last executing test programs: 9.260346246s ago: executing program 1 (id=2): timer_create(0x1, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) timer_delete(0x0) 8.863394818s ago: executing program 0 (id=1): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) close(0x3) 7.268964387s ago: executing program 1 (id=3): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 7.188105181s ago: executing program 0 (id=4): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 5.987640738s ago: executing program 0 (id=5): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000100)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.802154848s ago: executing program 1 (id=6): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x2b, 0x51, 0x32, 0x40, 0x424, 0x9d00, 0x5327, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x7f, 0x0, 0x0, 0x1, 0x16, 0xdc, 0x2c}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000940)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000001080)={0x40}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000300)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.539088569s ago: executing program 0 (id=7): r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x2, &(0x7f0000000100)='\a\x00') syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="400501"]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 0 (id=8): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x8, 0x2]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x8, 0xa]) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x27, 0x60, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x3, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x1b, 0x7}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x0, 0xb3, 0x5, 0x10, 0x22}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x6, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0xcb, 0x2, 0x40, 0x8, 0x6, [0x30, 0xd1]}]}}) kernel console output (not intermixed with test programs): [ 47.836701][ T28] audit: type=1400 audit(47.770:56): avc: denied { read write } for pid=3076 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.837176][ T28] audit: type=1400 audit(47.770:57): avc: denied { open } for pid=3076 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:60900' (ED25519) to the list of known hosts. [ 62.383038][ T28] audit: type=1400 audit(62.300:58): avc: denied { name_bind } for pid=3079 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.612537][ T28] audit: type=1400 audit(64.530:59): avc: denied { execute } for pid=3080 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.645153][ T28] audit: type=1400 audit(64.570:60): avc: denied { execute_no_trans } for pid=3080 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 68.843562][ T28] audit: type=1400 audit(68.780:61): avc: denied { mounton } for pid=3080 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 68.847533][ T28] audit: type=1400 audit(68.780:62): avc: denied { mount } for pid=3080 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.865031][ T3080] cgroup: Unknown subsys name 'net' [ 68.875296][ T28] audit: type=1400 audit(68.810:63): avc: denied { unmount } for pid=3080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.020667][ T3080] cgroup: Unknown subsys name 'cpuset' [ 69.029099][ T3080] cgroup: Unknown subsys name 'hugetlb' [ 69.030055][ T3080] cgroup: Unknown subsys name 'rlimit' [ 69.214343][ T28] audit: type=1400 audit(69.150:64): avc: denied { setattr } for pid=3080 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.214816][ T28] audit: type=1400 audit(69.150:65): avc: denied { mounton } for pid=3080 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 69.215053][ T28] audit: type=1400 audit(69.150:66): avc: denied { mount } for pid=3080 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 69.350384][ T3082] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 69.354853][ T28] audit: type=1400 audit(69.290:67): avc: denied { relabelto } for pid=3082 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 69.357231][ T28] audit: type=1400 audit(69.290:68): avc: denied { write } for pid=3082 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 69.389363][ T28] audit: type=1400 audit(69.320:69): avc: denied { read } for pid=3080 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 69.391746][ T28] audit: type=1400 audit(69.320:70): avc: denied { open } for pid=3080 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 76.814039][ T3080] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.998593][ T28] audit: type=1400 audit(78.930:71): avc: denied { execmem } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 79.067296][ T28] audit: type=1400 audit(79.000:72): avc: denied { read } for pid=3085 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.067744][ T28] audit: type=1400 audit(79.000:73): avc: denied { open } for pid=3085 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.077877][ T28] audit: type=1400 audit(79.010:74): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 79.103440][ T28] audit: type=1400 audit(79.040:75): avc: denied { module_request } for pid=3085 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 79.188516][ T28] audit: type=1400 audit(79.120:76): avc: denied { sys_module } for pid=3086 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 79.736521][ T28] audit: type=1400 audit(79.670:77): avc: denied { ioctl } for pid=3085 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.956194][ T3085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.965045][ T3085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.112824][ T3086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.119188][ T3086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.887507][ T3085] hsr_slave_0: entered promiscuous mode [ 81.890935][ T3085] hsr_slave_1: entered promiscuous mode [ 82.165795][ T3086] hsr_slave_0: entered promiscuous mode [ 82.168580][ T3086] hsr_slave_1: entered promiscuous mode [ 82.170712][ T3086] debugfs: 'hsr0' already exists in 'hsr' [ 82.171835][ T3086] Cannot create hsr debugfs directory [ 82.391590][ T28] audit: type=1400 audit(82.320:78): avc: denied { create } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.396055][ T28] audit: type=1400 audit(82.330:79): avc: denied { write } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.397018][ T28] audit: type=1400 audit(82.330:80): avc: denied { read } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.420409][ T3085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.433649][ T3085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.447639][ T3085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.457098][ T3085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.459103][ T3085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.468725][ T3085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.471752][ T3085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.478626][ T3085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.557201][ T3086] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.563771][ T3086] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.567456][ T3086] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.577917][ T3086] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.581200][ T3086] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.590947][ T3086] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.597520][ T3086] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.605907][ T3086] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.187947][ T3085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.261395][ T3086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.053886][ T3086] veth0_vlan: entered promiscuous mode [ 86.078177][ T3086] veth1_vlan: entered promiscuous mode [ 86.133710][ T3086] veth0_macvtap: entered promiscuous mode [ 86.144593][ T3086] veth1_macvtap: entered promiscuous mode [ 86.214880][ T2740] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.230472][ T2740] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.230862][ T2740] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.230955][ T2740] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.359096][ T28] audit: type=1400 audit(86.290:81): avc: denied { mount } for pid=3086 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.371504][ T28] audit: type=1400 audit(86.300:82): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/syzkaller.KE4QxY/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.382928][ T28] audit: type=1400 audit(86.310:83): avc: denied { mount } for pid=3086 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 86.396101][ T28] audit: type=1400 audit(86.330:84): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/syzkaller.KE4QxY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 86.401680][ T28] audit: type=1400 audit(86.330:85): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/syzkaller.KE4QxY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 86.426598][ T28] audit: type=1400 audit(86.360:86): avc: denied { unmount } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.439969][ T28] audit: type=1400 audit(86.370:87): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 86.445362][ T28] audit: type=1400 audit(86.380:88): avc: denied { mount } for pid=3086 comm="syz-executor" name="/" dev="gadgetfs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 86.461098][ T28] audit: type=1400 audit(86.390:89): avc: denied { mount } for pid=3086 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 86.465140][ T28] audit: type=1400 audit(86.400:90): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 86.519118][ T3085] veth0_vlan: entered promiscuous mode [ 86.563410][ T3086] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.567615][ T3085] veth1_vlan: entered promiscuous mode [ 86.734138][ T3085] veth0_macvtap: entered promiscuous mode [ 86.760770][ T3085] veth1_macvtap: entered promiscuous mode [ 86.837292][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.837831][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.837942][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.838022][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.955356][ T91] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.013505][ T1797] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.104403][ T91] usb 2-1: Using ep0 maxpacket: 32 [ 89.121850][ T91] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 89.122335][ T91] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.122499][ T91] usb 2-1: Product: syz [ 89.122589][ T91] usb 2-1: Manufacturer: syz [ 89.122674][ T91] usb 2-1: SerialNumber: syz [ 89.125655][ T91] usb 2-1: config 0 descriptor?? [ 89.177418][ T1797] usb 1-1: Using ep0 maxpacket: 16 [ 89.194503][ T1797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.195599][ T1797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.198199][ T1797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 89.199946][ T1797] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 89.200729][ T1797] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.218713][ T1797] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 89.219437][ T1797] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 89.219956][ T1797] usb 1-1: Manufacturer: syz [ 89.248947][ T1797] usb 1-1: config 0 descriptor?? [ 89.624566][ T1797] rc_core: IR keymap rc-hauppauge not found [ 89.626615][ T1797] Registered IR keymap rc-empty [ 89.635639][ T1797] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 89.654184][ T1797] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 89.679094][ T1797] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 89.688019][ T1797] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input3 [ 89.718009][ T1797] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 89.734863][ T1797] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 89.754545][ T1797] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 89.773555][ T1797] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 89.788666][ T3828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.794549][ T1797] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 89.800105][ T3828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.814930][ T1797] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 89.817453][ T91] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 89.819695][ T91] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 89.833169][ T91] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 89.843231][ T1797] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 89.863448][ T1797] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 89.893069][ T1797] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 89.907044][ T91] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 89.913517][ T1797] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 89.934116][ T1797] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 89.937787][ T1797] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 89.955745][ T1797] usb 1-1: USB disconnect, device number 2 [ 90.036450][ T3030] usb 2-1: USB disconnect, device number 2 [ 90.312881][ T1797] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.482864][ T3030] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 90.520820][ T1797] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 90.521142][ T1797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.521378][ T1797] usb 1-1: Product: syz [ 90.521520][ T1797] usb 1-1: Manufacturer: syz [ 90.521562][ T1797] usb 1-1: SerialNumber: syz [ 90.657264][ T3030] usb 2-1: config 127 has an invalid interface number: 127 but max is 0 [ 90.659110][ T3030] usb 2-1: config 127 has no interface number 0 [ 90.669863][ T3030] usb 2-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice=53.27 [ 90.673550][ T3030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.676092][ T3030] usb 2-1: Product: syz [ 90.677862][ T3030] usb 2-1: Manufacturer: syz [ 90.679644][ T3030] usb 2-1: SerialNumber: syz [ 90.981265][ T1797] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 90.982486][ T1797] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 92.246672][ T1797] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 92.253415][ T1797] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 93.294013][ T1797] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 93.294639][ T1797] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 93.296293][ T1797] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 93.303541][ T1797] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 93.309041][ T1797] usb 1-1: USB disconnect, device number 3 [ 93.713232][ T1797] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.877124][ T1797] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 93.877557][ T1797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.877653][ T1797] usb 1-1: Product: syz [ 93.877682][ T1797] usb 1-1: Manufacturer: syz [ 93.877708][ T1797] usb 1-1: SerialNumber: syz [ 94.741456][ T1797] (unnamed net_device) (uninitialized): Assigned a random MAC address: de:8e:78:e7:5d:c0 [ 94.750403][ T1797] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 95.836423][ C0] read_bulk_callback: 4 callbacks suppressed [ 95.836753][ C0] usb 1-1: Rx status -71 [ 95.837038][ C0] usb 1-1: eth1: intr status -71 [ 95.837173][ T1797] usb 1-1: USB disconnect, device number 4 [ 95.840882][ C0] usb 1-1: Rx status -108 [ 95.842280][ C0] usb 1-1: eth1: intr status -71 [ 95.846784][ T2941] usb 1-1: device reset failed [ 96.352761][ T1797] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.516930][ T1797] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 96.517378][ T1797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.534571][ T1797] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 96.534930][ T1797] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 96.535228][ T1797] usb 1-1: Manufacturer: syz [ 96.540791][ T1797] usb 1-1: config 0 descriptor?? [ 96.693163][ T1797] rc_core: IR keymap rc-hauppauge not found [ 96.693525][ T1797] Registered IR keymap rc-empty [ 96.694976][ T1797] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 96.699069][ T1797] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input4 [ 96.706862][ T1797] ------------[ cut here ]------------ [ 96.707458][ T1797] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x518/0x63c, CPU#1: kworker/1:3/1797 [ 96.710579][ T1797] usb 1-1: BOGUS control dir, pipe 80000580 doesn't match bRequestType 0 [ 96.711566][ T1797] Modules linked in: [ 96.714532][ T1797] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.715892][ T1797] CPU: 1 UID: 0 PID: 1797 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT [ 96.716437][ T1797] Hardware name: ARM-Versatile Express [ 96.716902][ T1797] Workqueue: usb_hub_wq hub_event [ 96.717496][ T1797] Call trace: [ 96.718004][ T1797] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 96.718583][ T1797] r7:82a1e6fc r6:00000000 r5:8231ad74 r4:00000001 [ 96.718900][ T1797] [<80201af0>] (show_stack) from [<8021e2fc>] (dump_stack_lvl+0x5c/0x70) [ 96.719250][ T1797] [<8021e2a0>] (dump_stack_lvl) from [<8021e328>] (dump_stack+0x18/0x1c) [ 96.719666][ T1797] r7:82a1e6fc r6:00000000 r5:84780000 r4:82c7bd3c [ 96.719944][ T1797] [<8021e310>] (dump_stack) from [<8020260c>] (vpanic+0x114/0x320) [ 96.720308][ T1797] [<802024f8>] (vpanic) from [<8020284c>] (trace_suspend_resume+0x0/0x104) [ 96.720706][ T1797] r7:80f16014 [ 96.720942][ T1797] [<80202818>] (panic) from [<802506a8>] (get_taint+0x0/0x1c) [ 96.721294][ T1797] r3:82a0b544 r2:00000001 r1:8230185c r0:8230913c [ 96.721626][ T1797] [<80250630>] (check_panic_on_warn) from [<80250824>] (__warn+0x98/0x1ac) [ 96.722360][ T1797] [<8025078c>] (__warn) from [<80250b20>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 96.722974][ T1797] r8:00000009 r7:8240b1a0 r6:ea9d58c4 r5:84780000 r4:00000000 [ 96.723280][ T1797] [<8025093c>] (warn_slowpath_fmt) from [<80f16014>] (usb_submit_urb+0x518/0x63c) [ 96.724107][ T1797] r10:85114a0c r9:00000000 r8:00000000 r7:00000001 r6:86003c44 r5:86003c00 [ 96.725072][ T1797] r4:86044000 [ 96.725398][ T1797] [<80f15afc>] (usb_submit_urb) from [<81168dac>] (igorplugusb_probe+0x250/0x31c) [ 96.725831][ T1797] r10:00000027 r9:00000000 r8:00000000 r7:86003e8c r6:86003400 r5:00000000 [ 96.726164][ T1797] r4:85114a00 [ 96.726475][ T1797] [<81168b5c>] (igorplugusb_probe) from [<80f1b004>] (usb_probe_interface+0x15c/0x3d8) [ 96.727239][ T1797] r10:82d280d4 r9:82bb52f0 r8:82bb52f8 r7:86003c88 r6:81dec46c r5:86003430 [ 96.727813][ T1797] r4:ffffffed [ 96.727982][ T1797] [<80f1aea8>] (usb_probe_interface) from [<80bac3cc>] (really_probe+0xd8/0x40c) [ 96.728519][ T1797] r10:8240b678 r9:82b5dc44 r8:00000020 r7:00000000 r6:82bb52f8 r5:00000000 [ 96.729098][ T1797] r4:86003430 [ 96.729365][ T1797] [<80bac2f4>] (really_probe) from [<80bac794>] (__driver_probe_device+0x94/0x1ec) [ 96.729896][ T1797] r8:00000020 r7:86003430 r6:ea9d5ab4 r5:82bb52f8 r4:86003430 [ 96.730480][ T1797] [<80bac700>] (__driver_probe_device) from [<80bac9cc>] (driver_probe_device+0x3c/0xd8) [ 96.730987][ T1797] r9:82b5dc44 r8:00000020 r7:86003430 r6:ea9d5ab4 r5:82d203bc r4:82d203ac [ 96.731722][ T1797] [<80bac990>] (driver_probe_device) from [<80bacb08>] (__device_attach_driver+0xa0/0x138) [ 96.732602][ T1797] r9:82b5dc44 r8:83377b40 r7:86003430 r6:ea9d5ab4 r5:82bb52f8 r4:00000001 [ 96.732927][ T1797] [<80baca68>] (__device_attach_driver) from [<80baa000>] (bus_for_each_drv+0x98/0xec) [ 96.733520][ T1797] r7:83377b00 r6:80baca68 r5:ea9d5ab4 r4:00000000 [ 96.733910][ T1797] [<80ba9f68>] (bus_for_each_drv) from [<80bacf24>] (__device_attach+0xb0/0x1e4) [ 96.734274][ T1797] r7:83377b00 r6:8600347c r5:00000001 r4:86003430 [ 96.734742][ T1797] [<80bace74>] (__device_attach) from [<80bad218>] (device_initial_probe+0x44/0x48) [ 96.735376][ T1797] r6:83377b00 r5:86003430 r4:83377b00 [ 96.735695][ T1797] [<80bad1d4>] (device_initial_probe) from [<80bab080>] (bus_probe_device+0x30/0x84) [ 96.736110][ T1797] r5:86003430 r4:86003430 [ 96.736310][ T1797] [<80bab050>] (bus_probe_device) from [<80ba82e8>] (device_add+0x5f0/0x814) [ 96.736660][ T1797] r9:82b5dc44 r8:81da2ef0 r7:86003c88 r6:00000000 r5:00000000 r4:86003430 [ 96.737143][ T1797] [<80ba7cf8>] (device_add) from [<80f190b8>] (usb_set_configuration+0x5d8/0x938) [ 96.737682][ T1797] r10:8240b678 r9:82c2d4c0 r8:86003c88 r7:85c53450 r6:00000000 r5:85c53450 [ 96.738160][ T1797] r4:86003400 [ 96.738345][ T1797] [<80f18ae0>] (usb_set_configuration) from [<80f262d0>] (usb_generic_driver_probe+0x48/0x84) [ 96.738743][ T1797] r10:842b5f28 r9:82b5dc44 r8:00000020 r7:86003c00 r6:82b84e9c r5:00000000 [ 96.739074][ T1797] r4:86003c00 [ 96.739324][ T1797] [<80f26288>] (usb_generic_driver_probe) from [<80f1a468>] (usb_probe_device+0x44/0x14c) [ 96.739759][ T1797] r5:00000001 r4:86003c88 [ 96.739928][ T1797] [<80f1a424>] (usb_probe_device) from [<80bac3cc>] (really_probe+0xd8/0x40c) [ 96.740298][ T1797] r7:00000000 r6:82b84e9c r5:00000000 r4:86003c88 [ 96.740715][ T1797] [<80bac2f4>] (really_probe) from [<80bac794>] (__driver_probe_device+0x94/0x1ec) [ 96.741397][ T1797] r8:00000020 r7:86003c88 r6:ea9d5d1c r5:82b84e9c r4:86003c88 [ 96.741833][ T1797] [<80bac700>] (__driver_probe_device) from [<80bac9cc>] (driver_probe_device+0x3c/0xd8) [ 96.742388][ T1797] r9:82b5dc44 r8:00000020 r7:86003c88 r6:ea9d5d1c r5:82d203bc r4:82d203ac [ 96.742886][ T1797] [<80bac990>] (driver_probe_device) from [<80bacb08>] (__device_attach_driver+0xa0/0x138) [ 96.743443][ T1797] r9:82b5dc44 r8:83377b40 r7:86003c88 r6:ea9d5d1c r5:82b84e9c r4:00000001 [ 96.743960][ T1797] [<80baca68>] (__device_attach_driver) from [<80baa000>] (bus_for_each_drv+0x98/0xec) [ 96.744632][ T1797] r7:83377b00 r6:80baca68 r5:ea9d5d1c r4:00000000 [ 96.745035][ T1797] [<80ba9f68>] (bus_for_each_drv) from [<80bacf24>] (__device_attach+0xb0/0x1e4) [ 96.745362][ T1797] r7:83377b00 r6:86003cd4 r5:00000001 r4:86003c88 [ 96.745550][ T1797] [<80bace74>] (__device_attach) from [<80bad218>] (device_initial_probe+0x44/0x48) [ 96.746088][ T1797] r6:83377b00 r5:86003c88 r4:83377b00 [ 96.746497][ T1797] [<80bad1d4>] (device_initial_probe) from [<80bab080>] (bus_probe_device+0x30/0x84) [ 96.762046][ T1797] r5:86003c88 r4:86003c88 [ 96.762299][ T1797] [<80bab050>] (bus_probe_device) from [<80ba82e8>] (device_add+0x5f0/0x814) [ 96.762648][ T1797] r9:82b5dc44 r8:00000000 r7:84693088 r6:00000000 r5:00000000 r4:86003c88 [ 96.762888][ T1797] [<80ba7cf8>] (device_add) from [<80f0d030>] (usb_new_device+0x28c/0x6b8) [ 96.763205][ T1797] r10:842b5f28 r9:00000003 r8:ffffffff r7:00000001 r6:8612bc40 r5:86003c88 [ 96.763460][ T1797] r4:86003c00 [ 96.763589][ T1797] [<80f0cda4>] (usb_new_device) from [<80f0f8e4>] (hub_event+0x11ec/0x1b80) [ 96.763890][ T1797] r10:842b5f28 r9:86003c00 r8:84693000 r7:00000001 r6:845d9600 r5:00000000 [ 96.764131][ T1797] r4:845d961c [ 96.764255][ T1797] [<80f0e6f8>] (hub_event) from [<80276360>] (process_one_work+0x1c8/0x5a0) [ 96.764575][ T1797] r10:83395e05 r9:84780000 r8:01800000 r7:ddde4e00 r6:83395e00 r5:842b5f28 [ 96.764818][ T1797] r4:84870580 [ 96.764945][ T1797] [<80276198>] (process_one_work) from [<80277124>] (worker_thread+0x16c/0x318) [ 96.765258][ T1797] r10:00000000 r9:848705b0 r8:84780000 r7:82a03d80 r6:ddde4e20 r5:ddde4e00 [ 96.765521][ T1797] r4:84870580 [ 96.765685][ T1797] [<80276fb8>] (worker_thread) from [<8028117c>] (kthread+0x11c/0x154) [ 96.765963][ T1797] r10:00000000 r9:df879e88 r8:84870500 r7:84870580 r6:80276fb8 r5:84780000 [ 96.766336][ T1797] r4:8487a8c0 [ 96.766525][ T1797] [<80281060>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 96.767079][ T1797] Exception stack(0xea9d5fb0 to 0xea9d5ff8) [ 96.767515][ T1797] 5fa0: 00000000 00000000 00000000 00000000 [ 96.767967][ T1797] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 96.768443][ T1797] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 96.768906][ T1797] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281060 r4:8487a8c0 [ 96.775882][ T1797] Rebooting in 86400 seconds..