last executing test programs: 18.213058075s ago: executing program 0 (id=218): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 7.510208161s ago: executing program 0 (id=226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.391567048s ago: executing program 0 (id=227): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4880) 6.599510992s ago: executing program 0 (id=228): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x13, r1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="52b5d6d80ff2e09532b5b960ae8de0b01d54027c27bcf971aee72508418eaa1cb090afe1ef7318c73533595071c6e0cc26495811c7efeb33c91c63d41b81063275a832a62f447ab17755482e5297b62c7abee6ff60986fbab1c31cb53feadd5c1f0c9e83a7d2d474058c4dc5539883312a6d53143f9d174d5004f7ab14e610db64445fe5ba6a009d1652c22e7d6f5f55f79fe22bc664a2f9d8fb460b4ed8cbb1ef9802769a9b4dc8c9eff775f0a0a893e32b8e87c50487971868a26cf773ef18e9f35f631d4fb1", 0xc7}], 0x1}, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 6.294886839s ago: executing program 0 (id=229): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x886, &(0x7f0000000140)={0x0, 0x401, 0x10000, 0x400002, 0x2fc}, &(0x7f0000001680)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001640)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r7}}) r8 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xb0, 0xf, [{{0x9, 0x4, 0x0, 0xfb, 0x2, 0x7, 0x1, 0x1, 0x8f, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x1, 0x6, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x3, 0xfe}}]}}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000001480)={0xa, 0x6, 0x250, 0x4, 0x0, 0x7, 0xff, 0x10}, 0x3b, &(0x7f0000000840)=ANY=[@ANYBLOB="050f3b00060a10030003009c0a29000a1065875784140ef00b129854ed77b80300020006f9020103100903100b10100000000400c0c00000"], 0x5, [{0xe7, &(0x7f0000000600)=ANY=[@ANYBLOB="e7030d9e4ce96da0309c4b5bd237d4858eb482975228cdbd5f642459dce1fd7d688e44b759af494262353f3b31e0a69fbda0c146370d4ab59ceef3fcbe072c8c219eb0e97c6659ee3ab9e5b8917cd3e8cb7fd8c6729b78234a20196c973e6685f75ef80a03127fd6903f6f1837f8967ceb4769ed761ce556b39b10847b8239a4f657efdc3e73c6aae974bc82608f679b51c71c1e8afc0b12c5db3ee8ce7c40f390e3cc988c478eb41c055590c5a0826b832c3d5968ac42116fccaa63bb60f7bebdbc80b377fc7200b40728db7673018dc7723d26539c64a1d342b9e66cb66d6cc8826701a00d05d926738add91de8d"]}, {0x0, 0x0}, {0xf7, &(0x7f0000001880)=ANY=[@ANYRES64=0x0]}, {0xfd, &(0x7f0000001040)=ANY=[]}, {0x0, 0x0}]}) syz_usb_control_io$printer(r8, &(0x7f0000001300)={0x14, &(0x7f00000011c0)=ANY=[@ANYBLOB="00215400000054220636ff2854a8f44c1278347ba53202276fdd27fe2c77210eb1f3a6f6840d79eb4c74bb65"], &(0x7f0000001240)=ANY=[@ANYBLOB="ed029b0000009b033b0738f96848e4ad812b257a9f0cb5109e7f5993fc159da85ea08b23cf354bff1e04fe94267d46ba7e097fff46765f3b8d4f8e9b0d7b1de012f43de44633113cfca6debfcc86e82eaede609487a7ff259bd86138452132cf15878627d6723da916b95a22a2a81cfef0288267fcda90dc66c61bfdfefc364e16b04ccde062d3006b2f7c8b762ce997b45beebaea859a"]}, &(0x7f0000001600)={0x34, 0x0, 0x0, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000014c0)={0x20, 0x0, 0x2}, 0x0, &(0x7f00000015c0)={0x20, 0x0, 0x1, 0x8}}) io_uring_enter(0xffffffffffffffff, 0x47f4, 0x3, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000700), 0xeba, 0x101283) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r4, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) close_range(r3, 0xffffffffffffffff, 0x0) 5.160925282s ago: executing program 0 (id=230): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.699796775s ago: executing program 1 (id=231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r4, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000380)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x146ead}) close_range(r0, 0xffffffffffffffff, 0x0) 591.530676ms ago: executing program 1 (id=232): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7ffffffc) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) write$UHID_INPUT(r2, &(0x7f0000000500)={0x8, {"a31003c6eed6b1da1b469a7dc322a99ed9f7513a2c1fa3658201621a6379f5dd0d41258540ea8a286e8de8b38c3f0405f1dd97f26e1b157675ac315e75029a99cb4d8f5cf9b6e2580598cc1a8b26f7810e75c2d0d2cf0e76cc7b75322c32f89f41271b0aca1b283d1b7ca582993185096b70e4771a853d9338cbc2d7c4d663d03d5facf2f8241ee6ca520e02c2bb3fb5d9398095a8ec0b81d0a35e59a3965fc97f8432dd0c1e8554c35206a89efba742b482599467a31e36558834904c16ab9d8e3396ff231f7421e1916fc93aeef9eac0e55e0660c0347bbaa29f63bb16c835a5f660fbbc78f179e14f97cb041c123e4fbb8c7ff8f11cdb8c4464b434c6976b7ff607bd72c93e9e7fed6332f08143cea410ef0c1986774f33b66dd837764391961c490bc7858e68f87323ae31d49da2d34e1ef9ecff9af594f34d3a86be3a008cfa10c3d47db7d18508db4e02e608ad74495123e63e8d144dbb090f7e20ecc9893777e99e0d3c0a360eed135308473075efbafcea8bf8e3b7df9c903ac8b966269cf72d8efd629b0446a9dbc7636bb9a7df239b2ced32b3b79f6c231e352b5be25dd28cfd42e3143c5ecda76c2178a599f717deff69f739bf8281c40c67e19e87e4941849bc7e926469c6d29f0cd72ec82e4877ffbf5ad92dce0b6ee1d446d90678b0d943d68d9b2a73c290222e8809489faf8f009ee383062ed598a87301e07311382ced238a28596e8fa04de52611ab53fd3ac77710c414ef420665679feb7e93e8dcbf96e92ed55a159dbd58189e37a6767a74b2486b08501244c6a1d991620bc6832f87ed770dd010dc1b1237bc32701b9f08c7223c4575372854bd46abbe77103ff99718a85ae739cc3227bfc6c1da71a3084273bf0b9828518c49e554719b74fbe674b36770a09329cf3fcdaa43bd8f6549a474d84736a51fdd61fd3606363b1c520f45384b84baf84a15b639d0a52da45b0bb8b090b191f9d965c0b9ccb501e2fa27a713b665041bf692704d0e6b5cae9d864fb65e27418aa903dd148d7520409b1ea5242b3bd0ce2a20892012860e59c54e575e3e89cd662681f7078d7b7dbcad85f2a6d50dd7739450b6b662cca6a0cf0c5adfb18efedbb7f982b444415320593b99f15683b97cf45f515fd1dc9a489df312a4d175bed1b3858dbd9498a233f2662c2abba01c1660d8e0294cee8abf754c6379bc728545a3b37eb7b3392d8e684665a129a9a827aa978beabbad8429c671e74c5fc7c0704375b956e20be6392997aa6b322f465a2529ebb9a38f9461fa816a485bbddb19e80a3f5aa5548063e20076fae02384a705e60e7180585a215adf2393f35493381937df3f70488ecbb29816eebf7dc4e401209536a887b2ec6df30a5ef253f53fe3aff896ea0699ebac002153fc080208ee14bc84f4b0114d2dcdd15dc4985fee03557c6c7de4130b9ba86393bd0c303a879e2691fea55a7c25a5bfb12957d1e3da76ee3d9bf6e4ef5c4e9fbf4877609de78e274be28cb952e0b415c6c062f29a513a3858d881b5dd1f2a8f3c179405e0ff3c8fd65d4427a2d1d6ea33599039c58a62b8533a841b78e2ff74bde84b13d32ac9c4290ab074f505780b7a916caf0d8f4983097da48a44bfafa0bca774657dc85b14f0fc59855beb7202b3bc45730dfbffbb4ec46a13c4e8e8f978196b9af62c1fc671cbc0f3882a043dbb70174bd9644c91cde9909753b973887d7b2c21c55fd8fda01ae2ec970d25572286e8cf512ee77507d11c839861215b7bff867dc57fb15a3c53796be39021d86989a127e06aeb4bc2bb2fcc635d73051de17e91a904b98f4d12aa886e175459f3444e06099f4758f346008754a4ccb875162e73c8754bc3fda9f7a58276ab04fde689020aa1c5a2b4c103cd547086d9410291301cbbdb5b4bdfe6db7b2c7688cec5e5fa2b61f6431d52da01d428c47dc0403004cd1540181b1fe124eb843dde264be626caccad7e096b5dd1cd319e6a62fe4be8a46de1a954e517ed2737d1537132654619035618a9889e8c77c1189cbd54d95cd4e5db29073d4f2989104c62b5eb9eb13ea9aad67aabf94f5ccf90a66764183ef671ef364d7a6db95ec5a1c0e7453b9d643b192ee0ab011b162fb8918a51cd42f47b1aa01897657e7d1acb69b739da9f65cfbe0bff91d4dd4ee4071bb88c0e492dc6795ccb1b155127438006f97275b6aae0e4f90095a0753a072d43187109330729347d017af8ecf448ae2babc90c6d56776ee1ad0343e3518298ff0106e992f01e5d4a9665d251fa2242e49dd9618033723747d830f2f17724900a45dbf61f82ca878742c2ac57267ae776a6171113de44047db31103d0803923fc279dac840e58f3f9619524b0b28246652bc4f0e63adfa53981d69bf50c51c70e6a0637464555922d75edaf415d4dab4bf54e8d9ee6369e2f648c58c80b88850a4a01fe71dc076ed3e12a1fee54d5db0a38d31425ce40f4f8b4f105b1790d655e675cabb966c04f092b39315c0788316b4ecfc5da3df436686582aa29666613448222d3d0cc849630d6c0855d075321c28bd0d8e7ad7a5846455bb3690b9acbfe8125943a1683de8414e2823883605e50ca00405a61ef9f3c4f1efd914d15a32a2a3146d1ec07d2ab35276f2673725a0189a32ec9fcdb6a2005c63136ae6e285fc51c6a0b84ed02855a82b86009cb7d834e94e1ffbeca227ace424a01fbf3325d8dd48ad98929070127abb686472c3e21e2b1a0b625d4fba8ba64637821395b8767bcf40da1153af11868b1162283da96d44f0063a73c98b07f50ee846922cb6b8b25525bb3274fba4e45b1444c4967ab553128c83d8985773e3ffcec1ff33f3e0883bcb892afea48deccde2ce94b60d790cda3c4bdbcd8f991cac5a81d2025efbf272c99c0191d3ea6b5ab343ab3c9c82f20d3127a765b10dbcf0fe12d98fa8827a30fcf589db0a5c1b215112fad5ab344bdc3f8762fb2be3015fe98673bf2e9a2974235d67b90b7d3b49c7bab197e5a6304d1aba1ab13d13c0a04bd0a7a8d138d97ec5b907637353b1b1858792f7421d13ad215ec68e6021bfbf7f368370f95f458c7e929f34723f5c72f3f49aa1edd269942e151f80bb5056a8f0808df2b3f27cc4491d5831e910d8db65e9a631df960c93c2880d95d12210a5a283ab28d2071ca6f822d2ec4da732ca715fe509871839d39319fb7a503cb5215317d70458f4902b537213183e60d63efae6f65586b02f969f69738e86b1e79c1eb7eb15acbddc813e81950ea4ee6410b23f6c96b1b3d4dc513d05f4881caff7db7bcc0bd13ca2d92b019e94a3c3afabe64b609a3325b3cc9dd0f4d966496c6648f1e940bc210ef7729b9c639ddf76171062199a740b9677280290ce4f63a7ede03e2be5d007d37d59d3037dbea92c1670c102b3d19e4667f9ad5e8bc7d91ee8423f3452df6476575e998caedfae59d337b54c687d99535b328d8c82f9642f3587d54edd5480f6c6b2fe923a340dc7490027a63e1b4e25596406c40a323583fc365ccc2c3e315cbd4c115825eb794da6b63f4b735dcb453ca2e4c50a9921dbd2da30830ad25460e77c25ba7b9ccaf82d85d5ebb912840eab9db0b1cd93e4b70db10e8cbedc027f7070b0bd22a00d4cf8fe46e59472e1bde2bbb25b200699ed5c57545c234f74190a9793a1f1997c77b43ca01246c1345f2f6d0399f61897b37e7dd57f647acb617f45c8cf995743075f24dda7e6c9c90b3b434e591bfcba8bd0a8f2646886767e5003299474a8aace6b218b6ab878d21514950138b47b6baa2a394a40ab365bdf335d837868d7d30a7ffb3d04ef872b30a5eec184a891e0fe3369bb746b02970d76a89a46980034bde6f0496d348384de0180ddafcf5df4ae0319a7d08766e4bcfb126b6a475de3f70983d9441e4941ee8e1c02afc847ab28cced39a034d2a347b3cf32194749e594cfc774e260ed4bf88efc9bb665cbf363e8ae13c89fab9f4847b8f5e29aee7cc01ce767405c44e89642087e568e44b0b2ef8ca96fb79b9f88a6158eae98d739546ebc4c5de33b8947ac14931df23e5eaddadc03a46b3b515fa2a1802bd856eec6be65643b0614aa51f0d8c957565b4edf26071fe34494a64a39ccd84cfdfa60cb3e001589161c6b52cf8d191e2c9158a2a9e6fd974bf51bab401633a5dc882b17806599e483d0fa286d14425cdea244494361d48dc1009612b3317b25128818081ea57345e866990e2579395895fba8129e151c2f4d4c570237d4844b6e688a1b2ec42c6bb225bd5cb69870f732107cdc3938b82c2372bfa93d1798b18f66a17e608229a21dce25fe7a415bc512bb692b2c95164236f1d402bb8d9ed5ea73933c64105441d3ddd0e8ac5e8cf014d06268f669b3937e8d9195d263609432079267691ec82ccd72e0cc2b8aea8937caa31c3eaf3f5730479c60c3d1cf0ebabd267c23a0b7ccc6ff4a0cfd53535dcfcd0dfc87cce2130708842ac2b195ebf7539837dd6ceca466364298f5fc17f85397e7bd22826c38d89a3575ea632f1ab799090cdf49f9345870444b1843b029be643b998565e4fe5f4f32796e25e3eba421b9937e1119cb578a0bc165f19a9711cd03e8b10109ebdc6ee4f9115f1dbe0140ba1334298fd4a81f617b97491d48b6da02a4447914c7a21df4e0aa3a00d9df151aecc7764da7b34eb35597fe9c41437064d4e81bf694a4b4dbac971497e3c54779401b66025ac5cbcfe583892d5e33df2196461be0dbb8c89acc0b17c8c44e08d76becdfbdc1dcc06c1fb1e51328ebdd206f44a2cefcff60caa48b6d9431c32d5f72e3b381a0347c402b6d5f8834daae110f1a47694778563781b5e345fe3c3c8d2ad3ef0d4e57ef9ed62331082430b81677c486cca44ff5bee8ae849aa0cf8cfc56696ee04f7461e1d18a7d7121490636d3d8e2fe647fa9dfe6ec986f98709d3afa0ee990eb0309913352378d3a46e2f0df9a8e045e600dd4459e3e4e9891729841f8c69a200837b1b4762a6d3a4f59e353fa31b0cbc9b3caa181daeef9c0e1e18319ee5d98989c365204fc86ef8c135e6e4eac041ea8496166971323bed96b78738a5b51ef0b4db30125d06d2def7d6a176537954f972cce07ba17d49bc6bdfa406a7287a2f1661541647c0efae4cad510a4a50bd1348c69a9375a96928f8d5b90e17e44eccb256f44f5e722b6ed2c488c180a05b892188efba8fc2562b86dda851f6e894d25594ee3e032e35adeaea5839497727bcbf985713983d54a2bd31f8f968ca39a2720c1ea73890dd26b72a92af5a8b6208710c2a5b3598c2bde6f726a7490bfb553b9b6dd4a4ff62f558e89b2b6f10ca7e3972463e4e823749ddf2ade4c87226a84a296ca41a6369220893fbad4550f72ba3dadac17a53524d35866c2adf366094c0e0ed2e531f49d6e0c8b66f8fedcbcd7cb15a487e8d83b0135b6cc7f58776b98b41ac76821ba358bed44298484472e4de036c450439e7e7e9990ae40e50c3d6ef8986540d7509b65c9624ec97f3a29c0e656cf8b7545ee000fa7ac96f24cbf1ff7e201a7d39bda02f46233acd812f991a6d206598dcaf80e667c63f21a54cb7461fe1284d65a5941da0420a1004a4215c01549fba9073163a61a825352595f3c381937565cacb1275c3264226589a2fae1d55d4817bad0ffcae58cee7748faacd73c30053b8e56c9ff6e9ca1ede8281b9b4b6cc0904e326bd2b96da1b43f6497827d57a4ed0c643ca456ef65092b7260439b455edc57062f2cdf9929b4a483d49c1f381998c67e2b0a3c4", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 470.738413ms ago: executing program 1 (id=233): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 392.027998ms ago: executing program 1 (id=234): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 119.785743ms ago: executing program 1 (id=235): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x37f2602d}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) 0s ago: executing program 1 (id=236): r0 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x404, 0x1ad}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x12361, 0x1, {0x1}}) io_uring_enter(r0, 0x3517, 0x173d, 0x42, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 35.655104][ T31] audit: type=1400 audit(35.590:58): avc: denied { read write } for pid=3091 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.660763][ T31] audit: type=1400 audit(35.600:59): avc: denied { open } for pid=3091 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:4919' (ED25519) to the list of known hosts. [ 43.990858][ T31] audit: type=1400 audit(43.930:60): avc: denied { name_bind } for pid=3094 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.931511][ T31] audit: type=1400 audit(44.860:61): avc: denied { execute } for pid=3095 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.957952][ T31] audit: type=1400 audit(44.890:62): avc: denied { execute_no_trans } for pid=3095 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.606956][ T31] audit: type=1400 audit(47.540:63): avc: denied { mounton } for pid=3095 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.610665][ T31] audit: type=1400 audit(47.550:64): avc: denied { mount } for pid=3095 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.621397][ T3095] cgroup: Unknown subsys name 'net' [ 47.626761][ T31] audit: type=1400 audit(47.560:65): avc: denied { unmount } for pid=3095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.750599][ T3095] cgroup: Unknown subsys name 'cpuset' [ 47.753929][ T3095] cgroup: Unknown subsys name 'hugetlb' [ 47.754521][ T3095] cgroup: Unknown subsys name 'rlimit' [ 47.971590][ T31] audit: type=1400 audit(47.910:66): avc: denied { setattr } for pid=3095 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.972716][ T31] audit: type=1400 audit(47.910:67): avc: denied { mounton } for pid=3095 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 47.974722][ T31] audit: type=1400 audit(47.910:68): avc: denied { mount } for pid=3095 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 48.076527][ T3097] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 48.079695][ T31] audit: type=1400 audit(48.010:69): avc: denied { relabelto } for pid=3097 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 52.479437][ T3095] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.581935][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 53.582418][ T31] audit: type=1400 audit(53.520:73): avc: denied { execmem } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.639609][ T31] audit: type=1400 audit(53.570:74): avc: denied { open } for pid=3101 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.641283][ T31] audit: type=1400 audit(53.570:75): avc: denied { read } for pid=3100 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.647964][ T31] audit: type=1400 audit(53.580:76): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.667158][ T31] audit: type=1400 audit(53.600:77): avc: denied { module_request } for pid=3101 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.719501][ T31] audit: type=1400 audit(53.650:78): avc: denied { sys_module } for pid=3101 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.075598][ T31] audit: type=1400 audit(54.010:79): avc: denied { ioctl } for pid=3101 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=675 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.925981][ T3100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.931289][ T3101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.934200][ T3100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.937252][ T3101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.411434][ T3101] hsr_slave_0: entered promiscuous mode [ 55.413748][ T3101] hsr_slave_1: entered promiscuous mode [ 55.470519][ T3100] hsr_slave_0: entered promiscuous mode [ 55.471300][ T3100] hsr_slave_1: entered promiscuous mode [ 55.473727][ T3100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.474646][ T3100] Cannot create hsr debugfs directory [ 55.734667][ T31] audit: type=1400 audit(55.670:80): avc: denied { create } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.736657][ T31] audit: type=1400 audit(55.670:81): avc: denied { write } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.744504][ T3101] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.745594][ T31] audit: type=1400 audit(55.680:82): avc: denied { read } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.763733][ T3101] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.783075][ T3101] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.801092][ T3101] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.832640][ T3100] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.841487][ T3100] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.850669][ T3100] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.862519][ T3100] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.191953][ T3101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.258664][ T3100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.674756][ T3101] veth0_vlan: entered promiscuous mode [ 57.705154][ T3101] veth1_vlan: entered promiscuous mode [ 57.708538][ T3100] veth0_vlan: entered promiscuous mode [ 57.718512][ T3100] veth1_vlan: entered promiscuous mode [ 57.755883][ T3100] veth0_macvtap: entered promiscuous mode [ 57.764013][ T3100] veth1_macvtap: entered promiscuous mode [ 57.782527][ T3101] veth0_macvtap: entered promiscuous mode [ 57.793242][ T3101] veth1_macvtap: entered promiscuous mode [ 57.806166][ T3100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.806548][ T3100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.806615][ T3100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.806658][ T3100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.890023][ T3101] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.891679][ T3101] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.891839][ T3101] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.891967][ T3101] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.970377][ T3100] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.160303][ T3782] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 58.165738][ T3782] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.477511][ T3798] batadv_slave_1: entered promiscuous mode [ 58.485118][ T3796] batadv_slave_1: left promiscuous mode [ 58.624710][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 58.625068][ T31] audit: type=1400 audit(58.560:109): avc: denied { create } for pid=3801 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.633339][ T31] audit: type=1400 audit(58.570:110): avc: denied { write } for pid=3801 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.691913][ T31] audit: type=1400 audit(60.630:111): avc: denied { bpf } for pid=3807 comm="syz.1.13" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.615178][ T3814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'. [ 64.615980][ T31] audit: type=1400 audit(64.550:112): avc: denied { write } for pid=3813 comm="syz.1.14" path="socket:[1688]" dev="sockfs" ino=1688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.629525][ T31] audit: type=1400 audit(64.560:113): avc: denied { prog_load } for pid=3815 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.630869][ T31] audit: type=1400 audit(64.570:114): avc: denied { perfmon } for pid=3815 comm="syz.0.15" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.935402][ T31] audit: type=1400 audit(64.870:115): avc: denied { create } for pid=3825 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 64.938563][ T31] audit: type=1400 audit(64.870:116): avc: denied { bind } for pid=3825 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 65.032864][ T31] audit: type=1400 audit(64.970:117): avc: denied { setopt } for pid=3825 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 65.037094][ T31] audit: type=1400 audit(64.970:118): avc: denied { accept } for pid=3825 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 65.040036][ T31] audit: type=1400 audit(64.980:119): avc: denied { write } for pid=3825 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 65.126876][ T31] audit: type=1400 audit(65.060:120): avc: denied { remount } for pid=3832 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.421768][ T3838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 66.804977][ T31] audit: type=1400 audit(66.720:121): avc: denied { create } for pid=3834 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.420891][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 70.422096][ T31] audit: type=1400 audit(70.360:125): avc: denied { create } for pid=3844 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.426231][ T31] audit: type=1400 audit(70.360:126): avc: denied { bind } for pid=3844 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.431766][ T31] audit: type=1400 audit(70.370:127): avc: denied { listen } for pid=3844 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.435457][ T31] audit: type=1400 audit(70.370:128): avc: denied { connect } for pid=3844 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.448189][ T31] audit: type=1400 audit(70.380:129): avc: denied { allowed } for pid=3844 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.456208][ T31] audit: type=1400 audit(70.390:130): avc: denied { create } for pid=3844 comm="syz.0.22" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.458681][ T31] audit: type=1400 audit(70.390:131): avc: denied { map } for pid=3844 comm="syz.0.22" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.462657][ T31] audit: type=1400 audit(70.390:132): avc: denied { read write } for pid=3844 comm="syz.0.22" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.483411][ T31] audit: type=1400 audit(70.420:133): avc: denied { write } for pid=3844 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.745980][ T31] audit: type=1400 audit(74.680:134): avc: denied { bind } for pid=3871 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.884647][ T31] audit: type=1400 audit(78.820:135): avc: denied { create } for pid=3887 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 80.667235][ T31] audit: type=1400 audit(80.600:136): avc: denied { setopt } for pid=3893 comm="syz.1.41" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.680914][ T31] audit: type=1400 audit(80.620:137): avc: denied { connect } for pid=3893 comm="syz.1.41" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.683736][ T31] audit: type=1400 audit(80.620:138): avc: denied { write } for pid=3893 comm="syz.1.41" path="socket:[1845]" dev="sockfs" ino=1845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.955893][ T31] audit: type=1400 audit(82.890:139): avc: denied { create } for pid=3899 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.957847][ T31] audit: type=1400 audit(82.890:140): avc: denied { connect } for pid=3899 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.961339][ T31] audit: type=1400 audit(82.900:141): avc: denied { write } for pid=3899 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.124869][ T31] audit: type=1400 audit(84.060:142): avc: denied { create } for pid=3901 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.185880][ T31] audit: type=1400 audit(86.120:143): avc: denied { read } for pid=3911 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.026160][ T31] audit: type=1400 audit(87.950:144): avc: denied { name_bind } for pid=3921 comm="syz.1.51" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 88.026419][ T31] audit: type=1400 audit(87.960:145): avc: denied { node_bind } for pid=3921 comm="syz.1.51" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 91.202952][ T3928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.52'. [ 91.280494][ T3928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 91.308393][ T3928] hsr_slave_1 (unregistering): left promiscuous mode [ 92.004236][ T31] audit: type=1400 audit(91.940:146): avc: denied { name_bind } for pid=3936 comm="syz.1.54" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 97.197440][ T31] audit: type=1400 audit(97.130:147): avc: denied { execute } for pid=3946 comm="syz.0.57" path="/18/cpu.stat" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.060911][ T31] audit: type=1400 audit(98.000:148): avc: denied { prog_run } for pid=3959 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 98.149790][ T3962] netlink: 'syz.1.64': attribute type 10 has an invalid length. [ 102.728122][ T31] audit: type=1400 audit(102.660:149): avc: denied { create } for pid=3965 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 109.982669][ T31] audit: type=1400 audit(109.920:150): avc: denied { write } for pid=3974 comm="syz.1.68" name="netstat" dev="proc" ino=4026532690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 110.293234][ T31] audit: type=1400 audit(110.230:151): avc: denied { bind } for pid=3978 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.296545][ T31] audit: type=1400 audit(110.230:152): avc: denied { write } for pid=3978 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.801480][ T31] audit: type=1400 audit(110.740:153): avc: denied { setopt } for pid=3978 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.876470][ T31] audit: type=1400 audit(112.810:154): avc: denied { ioctl } for pid=3984 comm="syz.0.71" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=2859 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 114.119748][ T4002] Zero length message leads to an empty skb [ 114.344275][ T31] audit: type=1400 audit(114.280:155): avc: denied { create } for pid=4006 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.604886][ T4015] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 114.744237][ T31] audit: type=1400 audit(114.680:156): avc: denied { write } for pid=4020 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.744493][ T31] audit: type=1400 audit(114.680:157): avc: denied { nlmsg_write } for pid=4020 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.898625][ T31] audit: type=1400 audit(120.830:158): avc: denied { ioctl } for pid=4042 comm="syz.1.96" path="socket:[2920]" dev="sockfs" ino=2920 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.074445][ T31] audit: type=1400 audit(121.010:159): avc: denied { bind } for pid=4047 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.077519][ T31] audit: type=1400 audit(121.010:160): avc: denied { setopt } for pid=4047 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.262995][ T31] audit: type=1400 audit(121.200:161): avc: denied { mount } for pid=4039 comm="syz.0.95" name="/" dev="ramfs" ino=3158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 121.765543][ T4053] capability: warning: `syz.0.95' uses deprecated v2 capabilities in a way that may be insecure [ 122.365228][ T31] audit: type=1400 audit(122.300:162): avc: denied { create } for pid=4039 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.002344][ T31] audit: type=1400 audit(122.940:163): avc: denied { connect } for pid=4051 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.003145][ T31] audit: type=1400 audit(122.940:164): avc: denied { name_connect } for pid=4051 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 123.053956][ T31] audit: type=1400 audit(122.990:165): avc: denied { ioctl } for pid=4051 comm="syz.1.99" path="socket:[2954]" dev="sockfs" ino=2954 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.144876][ T31] audit: type=1400 audit(126.080:166): avc: denied { unmount } for pid=3100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 134.620608][ T4090] process 'syz.0.107' launched '/dev/fd/7' with NULL argv: empty string added [ 134.625748][ T31] audit: type=1400 audit(134.560:167): avc: denied { execute_no_trans } for pid=4080 comm="syz.0.107" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 135.005432][ T31] audit: type=1400 audit(134.930:168): avc: denied { kexec_image_load } for pid=4086 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 138.720480][ T31] audit: type=1400 audit(138.660:169): avc: denied { accept } for pid=4094 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.272082][ T31] audit: type=1326 audit(139.210:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 139.283691][ T31] audit: type=1326 audit(139.220:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 139.283937][ T31] audit: type=1326 audit(139.220:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x131f30 code=0x7ffc0000 [ 139.284093][ T31] audit: type=1326 audit(139.220:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 139.297604][ T31] audit: type=1326 audit(139.230:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000028 syscall=284 compat=0 ip=0x131f30 code=0x7ffc0000 [ 139.308197][ T31] audit: type=1326 audit(139.240:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 139.312356][ T31] audit: type=1326 audit(139.240:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 139.580053][ T4106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.749238][ C1] hrtimer: interrupt took 12136896 ns [ 158.690341][ T31] audit: type=1400 audit(158.630:177): avc: denied { setopt } for pid=4159 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.773908][ T4165] input: syz1 as /devices/virtual/input/input3 [ 159.021992][ T48] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 159.195674][ T48] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.211130][ T48] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 159.211603][ T48] usb 1-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 159.211716][ T48] usb 1-1: Manufacturer: syz [ 159.211800][ T48] usb 1-1: SerialNumber: syz [ 159.217254][ T48] usb 1-1: config 0 descriptor?? [ 159.430360][ T48] usb 1-1: USB disconnect, device number 2 [ 159.862503][ T4197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 171.399222][ T48] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 171.592177][ T48] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 171.592528][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.592624][ T48] usb 1-1: Product: syz [ 171.592683][ T48] usb 1-1: Manufacturer: syz [ 171.592760][ T48] usb 1-1: SerialNumber: syz [ 173.936102][ T31] audit: type=1400 audit(173.870:178): avc: denied { write } for pid=4248 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 181.144000][ T23] usb 1-1: USB disconnect, device number 3 [ 181.559750][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 181.709343][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 181.715637][ T23] usb 1-1: descriptor type invalid, skip [ 181.716592][ T23] usb 1-1: descriptor type invalid, skip [ 181.723311][ T23] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x1 has invalid maxpacket 32 [ 181.724802][ T23] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x82 has invalid maxpacket 32 [ 181.726248][ T23] usb 1-1: config 1 interface 0 has no altsetting 0 [ 181.759224][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 181.759898][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.773926][ T4263] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.777389][ T4263] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.140082][ T31] audit: type=1400 audit(182.070:179): avc: denied { write } for pid=4269 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.141454][ T31] audit: type=1400 audit(182.070:180): avc: denied { name_connect } for pid=4269 comm="syz.1.163" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 182.148003][ T31] audit: type=1400 audit(182.080:181): avc: denied { shutdown } for pid=4269 comm="syz.1.163" lport=34966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.229248][ T31] audit: type=1400 audit(182.160:182): avc: denied { map } for pid=4271 comm="syz.1.164" path="/dev/nullb0" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.229608][ T31] audit: type=1400 audit(182.160:183): avc: denied { execute } for pid=4271 comm="syz.1.164" path="/dev/nullb0" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.242651][ T23] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 251 proto 1 vid 0x0525 pid 0xA4A8 [ 182.260857][ T23] usb 1-1: USB disconnect, device number 4 [ 182.264443][ T23] usblp0: removed [ 194.495751][ T31] audit: type=1326 audit(194.430:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.0.169" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 194.500555][ T31] audit: type=1326 audit(194.430:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.0.169" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 194.501709][ T31] audit: type=1326 audit(194.430:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.0.169" exe="/syz-executor" sig=0 arch=40000028 syscall=5 compat=0 ip=0x131f30 code=0x7ffc0000 [ 194.502733][ T31] audit: type=1326 audit(194.430:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.0.169" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 194.503749][ T31] audit: type=1326 audit(194.430:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.0.169" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 194.506667][ T31] audit: type=1326 audit(194.440:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.0.169" exe="/syz-executor" sig=0 arch=40000028 syscall=108 compat=0 ip=0x131f30 code=0x7ffc0000 [ 194.508648][ T31] audit: type=1326 audit(194.440:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.0.169" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 194.527609][ T31] audit: type=1326 audit(194.440:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.0.169" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 195.324494][ T4304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.171'. [ 195.324911][ T4304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.171'. [ 195.340698][ T4304] dummy0: entered promiscuous mode [ 195.345453][ T4304] dummy0: left promiscuous mode [ 196.319579][ T1783] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 196.473356][ T1783] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.473666][ T1783] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.473943][ T1783] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72 [ 196.491709][ T1783] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 196.491947][ T1783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.492400][ T1783] usb 2-1: Product: syz [ 196.492450][ T1783] usb 2-1: Manufacturer: syz [ 196.492481][ T1783] usb 2-1: SerialNumber: syz [ 196.500235][ T4316] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 196.718299][ T1783] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 196.964493][ T51] usb 2-1: USB disconnect, device number 2 [ 196.983163][ T51] usblp0: removed [ 197.186952][ T31] audit: type=1400 audit(197.120:192): avc: denied { create } for pid=4335 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 199.430912][ T31] audit: type=1400 audit(199.370:193): avc: denied { watch } for pid=4309 comm="syz.0.172" path="/73" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 201.892370][ T31] audit: type=1400 audit(201.830:194): avc: denied { unmount } for pid=4347 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 207.291229][ T4356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.184'. [ 207.292288][ T4356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.184'. [ 207.298741][ T4356] veth0: entered promiscuous mode [ 207.304442][ T4356] veth0: left promiscuous mode [ 207.444685][ T31] audit: type=1400 audit(207.380:195): avc: denied { getopt } for pid=4362 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 212.295999][ T31] audit: type=1400 audit(212.230:196): avc: denied { mounton } for pid=4384 comm="syz.0.191" path="/79/file0" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 212.309609][ T31] audit: type=1400 audit(212.240:197): avc: denied { unmount } for pid=4384 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 218.539485][ T4404] kernel profiling enabled (shift: 0) [ 220.585190][ T4408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.200'. [ 221.609303][ T2863] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 221.801150][ T2863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.801460][ T2863] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 221.801568][ T2863] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.801657][ T2863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.803605][ T2863] usb 2-1: config 0 descriptor?? [ 221.838542][ T2863] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 229.672349][ T31] audit: type=1400 audit(229.610:198): avc: denied { ioctl } for pid=4443 comm="syz.0.210" path="socket:[3689]" dev="sockfs" ino=3689 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.134251][ T31] audit: type=1400 audit(230.070:199): avc: denied { ioctl } for pid=4451 comm="syz.0.213" path="socket:[3706]" dev="sockfs" ino=3706 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.654320][ T4453] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 230.710225][ T4453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.727983][ T4453] bond0: entered promiscuous mode [ 230.728534][ T4453] bond_slave_0: entered promiscuous mode [ 230.729591][ T4453] bond_slave_1: entered promiscuous mode [ 230.731264][ T4453] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 230.736758][ T4453] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 232.069684][ T2863] usb 2-1: USB disconnect, device number 3 [ 232.133494][ T31] audit: type=1400 audit(232.070:200): avc: denied { create } for pid=4495 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 232.139807][ T31] audit: type=1400 audit(232.070:201): avc: denied { create } for pid=4495 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 232.152964][ T4496] syz_tun: entered promiscuous mode [ 232.153919][ T4496] vlan2: entered promiscuous mode [ 232.549195][ T4230] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 232.684525][ T31] audit: type=1800 audit(232.610:202): pid=4509 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.217" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 232.708000][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.708265][ T4230] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 232.708461][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.717761][ T4230] usb 2-1: config 0 descriptor?? [ 233.009642][ T1783] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 233.151053][ T4230] sony 0003:1345:3008.0001: hiddev0,hidraw0: USB HID vff.ff Device [HID 1345:3008] on usb-dummy_hcd.1-1/input0 [ 233.151338][ T4230] sony 0003:1345:3008.0001: failed to claim input [ 233.165873][ T1783] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 233.166078][ T1783] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 233.166294][ T1783] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.166343][ T1783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.170584][ T1783] usb 1-1: config 0 descriptor?? [ 233.176746][ T1783] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 233.342467][ T23] usb 2-1: USB disconnect, device number 4 [ 238.760002][ T48] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 238.916939][ T48] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 238.917324][ T48] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.917685][ T48] usb 2-1: config 0 interface 0 has no altsetting 0 [ 238.917830][ T48] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 238.917944][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.925991][ T48] usb 2-1: config 0 descriptor?? [ 239.340612][ T48] corsair 0003:1B1C:1B09.0002: unknown main item tag 0x0 [ 239.340986][ T48] corsair 0003:1B1C:1B09.0002: unknown main item tag 0x0 [ 239.341255][ T48] corsair 0003:1B1C:1B09.0002: unknown main item tag 0x0 [ 239.341406][ T48] corsair 0003:1B1C:1B09.0002: unknown main item tag 0x0 [ 239.341496][ T48] corsair 0003:1B1C:1B09.0002: unknown main item tag 0x0 [ 239.345250][ T48] corsair 0003:1B1C:1B09.0002: hidraw0: USB HID v0.01 Device [HID 1b1c:1b09] on usb-dummy_hcd.1-1/input0 [ 239.539539][ T23] usb 2-1: USB disconnect, device number 5 [ 239.593279][ T31] audit: type=1400 audit(239.530:203): avc: denied { read } for pid=4566 comm="syz.1.223" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 239.596620][ T31] audit: type=1400 audit(239.530:204): avc: denied { open } for pid=4566 comm="syz.1.223" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 239.606745][ T31] audit: type=1400 audit(239.530:205): avc: denied { ioctl } for pid=4566 comm="syz.1.223" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 243.404882][ T23] usb 1-1: USB disconnect, device number 5 [ 244.991705][ T2863] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 245.191643][ T2863] usb 1-1: Using ep0 maxpacket: 32 [ 245.223113][ T2863] usb 1-1: descriptor type invalid, skip [ 245.229127][ T2863] usb 1-1: descriptor type invalid, skip [ 245.240314][ T2863] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x1 has invalid maxpacket 32 [ 245.242029][ T2863] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x82 has invalid maxpacket 32 [ 245.242771][ T2863] usb 1-1: config 1 interface 0 has no altsetting 0 [ 245.301708][ T2863] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 245.302587][ T2863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.307066][ T4591] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 245.308217][ T4591] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 245.762106][ T2863] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 251 proto 1 vid 0x0525 pid 0xA4A8 [ 245.800093][ T2863] usb 1-1: USB disconnect, device number 6 [ 245.814548][ T2863] usblp0: removed [ 246.264121][ T2863] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 246.523577][ T2863] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 246.524273][ T2863] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 246.529263][ T2863] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.530233][ T2863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.539764][ T2863] usb 1-1: config 0 descriptor?? [ 246.559584][ T2863] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 250.377291][ T4622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.232'. [ 250.491982][ T4630] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 251.026755][ T4636] 8<--- cut here --- [ 251.031978][ T4636] Unable to handle kernel NULL pointer dereference at virtual address 0000000e when read [ 251.033573][ T4636] [0000000e] *pgd=85e20003, *pmd=f0ff7003 [ 251.035892][ T4636] Internal error: Oops: 205 [#1] SMP ARM [ 251.036764][ T4636] Modules linked in: [ 251.037421][ T4636] CPU: 1 UID: 0 PID: 4636 Comm: syz.1.236 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 251.037809][ T4636] Hardware name: ARM-Versatile Express [ 251.038129][ T4636] PC is at io_ring_buffers_peek+0x24/0x258 [ 251.038715][ T4636] LR is at io_buffers_peek+0x68/0x8c [ 251.039081][ T4636] pc : [<8088956c>] lr : [<80889cb0>] psr: 20000013 [ 251.039289][ T4636] sp : dfa45dc0 ip : dfa45e08 fp : dfa45e04 [ 251.039565][ T4636] r10: 00012361 r9 : 00000000 r8 : 84cedf40 [ 251.039766][ T4636] r7 : 852ac90c r6 : 852ac900 r5 : dfa45e44 r4 : 8597f240 [ 251.040015][ T4636] r3 : 00000001 r2 : 852ac90c r1 : dfa45e44 r0 : 8597f240 [ 251.040306][ T4636] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 251.040573][ T4636] Control: 30c5387d Table: 8500ef40 DAC: 00000000 [ 251.040850][ T4636] Register r0 information: slab io_kiocb start 8597f240 pointer offset 0 size 192 [ 251.041704][ T4636] Register r1 information: 2-page vmalloc region starting at 0xdfa44000 allocated at kernel_clone+0xac/0x3e4 [ 251.042249][ T4636] Register r2 information: slab kmalloc-256 start 852ac900 pointer offset 12 size 256 [ 251.042608][ T4636] Register r3 information: non-paged memory [ 251.042907][ T4636] Register r4 information: slab io_kiocb start 8597f240 pointer offset 0 size 192 [ 251.043302][ T4636] Register r5 information: 2-page vmalloc region starting at 0xdfa44000 allocated at kernel_clone+0xac/0x3e4 [ 251.043628][ T4636] Register r6 information: slab kmalloc-256 start 852ac900 pointer offset 0 size 256 [ 251.043951][ T4636] Register r7 information: slab kmalloc-256 start 852ac900 pointer offset 12 size 256 [ 251.044260][ T4636] Register r8 information: slab kmalloc-64 start 84cedf40 pointer offset 0 size 64 [ 251.044563][ T4636] Register r9 information: NULL pointer [ 251.044872][ T4636] Register r10 information: non-paged memory [ 251.045087][ T4636] Register r11 information: 2-page vmalloc region starting at 0xdfa44000 allocated at kernel_clone+0xac/0x3e4 [ 251.045470][ T4636] Register r12 information: 2-page vmalloc region starting at 0xdfa44000 allocated at kernel_clone+0xac/0x3e4 [ 251.046003][ T4636] Process syz.1.236 (pid: 4636, stack limit = 0xdfa44000) [ 251.046453][ T4636] Stack: (0xdfa45dc0 to 0xdfa46000) [ 251.046833][ T4636] 5dc0: 81a4be54 8030cb0c 84b6e100 00000001 00010000 852ac90c 00000000 8597f240 [ 251.047304][ T4636] 5de0: dfa45e44 852ac900 852ac90c 00000000 80000001 00012361 dfa45e1c dfa45e08 [ 251.047746][ T4636] 5e00: 80889cb0 80889554 85418500 8597f240 dfa45e84 dfa45e20 808931e0 80889c54 [ 251.048185][ T4636] 5e20: dfa45e4c dfa45e30 8089ec2c 8050a4c4 00010001 00000001 8057abbc 00000000 [ 251.048644][ T4636] 5e40: 00000000 852ac90c 00000000 00000000 00010001 18e66cd4 80886a40 8597f240 [ 251.049396][ T4636] 5e60: 81cf0ca0 00000000 80000001 81cf0b5c 0000001b 840ed400 dfa45ebc dfa45e88 [ 251.050207][ T4636] 5e80: 80886bd8 80892f38 8597f9c0 8597fb40 8597f0c0 84b6e000 8597f2ac 8597f240 [ 251.050560][ T4636] 5ea0: 85940000 00000000 00000000 840ed400 dfa45f14 dfa45ec0 808877a8 80886b7c [ 251.050940][ T4636] 5ec0: 8088e164 81a4bdf8 00000000 00000000 00000800 00000800 81cf0b5c 00000800 [ 251.051238][ T4636] 5ee0: 84b6e000 18e66cd4 8495e840 00000042 84b6e000 00003517 8495e840 00000000 [ 251.051493][ T4636] 5f00: 840ed400 00000000 dfa45fa4 dfa45f18 80888250 808875a8 ecac8b10 84b6e040 [ 251.051722][ T4636] 5f20: 00000000 0000173d 81a4fbd0 81a4faa0 dfa45f54 dfa45f40 8026b438 8029ce1c [ 251.051973][ T4636] 5f40: dfa45fb0 40000000 dfa45f84 dfa45f58 802229dc 8026b3f4 00000000 8281d05c [ 251.052205][ T4636] 5f60: dfa45fb0 0014c490 ecac8b10 80222930 00000000 18e66cd4 dfa45fac 00000000 [ 251.052429][ T4636] 5f80: 00000000 002e630c 000001aa 8020029c 840ed400 000001aa 00000000 dfa45fa8 [ 251.052661][ T4636] 5fa0: 80200060 80888124 00000000 00000000 00000003 00003517 0000173d 00000042 [ 251.052955][ T4636] 5fc0: 00000000 00000000 002e630c 000001aa 002d0000 00000000 00006364 76bc00bc [ 251.053186][ T4636] 5fe0: 76bbfec0 76bbfeb0 0001939c 00131f30 60000010 00000003 00000000 00000000 [ 251.053505][ T4636] Call trace: [ 251.053846][ T4636] [<80889548>] (io_ring_buffers_peek) from [<80889cb0>] (io_buffers_peek+0x68/0x8c) [ 251.054343][ T4636] r10:00012361 r9:80000001 r8:00000000 r7:852ac90c r6:852ac900 r5:dfa45e44 [ 251.054623][ T4636] r4:8597f240 [ 251.054860][ T4636] [<80889c48>] (io_buffers_peek) from [<808931e0>] (io_recv+0x2b4/0x46c) [ 251.055117][ T4636] r5:8597f240 r4:85418500 [ 251.055250][ T4636] [<80892f2c>] (io_recv) from [<80886bd8>] (io_issue_sqe+0x68/0x658) [ 251.055488][ T4636] r10:840ed400 r9:0000001b r8:81cf0b5c r7:80000001 r6:00000000 r5:81cf0ca0 [ 251.055762][ T4636] r4:8597f240 [ 251.055922][ T4636] [<80886b70>] (io_issue_sqe) from [<808877a8>] (io_submit_sqes+0x20c/0x938) [ 251.056435][ T4636] r10:840ed400 r9:00000000 r8:00000000 r7:85940000 r6:8597f240 r5:8597f2ac [ 251.056956][ T4636] r4:84b6e000 [ 251.057255][ T4636] [<8088759c>] (io_submit_sqes) from [<80888250>] (sys_io_uring_enter+0x138/0x780) [ 251.057729][ T4636] r10:00000000 r9:840ed400 r8:00000000 r7:8495e840 r6:00003517 r5:84b6e000 [ 251.057984][ T4636] r4:00000042 [ 251.058095][ T4636] [<80888118>] (sys_io_uring_enter) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 251.058435][ T4636] Exception stack(0xdfa45fa8 to 0xdfa45ff0) [ 251.058660][ T4636] 5fa0: 00000000 00000000 00000003 00003517 0000173d 00000042 [ 251.059010][ T4636] 5fc0: 00000000 00000000 002e630c 000001aa 002d0000 00000000 00006364 76bc00bc [ 251.059310][ T4636] 5fe0: 76bbfec0 76bbfeb0 0001939c 00131f30 [ 251.059588][ T4636] r10:000001aa r9:840ed400 r8:8020029c r7:000001aa r6:002e630c r5:00000000 [ 251.059848][ T4636] r4:00000000 [ 251.060125][ T4636] Code: e1a08002 e5912000 e50b2030 e1a05001 (e1d920be) [ 251.061235][ T4636] ---[ end trace 0000000000000000 ]--- [ 251.064723][ T31] audit: type=1400 audit(251.000:206): avc: denied { read } for pid=2909 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 251.064980][ T31] audit: type=1400 audit(251.000:207): avc: denied { search } for pid=2909 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.068436][ T31] audit: type=1400 audit(251.000:208): avc: denied { write } for pid=2909 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.068633][ T31] audit: type=1400 audit(251.000:209): avc: denied { add_name } for pid=2909 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.068775][ T31] audit: type=1400 audit(251.000:210): avc: denied { create } for pid=2909 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 251.069124][ T31] audit: type=1400 audit(251.000:211): avc: denied { append open } for pid=2909 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 251.069279][ T31] audit: type=1400 audit(251.000:212): avc: denied { getattr } for pid=2909 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 251.081026][ T4636] Kernel panic - not syncing: Fatal exception [ 251.083077][ T4636] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:02:01 Registers: info registers vcpu 0 CPU#0 R00=00000004 R01=7688f008 R02=00040000 R03=00000000 R04=00000000 R05=00000000 R06=00000000 R07=00000003 R08=01e3eac0 R09=00000000 R10=00000001 R11=7e8b32bc R12=00000001 R13=7e8b3148 R14=00000000 R15=769d5590 PSR=20010010 --C- A S usr32 s00=01018002 s01=00000000 d00=0000000001018002 s02=88035008 s03=0a080001 d01=0a08000188035008 s04=06019003 s05=00000208 d02=0000020806019003 s06=01980300 s07=03000800 d03=0300080001980300 s08=800401a0 s09=16800316 d04=16800316800401a0 s10=6a2d0808 s11=b003fe5d d05=b003fe5d6a2d0808 s12=08100001 s13=0001c003 d06=0001c00308100001 s14=80808810 s15=80808080 d07=8080808080808810 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000806 s33=08000100 d16=0800010000000806 s34=0201eec0 s35=80030480 d17=800304800201eec0 s36=50080001 s37=00018803 d18=0001880350080001 s38=90030a08 s39=02080601 d19=0208060190030a08 s40=03000000 s41=08000198 d20=0800019803000000 s42=01a00300 s43=03168004 d21=0316800401a00300 s44=08081680 s45=fe5d6a2d d22=fe5d6a2d08081680 s46=0001b003 s47=c0030810 d23=c00308100001b003 s48=a938a211 s49=f4a7dbf2 d24=f4a7dbf2a938a211 s50=f0b75593 s51=51a79d66 d25=51a79d66f0b75593 s52=30c38d29 s53=5209c143 d26=5209c14330c38d29 s54=4e36f106 s55=d70a4c6b d27=d70a4c6b4e36f106 s56=d160434a s57=d1a2deeb d28=d1a2deebd160434a s58=9fc19deb s59=f194bbed d29=f194bbed9fc19deb s60=0dca7910 s61=bb414cb9 d30=bb414cb90dca7910 s62=460e237a s63=13d32db6 d31=13d32db6460e237a FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=dfa45b40 R01=822463e8 R02=82a71188 R03=000000a0 R04=00000000 R05=82257c34 R06=82a70d4c R07=00000000 R08=82a7045c R09=0000121c R10=00000000 R11=dfa45b34 R12=dfa45b18 R13=dfa45b18 R14=81a4007c R15=81a4007c PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000