(1205.090:2118): avc: denied { bind } for pid=8630 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1205.190175][ T29] audit: type=1400 audit(1205.100:2119): avc: denied { listen } for pid=8630 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1205.276210][ T8633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.278103][ T8633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.545374][ T8639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.546229][ T8639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.974777][ T29] audit: type=1400 audit(1205.880:2120): avc: denied { ioctl } for pid=8650 comm="syz.4.991" path="socket:[11612]" dev="sockfs" ino=11612 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1219.754534][ T29] audit: type=1400 audit(1219.660:2121): avc: denied { map } for pid=8676 comm="syz.4.1000" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1219.772935][ T29] audit: type=1400 audit(1219.680:2122): avc: denied { call } for pid=8676 comm="syz.4.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1219.779163][ T29] audit: type=1400 audit(1219.680:2123): avc: denied { transfer } for pid=8676 comm="syz.4.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1236.269056][ T29] audit: type=1400 audit(1236.180:2124): avc: denied { ioctl } for pid=8706 comm="syz.4.1013" path="socket:[11719]" dev="sockfs" ino=11719 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1249.028210][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1018'. [ 1251.555453][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 1291.254174][ T8768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1032'. [ 1307.820770][ T8789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.821978][ T8789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.822661][ T29] audit: type=1400 audit(1320.730:2125): avc: denied { create } for pid=8795 comm="syz.2.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1320.829390][ T29] audit: type=1400 audit(1320.740:2126): avc: denied { bind } for pid=8795 comm="syz.2.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1325.091419][ T29] audit: type=1400 audit(1325.000:2127): avc: denied { module_load } for pid=8805 comm="syz.2.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1325.092879][ T8808] Invalid ELF header type: 3 != 1 [ 1337.801769][ T29] audit: type=1400 audit(1337.700:2128): avc: denied { bind } for pid=8817 comm="syz.2.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1337.802876][ T29] audit: type=1400 audit(1337.700:2129): avc: denied { listen } for pid=8817 comm="syz.2.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1337.803870][ T29] audit: type=1400 audit(1337.700:2130): avc: denied { connect } for pid=8817 comm="syz.2.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1337.804747][ T29] audit: type=1400 audit(1337.710:2131): avc: denied { read } for pid=8817 comm="syz.2.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1338.918910][ T29] audit: type=1400 audit(1338.830:2132): avc: denied { mount } for pid=8820 comm="syz.2.1053" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1345.393461][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 1345.396205][ T8834] vlan0: entered promiscuous mode [ 1345.653619][ T8836] netlink: 'syz.2.1060': attribute type 49 has an invalid length. [ 1356.061122][ T8841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.080583][ T8841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.079581][ T8841] hsr_slave_0: entered promiscuous mode [ 1357.083399][ T8841] hsr_slave_1: entered promiscuous mode [ 1357.085796][ T8841] debugfs: 'hsr0' already exists in 'hsr' [ 1357.087954][ T8841] Cannot create hsr debugfs directory [ 1357.553847][ T8841] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1357.571087][ T8841] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1357.578263][ T8841] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1357.588133][ T8841] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1358.388162][ T8841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.812661][ T8841] veth0_vlan: entered promiscuous mode [ 1361.830557][ T8841] veth1_vlan: entered promiscuous mode [ 1361.890421][ T8841] veth0_macvtap: entered promiscuous mode [ 1361.900807][ T8841] veth1_macvtap: entered promiscuous mode [ 1361.962714][ T2009] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.963780][ T2009] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.964837][ T2009] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.965764][ T2009] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.674242][ T9196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.708501][ T9196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.951928][ T9200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.960270][ T9200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.991993][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.069192][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.119332][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.178345][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.521696][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1378.539452][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1378.554324][ T52] bond0 (unregistering): Released all slaves [ 1378.670588][ T52] hsr_slave_0: left promiscuous mode [ 1378.673210][ T52] hsr_slave_1: left promiscuous mode [ 1378.697362][ T52] veth1_macvtap: left promiscuous mode [ 1378.697734][ T52] veth0_macvtap: left promiscuous mode [ 1378.698141][ T52] veth1_vlan: left promiscuous mode [ 1378.698400][ T52] veth0_vlan: left promiscuous mode [ 1392.252107][ T9275] netlink: 'syz.2.1069': attribute type 10 has an invalid length. [ 1392.268530][ T9275] bond0: (slave bond_slave_1): Releasing backup interface [ 1404.830103][ T29] audit: type=1400 audit(1404.740:2133): avc: denied { execute_no_trans } for pid=9310 comm="syz.5.1073" path="/8/file1" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1413.379748][ T29] audit: type=1400 audit(1413.290:2134): avc: denied { block_suspend } for pid=9323 comm="syz.2.1078" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1415.213052][ T29] audit: type=1400 audit(1415.120:2135): avc: denied { setopt } for pid=9331 comm="syz.5.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1415.215780][ T29] audit: type=1400 audit(1415.120:2136): avc: denied { ioctl } for pid=9331 comm="syz.5.1079" path="socket:[13289]" dev="sockfs" ino=13289 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1416.195831][ T29] audit: type=1400 audit(1416.100:2137): avc: denied { connect } for pid=9342 comm="syz.5.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1416.208741][ T29] audit: type=1400 audit(1416.120:2138): avc: denied { write } for pid=9342 comm="syz.5.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1416.220087][ T29] audit: type=1400 audit(1416.120:2139): avc: denied { read } for pid=9342 comm="syz.5.1082" path="socket:[12159]" dev="sockfs" ino=12159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1430.409033][ T29] audit: type=1804 audit(1430.320:2140): pid=9357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1087" name="bus" dev="ramfs" ino=13321 res=1 errno=0 [ 1433.322414][ T9369] kernel profiling enabled (shift: 9) [ 1445.070084][ T9372] netlink: 'syz.2.1090': attribute type 6 has an invalid length. [ 1445.087115][ T9372] netlink: 14623 bytes leftover after parsing attributes in process `syz.2.1090'. [ 1450.062425][ T29] audit: type=1400 audit(1449.970:2141): avc: denied { ioctl } for pid=9379 comm="syz.2.1094" path="socket:[13344]" dev="sockfs" ino=13344 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1450.090079][ T29] audit: type=1400 audit(1450.000:2142): avc: denied { write } for pid=9379 comm="syz.2.1094" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1457.137491][ T29] audit: type=1400 audit(1457.040:2143): avc: denied { create } for pid=9388 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1457.139336][ T29] audit: type=1400 audit(1457.050:2144): avc: denied { getopt } for pid=9388 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1477.791177][ T9398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.802781][ T9398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1478.862304][ T9398] hsr_slave_0: entered promiscuous mode [ 1478.869423][ T9398] hsr_slave_1: entered promiscuous mode [ 1479.282559][ T9398] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1479.292853][ T9398] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1479.309960][ T9398] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1479.320198][ T9398] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1480.322167][ T9398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.840962][ T9398] veth0_vlan: entered promiscuous mode [ 1484.899049][ T9398] veth1_vlan: entered promiscuous mode [ 1485.022956][ T9398] veth0_macvtap: entered promiscuous mode [ 1485.043500][ T9398] veth1_macvtap: entered promiscuous mode [ 1485.161915][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.170814][ T38] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.174903][ T38] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.175235][ T38] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.580812][ T29] audit: type=1400 audit(1485.480:2145): avc: denied { bind } for pid=9749 comm="syz.6.1100" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1485.583443][ T29] audit: type=1400 audit(1485.490:2146): avc: denied { name_bind } for pid=9749 comm="syz.6.1100" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1485.585310][ T29] audit: type=1400 audit(1485.490:2147): avc: denied { node_bind } for pid=9749 comm="syz.6.1100" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1507.960590][ T8741] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.074175][ T8741] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.190036][ T8741] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.263338][ T8741] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.510044][ T29] audit: type=1400 audit(1508.420:2148): avc: denied { getopt } for pid=9828 comm="syz.6.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1508.854435][ T8741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.873006][ T8741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.931391][ T8741] bond0 (unregistering): Released all slaves [ 1509.061302][ T8741] hsr_slave_0: left promiscuous mode [ 1509.076240][ T8741] hsr_slave_1: left promiscuous mode [ 1509.170069][ T8741] veth1_macvtap: left promiscuous mode [ 1509.170655][ T8741] veth0_macvtap: left promiscuous mode [ 1509.170906][ T8741] veth1_vlan: left promiscuous mode [ 1509.171035][ T8741] veth0_vlan: left promiscuous mode [ 1512.600557][ T9860] syz.6.1120 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1525.382128][ T29] audit: type=1400 audit(1525.290:2149): avc: denied { bind } for pid=9892 comm="syz.2.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1525.385486][ T29] audit: type=1400 audit(1525.290:2150): avc: denied { setopt } for pid=9892 comm="syz.2.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1549.078884][ T29] audit: type=1400 audit(1548.990:2151): avc: denied { map } for pid=9974 comm="syz.6.1140" path="/dev/adsp1" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1554.394239][ T9982] netlink: 308 bytes leftover after parsing attributes in process `syz.6.1141'. [ 1579.173163][ T29] audit: type=1400 audit(1579.080:2152): avc: denied { create } for pid=10011 comm="syz.6.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1579.182531][ T29] audit: type=1400 audit(1579.090:2153): avc: denied { sys_admin } for pid=10011 comm="syz.6.1151" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1579.207942][ T29] audit: type=1400 audit(1579.120:2154): avc: denied { remount } for pid=10011 comm="syz.6.1151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1619.697452][ T29] audit: type=1400 audit(1619.600:2155): avc: denied { create } for pid=10066 comm="syz.6.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1640.101303][T10086] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1173'. [ 1640.284269][ T29] audit: type=1400 audit(1640.190:2156): avc: denied { associate } for pid=10090 comm="syz.6.1175" name="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1648.845193][ T29] audit: type=1400 audit(1648.750:2157): avc: denied { bind } for pid=10089 comm="syz.2.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1648.847722][ T29] audit: type=1400 audit(1648.750:2158): avc: denied { node_bind } for pid=10089 comm="syz.2.1174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1657.307630][T10106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.312053][T10106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.791033][ T29] audit: type=1400 audit(1657.700:2159): avc: denied { create } for pid=10111 comm="syz.6.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1658.420079][T10115] mmap: syz.6.1183 (10115) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1659.681515][T10118] 8<--- cut here --- [ 1659.684151][T10118] Unable to handle kernel paging request at virtual address fee04f2a when write [ 1659.686300][T10118] [fee04f2a] *pgd=80000080007003, *pmd=00000000 [ 1659.688518][T10118] Internal error: Oops: a06 [#1] SMP ARM [ 1659.692615][T10118] Modules linked in: [ 1659.693641][T10118] CPU: 0 UID: 0 PID: 10118 Comm: syz.6.1184 Not tainted syzkaller #0 PREEMPT [ 1659.694116][T10118] Hardware name: ARM-Versatile Express [ 1659.694866][T10118] PC is at subdev_8255_io+0x60/0x6c [ 1659.695228][T10118] LR is at subdev_8255_io+0x4c/0x6c [ 1659.696107][T10118] pc : [<813db598>] lr : [<813db584>] psr: 60000013 [ 1659.696434][T10118] sp : dfab5cb8 ip : dfab5cb8 fp : dfab5cd4 [ 1659.696680][T10118] r10: 00000000 r9 : 00000000 r8 : 00000084 [ 1659.697236][T10118] r7 : 00004f27 r6 : 0000009b r5 : 8402bf00 r4 : 00004f2a [ 1659.697697][T10118] r3 : 0000009b r2 : fee04f2a r1 : 00000001 r0 : 8402bf00 [ 1659.699763][T10118] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 1659.706433][T10118] Control: 30c5387d Table: 85ad3340 DAC: fffffffd [ 1659.707117][T10118] Register r0 information: slab kmalloc-192 start 8402bf00 pointer offset 0 size 192 [ 1659.717744][T10118] Register r1 information: non-paged memory [ 1659.718360][T10118] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 1659.719061][T10118] Register r3 information: non-paged memory [ 1659.719346][T10118] Register r4 information: non-paged memory [ 1659.719621][T10118] Register r5 information: slab kmalloc-192 start 8402bf00 pointer offset 0 size 192 [ 1659.720137][T10118] Register r6 information: non-paged memory [ 1659.720418][T10118] Register r7 information: non-paged memory [ 1659.720710][T10118] Register r8 information: non-paged memory [ 1659.721129][T10118] Register r9 information: NULL pointer [ 1659.721398][T10118] Register r10 information: NULL pointer [ 1659.721675][T10118] Register r11 information: 2-page vmalloc region starting at 0xdfab4000 allocated at kernel_clone+0xac/0x3ec [ 1659.722226][T10118] Register r12 information: 2-page vmalloc region starting at 0xdfab4000 allocated at kernel_clone+0xac/0x3ec [ 1659.722804][T10118] Process syz.6.1184 (pid: 10118, stack limit = 0xdfab4000) [ 1659.723227][T10118] Stack: (0xdfab5cb8 to 0xdfab6000) [ 1659.723616][T10118] 5ca0: 813db538 8402bf00 [ 1659.724039][T10118] 5cc0: 00004f27 00004f27 dfab5cf4 dfab5cd8 813db270 813db544 00004f27 b5403587 [ 1659.724386][T10118] 5ce0: 8398b000 8398b000 dfab5d14 dfab5cf8 813db630 813db224 8398b000 8402bf00 [ 1659.724743][T10118] 5d00: dfab5da4 00004f27 dfab5d54 dfab5d18 813db824 813db5b0 82af1fe0 86e21880 [ 1659.725176][T10118] 5d20: 828215f0 00000000 00000000 829d238c 8402bf00 8402bf44 dfab5d90 8402bf00 [ 1659.725617][T10118] 5d40: 00000000 82b25910 dfab5d8c dfab5d58 813ca720 813db774 200000c0 00000000 [ 1659.726046][T10118] 5d60: dfab5d7c 200000c0 8402bf00 b5403587 200000c0 83a5b000 40946400 00000003 [ 1659.726458][T10118] 5d80: dfab5e4c dfab5d90 813c626c 813ca624 35353238 00000000 00000000 00000000 [ 1659.727212][T10118] 5da0: 00000000 00004f27 00000005 00000003 00000004 00000001 0000000c 00000007 [ 1659.727987][T10118] 5dc0: 00000004 0000000a 00000007 00000002 00000001 fffffffe 00000001 00000002 [ 1659.728704][T10118] 5de0: 00000101 00000004 00000009 00000003 0000352f 00000099 0000caa7 00000084 [ 1659.732684][T10118] 5e00: 20001e58 00000007 02000e67 0000001c 00000004 0000007f 00000000 fffffff8 [ 1659.737424][T10118] 5e20: 00000000 6904e4aa 00000000 849b9d80 8402bf00 200000c0 200000c0 83a5b000 [ 1659.741618][T10118] 5e40: dfab5f14 dfab5e50 813c7238 813c6178 00000000 00000000 00000000 6904e4aa [ 1659.746790][T10118] 5e60: 00000000 00000000 824625b4 0000005f 83e5d408 8402bf30 84103a2c 83a5b000 [ 1659.747325][T10118] 5e80: dfab5ee4 dfab5e90 807a7684 8079da7c 00000064 00000001 00000000 dfab5eac [ 1659.747687][T10118] 5ea0: 85b70910 83427000 00006400 0000000b dfab5ea0 00000000 00000000 6904e4aa [ 1659.748006][T10118] 5ec0: 849b9d80 40946400 200000c0 200000c0 849b9d80 00000003 dfab5ef4 dfab5ee8 [ 1659.748348][T10118] 5ee0: 807a77a4 6904e4aa dfab5f14 40946400 00000000 849b9d81 200000c0 849b9d80 [ 1659.748671][T10118] 5f00: 00000003 83a5b000 dfab5fa4 dfab5f18 805788b8 813c6c68 ecac8b10 83a5b000 [ 1659.748991][T10118] 5f20: dfab5f3c dfab5f30 81a60ab8 81a60988 dfab5f54 dfab5f40 8025c484 8028d914 [ 1659.749321][T10118] 5f40: dfab5fb0 40000000 dfab5f84 dfab5f58 802229ec 8025c440 00000000 8281cfb4 [ 1659.749622][T10118] 5f60: dfab5fb0 0014ca70 ecac8b10 80222940 00000000 6904e4aa dfab5fac 00000000 [ 1659.749931][T10118] 5f80: 00000000 00316308 00000036 8020029c 83a5b000 00000036 00000000 dfab5fa8 [ 1659.750268][T10118] 5fa0: 80200060 80578794 00000000 00000000 00000003 40946400 200000c0 00000000 [ 1659.750590][T10118] 5fc0: 00000000 00000000 00316308 00000036 00300000 00000000 00006364 76f840bc [ 1659.750958][T10118] 5fe0: 76f83ec0 76f83eb0 000195a4 00132510 60000010 00000003 00000000 00000000 [ 1659.751423][T10118] Call trace: [ 1659.751845][T10118] [<813db538>] (subdev_8255_io) from [<813db270>] (subdev_8255_do_config+0x58/0x60) [ 1659.752506][T10118] r7:00004f27 r6:00004f27 r5:8402bf00 r4:813db538 [ 1659.752849][T10118] [<813db218>] (subdev_8255_do_config) from [<813db630>] (subdev_8255_io_init+0x8c/0x9c) [ 1659.753261][T10118] r4:8398b000 [ 1659.753420][T10118] [<813db5a4>] (subdev_8255_io_init) from [<813db824>] (dev_8255_attach+0xbc/0x114) [ 1659.753949][T10118] r7:00004f27 r6:dfab5da4 r5:8402bf00 r4:8398b000 [ 1659.754207][T10118] [<813db768>] (dev_8255_attach) from [<813ca720>] (comedi_device_attach+0x108/0x250) [ 1659.754657][T10118] r10:82b25910 r9:00000000 r8:8402bf00 r7:dfab5d90 r6:8402bf44 r5:8402bf00 [ 1659.755038][T10118] r4:829d238c [ 1659.755230][T10118] [<813ca618>] (comedi_device_attach) from [<813c626c>] (do_devconfig_ioctl+0x100/0x220) [ 1659.755679][T10118] r10:00000003 r9:40946400 r8:83a5b000 r7:200000c0 r6:b5403587 r5:8402bf00 [ 1659.756036][T10118] r4:200000c0 [ 1659.756213][T10118] [<813c616c>] (do_devconfig_ioctl) from [<813c7238>] (comedi_unlocked_ioctl+0x5dc/0x1c50) [ 1659.756873][T10118] r8:83a5b000 r7:200000c0 r6:200000c0 r5:8402bf00 r4:849b9d80 [ 1659.757308][T10118] [<813c6c5c>] (comedi_unlocked_ioctl) from [<805788b8>] (sys_ioctl+0x130/0xba0) [ 1659.760916][T10118] r10:83a5b000 r9:00000003 r8:849b9d80 r7:200000c0 r6:849b9d81 r5:00000000 [ 1659.763556][T10118] r4:40946400 [ 1659.765265][T10118] [<80578788>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1659.767043][T10118] Exception stack(0xdfab5fa8 to 0xdfab5ff0) [ 1659.769706][T10118] 5fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 1659.776655][T10118] 5fc0: 00000000 00000000 00316308 00000036 00300000 00000000 00006364 76f840bc [ 1659.777453][T10118] 5fe0: 76f83ec0 76f83eb0 000195a4 00132510 [ 1659.777728][T10118] r10:00000036 r9:83a5b000 r8:8020029c r7:00000036 r6:00316308 r5:00000000 [ 1659.778124][T10118] r4:00000000 [ 1659.778725][T10118] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 1659.779412][T10118] ---[ end trace 0000000000000000 ]--- [ 1659.780302][T10118] Kernel panic - not syncing: Fatal exception [ 1659.784460][T10118] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:20:47 Registers: info registers vcpu 0 CPU#0 R00=82b15124 R01=80000193 R02=83a5b000 R03=0000288a R04=82b1491c R05=80000193 R06=00000f01 R07=00000000 R08=82827128 R09=00000000 R10=000006f7 R11=dfab5914 R12=dfab5918 R13=dfab5908 R14=80a0d6d8 R15=81a6d47c PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=60000193 R01=7effffff R02=00000000 R03=b5003500 R04=dfaddec0 R05=2012fbe0 R06=000097d9 R07=00000002 R08=00000000 R09=8414d400 R10=00010106 R11=dfaddf5c R12=dfadde00 R13=82a78280 R14=60000113 R15=ffff1040 PSR=60000192 -ZC- A S irq32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000