last executing test programs: 1m14.759342257s ago: executing program 0 (id=1): r0 = openat$full(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) close(r0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x0, 0x78) finit_module(r1, 0x0, 0x7) r2 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x11}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)=0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_gettime(r3, &(0x7f00000000c0)) close_range(r2, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) pipe2(&(0x7f0000000ac0)={0xffffffffffffffff}, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x5761, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000010038ae9e94707124f4152a93b00528b7d6620912a20f9bef62", @ANYRES16=r4, @ANYBLOB="080028bd7000fedbdf251800000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ffffffff710000000a001a0008021100000100000a001a0008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a001a0008021100000100000a0006000802110000010000"], 0x70}, 0x1, 0x0, 0x0, 0x44094}, 0x20004010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0) 1m12.439630465s ago: executing program 0 (id=4): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200070000000800030005ac0f"], 0x58}}, 0x0) 1m12.202053701s ago: executing program 0 (id=5): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x108, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x803, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x2) r6 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x90) sendmmsg$unix(r6, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x10, 0x1, 0x1, [r7]}}], 0x10, 0x8801}}], 0x1, 0x20004031) close_range(r4, 0xffffffffffffffff, 0x0) 50.49619492s ago: executing program 0 (id=11): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x344d, &(0x7f0000000080)={0x0, 0x1539, 0x80, 0x2, 0x2bf}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4000814) sendmsg$NFT_BATCH(r1, 0x0, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2200}], 0x0, 0xa}, 0x20) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) 49.625925709s ago: executing program 0 (id=12): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) landlock_create_ruleset(&(0x7f0000000080)={0x1, 0x2, 0x1}, 0x48, 0x0) 49.489152038s ago: executing program 0 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x14) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0xdada}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000440)={'wlan0\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="080086"], 0xfdef) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x110, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.203662394s ago: executing program 32 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x14) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0xdada}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000440)={'wlan0\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="080086"], 0xfdef) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x110, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.939707548s ago: executing program 1 (id=44): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x240488d0) syz_io_uring_setup(0x231, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 1.550102744s ago: executing program 1 (id=45): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0) 1.31949815s ago: executing program 1 (id=46): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x5c}}, 0x0) 589.97192ms ago: executing program 1 (id=47): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0x1f00, 0x12) 200.687096ms ago: executing program 1 (id=48): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000780)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x4b) 0s ago: executing program 1 (id=49): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0x3) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0x800, 0x1f, 0x10000, 0x4, 0x3, 0xcc7, 0x4, 0x10, 0x8, 0x6, 0x2, 0x4, 0x7, 0x1, 0x6, 0x10000105, 0x0, 0x1244d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x8, 0x20001e58, 0x80000b, 0xe6c, 0x3c, 0x9, 0x2, 0xffffffff, 0xeffffff8]}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) kernel console output (not intermixed with test programs): [ 48.853994][ T29] audit: type=1400 audit(48.780:56): avc: denied { read write } for pid=3096 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.857381][ T29] audit: type=1400 audit(48.780:57): avc: denied { open } for pid=3096 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:2604' (ED25519) to the list of known hosts. [ 62.763059][ T29] audit: type=1400 audit(62.680:58): avc: denied { name_bind } for pid=3099 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.953835][ T29] audit: type=1400 audit(64.870:59): avc: denied { execute } for pid=3100 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.963940][ T29] audit: type=1400 audit(64.890:60): avc: denied { execute_no_trans } for pid=3100 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 67.595893][ T29] audit: type=1400 audit(67.520:61): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 67.600041][ T29] audit: type=1400 audit(67.520:62): avc: denied { mount } for pid=3100 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.618406][ T3100] cgroup: Unknown subsys name 'net' [ 67.627659][ T29] audit: type=1400 audit(67.550:63): avc: denied { unmount } for pid=3100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.854679][ T3100] cgroup: Unknown subsys name 'cpuset' [ 67.860916][ T3100] cgroup: Unknown subsys name 'hugetlb' [ 67.864357][ T3100] cgroup: Unknown subsys name 'rlimit' [ 68.101034][ T29] audit: type=1400 audit(68.020:64): avc: denied { setattr } for pid=3100 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.106328][ T29] audit: type=1400 audit(68.030:65): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 68.107723][ T29] audit: type=1400 audit(68.030:66): avc: denied { mount } for pid=3100 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 68.299089][ T3102] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 68.305375][ T29] audit: type=1400 audit(68.230:67): avc: denied { relabelto } for pid=3102 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.309816][ T29] audit: type=1400 audit(68.230:68): avc: denied { write } for pid=3102 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 68.344905][ T29] audit: type=1400 audit(68.270:69): avc: denied { read } for pid=3100 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.346852][ T29] audit: type=1400 audit(68.270:70): avc: denied { open } for pid=3100 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 75.835050][ T3100] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.013660][ T29] audit: type=1400 audit(77.940:71): avc: denied { execmem } for pid=3103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.073850][ T29] audit: type=1400 audit(78.000:72): avc: denied { read } for pid=3105 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.076228][ T29] audit: type=1400 audit(78.000:73): avc: denied { open } for pid=3105 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.087119][ T29] audit: type=1400 audit(78.010:74): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 78.105320][ T29] audit: type=1400 audit(78.030:75): avc: denied { module_request } for pid=3105 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 78.159752][ T29] audit: type=1400 audit(78.080:76): avc: denied { sys_module } for pid=3105 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 78.856203][ T29] audit: type=1400 audit(78.780:77): avc: denied { ioctl } for pid=3105 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.748780][ T3105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.757301][ T3105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.881459][ T3106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.891894][ T3106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.630330][ T3105] hsr_slave_0: entered promiscuous mode [ 80.634650][ T3105] hsr_slave_1: entered promiscuous mode [ 80.857111][ T3106] hsr_slave_0: entered promiscuous mode [ 80.859156][ T3106] hsr_slave_1: entered promiscuous mode [ 80.862293][ T3106] debugfs: 'hsr0' already exists in 'hsr' [ 80.863583][ T3106] Cannot create hsr debugfs directory [ 81.007814][ T29] audit: type=1400 audit(80.930:78): avc: denied { create } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.011230][ T29] audit: type=1400 audit(80.930:79): avc: denied { write } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.017159][ T29] audit: type=1400 audit(80.940:80): avc: denied { read } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.036530][ T3105] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.057800][ T3105] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.064298][ T3105] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.085006][ T3105] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.256591][ T3106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.265278][ T3106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.271843][ T3106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.281281][ T3106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.740351][ T3105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.884787][ T3106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.403795][ T3106] veth0_vlan: entered promiscuous mode [ 84.405128][ T3105] veth0_vlan: entered promiscuous mode [ 84.426343][ T3106] veth1_vlan: entered promiscuous mode [ 84.446253][ T3105] veth1_vlan: entered promiscuous mode [ 84.484040][ T3106] veth0_macvtap: entered promiscuous mode [ 84.515291][ T3106] veth1_macvtap: entered promiscuous mode [ 84.609217][ T3105] veth0_macvtap: entered promiscuous mode [ 84.638526][ T54] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.670142][ T54] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.676219][ T3105] veth1_macvtap: entered promiscuous mode [ 84.703373][ T54] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.720403][ T54] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.808130][ T29] audit: type=1400 audit(84.730:81): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.826281][ T29] audit: type=1400 audit(84.750:82): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/syzkaller.svzKIU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.837179][ T29] audit: type=1400 audit(84.760:83): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.852026][ T29] audit: type=1400 audit(84.770:84): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/syzkaller.svzKIU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.861032][ T29] audit: type=1400 audit(84.780:85): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/syzkaller.svzKIU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.875225][ T2149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.875729][ T2149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.875834][ T2149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.875964][ T2149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.907669][ T29] audit: type=1400 audit(84.830:86): avc: denied { unmount } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.926589][ T29] audit: type=1400 audit(84.850:87): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.929491][ T29] audit: type=1400 audit(84.850:88): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="gadgetfs" ino=2220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 84.978326][ T29] audit: type=1400 audit(84.880:89): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.996241][ T29] audit: type=1400 audit(84.920:90): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 85.100301][ T3106] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.563993][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 109.564489][ T29] audit: type=1400 audit(109.480:112): avc: denied { allowed } for pid=3747 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 109.576114][ T29] audit: type=1400 audit(109.500:113): avc: denied { create } for pid=3747 comm="syz.0.11" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 110.256500][ T29] audit: type=1400 audit(110.180:114): avc: denied { create } for pid=3747 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.267286][ T29] audit: type=1400 audit(110.190:115): avc: denied { write } for pid=3747 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.155934][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.390793][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 113.629788][ T43] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 113.637573][ T43] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 113.639066][ T43] usb 1-1: config 179 has no interface number 0 [ 113.639982][ T43] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 113.641080][ T43] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 113.643148][ T43] usb 1-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 113.643272][ T43] usb 1-1: config 179 interface 65 has no altsetting 0 [ 113.643502][ T43] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 113.643552][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.305130][ T29] audit: type=1400 audit(126.230:116): avc: denied { write } for pid=3769 comm="syz.1.16" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 126.305702][ T29] audit: type=1400 audit(126.230:117): avc: denied { open } for pid=3769 comm="syz.1.16" path="/9/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 126.311580][ T29] audit: type=1400 audit(126.230:118): avc: denied { ioctl } for pid=3769 comm="syz.1.16" path="/9/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 126.370402][ T29] audit: type=1400 audit(126.290:119): avc: denied { unmount } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 126.617078][ T29] audit: type=1400 audit(126.540:120): avc: denied { mounton } for pid=3774 comm="syz.1.17" path="/10/file0" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.616377][ T3781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.616799][ T3781] IPv6: NLM_F_CREATE should be set when creating new route [ 129.617169][ T3781] IPv6: NLM_F_CREATE should be set when creating new route [ 129.828506][ T29] audit: type=1400 audit(129.750:121): avc: denied { create } for pid=3782 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.845455][ T29] audit: type=1400 audit(129.770:122): avc: denied { bind } for pid=3782 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.339257][ T29] audit: type=1400 audit(130.250:123): avc: denied { setopt } for pid=3782 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.340997][ T29] audit: type=1400 audit(130.260:124): avc: denied { accept } for pid=3782 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.671735][ T29] audit: type=1400 audit(130.590:125): avc: denied { append } for pid=3786 comm="syz.1.20" name="card1" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.897839][ T3789] syz_tun: entered allmulticast mode [ 133.830732][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 133.834040][ T29] audit: type=1400 audit(133.750:129): avc: denied { write } for pid=3928 comm="syz.1.26" name="raw" dev="proc" ino=4026532764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 134.245395][ T3733] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 134.426210][ T3733] usb 2-1: No LPM exit latency info found, disabling LPM. [ 134.458325][ T3733] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x1 is Bulk; changing to Interrupt [ 134.459829][ T3733] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x82 is Bulk; changing to Interrupt [ 134.473556][ T3733] usb 2-1: config 1 interface 0 has no altsetting 0 [ 134.530341][ T3733] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 134.531353][ T3733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.536324][ T3733] usb 2-1: Product: 㶙搨끢ᦷ렇䑸悞왦﨓ꀟ㑆⠨︺Ⓧ鿊﵅昵䀼㧕劌븍폾횅늢篺팓턳⪬멍ࠟ불緋㎚♌厔葞瀙毹펿槚滒⾝㙍✀텔᳨ݦ몽흿원鵐占痞㊙㈊쯕㕓䤔ﻅۉ䙍ﻌ因琨夜牬ㄊ쫗堸⒪㴿禫㭉伔蟌ᤉ듎声遘畃죗ꘒ첞鄝疣픤ꏢۿ禊᱑콫 [ 134.539112][ T3733] usb 2-1: Manufacturer: ␊ [ 134.539179][ T3733] usb 2-1: SerialNumber:  [ 134.685221][ T3929] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 134.691760][ T3929] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 134.940680][ T3733] usb 2-1: USB disconnect, device number 2 [ 135.385161][ T3733] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 135.533225][ T3733] usb 2-1: Using ep0 maxpacket: 8 [ 135.548932][ T3733] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.550684][ T3733] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.551861][ T3733] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 135.553405][ T3733] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 135.554480][ T3733] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 135.554721][ T3733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.615510][ T3733] hub 2-1:1.0: bad descriptor, ignoring hub [ 135.630207][ T3733] hub 2-1:1.0: probe with driver hub failed with error -5 [ 135.646380][ T3733] cdc_wdm 2-1:1.0: skipping garbage [ 135.647380][ T3733] cdc_wdm 2-1:1.0: skipping garbage [ 135.656049][ T3733] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 136.146382][ T9] usb 2-1: USB disconnect, device number 3 [ 136.525617][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.681281][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.683083][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 136.687378][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.688393][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 136.689356][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 136.741508][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.750731][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.751775][ T9] usb 2-1: Product: syz [ 136.753057][ T9] usb 2-1: Manufacturer: syz [ 136.795535][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 136.804677][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 136.808355][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 137.034183][ T9] usb 2-1: USB disconnect, device number 4 [ 137.356277][ T29] audit: type=1400 audit(137.280:130): avc: denied { map } for pid=3980 comm="syz.1.29" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 137.358563][ T29] audit: type=1400 audit(137.280:131): avc: denied { read write } for pid=3980 comm="syz.1.29" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.523218][ T29] audit: type=1400 audit(141.440:132): avc: denied { name_bind } for pid=3994 comm="syz.1.33" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 141.538494][ T29] audit: type=1400 audit(141.460:133): avc: denied { node_bind } for pid=3994 comm="syz.1.33" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 142.820099][ T29] audit: type=1400 audit(142.740:134): avc: denied { create } for pid=3998 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.837832][ T29] audit: type=1400 audit(142.760:135): avc: denied { write } for pid=3998 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.125697][ T3733] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.273331][ T3733] usb 2-1: Using ep0 maxpacket: 32 [ 155.319299][ T3733] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 155.377034][ T3733] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 155.378158][ T3733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.381558][ T3733] usb 2-1: Product: syz [ 155.384839][ T3733] usb 2-1: Manufacturer: syz [ 155.387319][ T3733] usb 2-1: SerialNumber: syz [ 155.400312][ T3733] usb 2-1: config 0 descriptor?? [ 155.405990][ T4009] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.417123][ T3733] hub 2-1:0.0: bad descriptor, ignoring hub [ 155.418338][ T3733] hub 2-1:0.0: probe with driver hub failed with error -5 [ 155.436969][ T3733] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input3 [ 155.646214][ T43] usb 2-1: USB disconnect, device number 5 [ 155.646304][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 156.427967][ T4027] syzkaller0: entered promiscuous mode [ 156.429739][ T4027] syzkaller0: entered allmulticast mode [ 157.654818][ T4051] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.241873][ T29] audit: type=1400 audit(158.150:136): avc: denied { create } for pid=4059 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.253119][ T29] audit: type=1400 audit(158.170:137): avc: denied { setopt } for pid=4059 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.068122][ T4098] genirq: Flags mismatch irq 31. 00200001 (comedi_parport) vs. 00200081 (virtio0) [ 160.074060][ T4098] 8<--- cut here --- [ 160.074829][ T4098] Unable to handle kernel paging request at virtual address fee00800 when write [ 160.095217][ T29] audit: type=1400 audit(160.020:138): avc: denied { read } for pid=2912 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 160.098274][ T29] audit: type=1400 audit(160.020:139): avc: denied { search } for pid=2912 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.101885][ T29] audit: type=1400 audit(160.020:140): avc: denied { search } for pid=2912 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.108527][ T4098] [fee00800] *pgd=80000080007003, *pmd=00000000 [ 160.115896][ T29] audit: type=1400 audit(160.040:141): avc: denied { add_name } for pid=2912 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.119835][ T4098] Internal error: Oops: a06 [#1] SMP ARM [ 160.121520][ T4098] Modules linked in: [ 160.122354][ T4098] CPU: 0 UID: 0 PID: 4098 Comm: syz.1.49 Not tainted syzkaller #0 PREEMPT [ 160.123222][ T4098] Hardware name: ARM-Versatile Express [ 160.123689][ T4098] PC is at parport_attach+0x174/0x1d0 [ 160.124988][ T4098] LR is at parport_attach+0x164/0x1d0 [ 160.125207][ T4098] pc : [<814087e8>] lr : [<814087d8>] psr: 60000113 [ 160.125463][ T4098] sp : dfb4dd28 ip : dfb4dd28 fp : dfb4dd4c [ 160.125679][ T4098] r10: 82b28ad8 r9 : 00000003 r8 : 83f8d600 [ 160.125908][ T4098] r7 : dfb4dd88 r6 : 83f8d600 r5 : 00000000 r4 : 00000000 [ 160.126162][ T4098] r3 : fee00800 r2 : 81e1a338 r1 : 00000001 r0 : 81408458 [ 160.126505][ T4098] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 160.126811][ T4098] Control: 30c5387d Table: 85cd2e80 DAC: fffffffd [ 160.127087][ T4098] Register r0 information: non-slab/vmalloc memory [ 160.127872][ T4098] Register r1 information: non-paged memory [ 160.128170][ T4098] Register r2 information: non-slab/vmalloc memory [ 160.128413][ T4098] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 160.128902][ T4098] Register r4 information: NULL pointer [ 160.129118][ T4098] Register r5 information: NULL pointer [ 160.129318][ T4098] Register r6 information: slab kmalloc-192 start 83f8d600 pointer offset 0 size 192 [ 160.130758][ T4098] Register r7 information: 2-page vmalloc region starting at 0xdfb4c000 allocated at kernel_clone+0xac/0x3ec [ 160.131193][ T4098] Register r8 information: slab kmalloc-192 start 83f8d600 pointer offset 0 size 192 [ 160.131552][ T4098] Register r9 information: non-paged memory [ 160.131745][ T4098] Register r10 information: non-slab/vmalloc memory [ 160.131984][ T4098] Register r11 information: 2-page vmalloc region starting at 0xdfb4c000 allocated at kernel_clone+0xac/0x3ec [ 160.132748][ T4098] Register r12 information: 2-page vmalloc region starting at 0xdfb4c000 allocated at kernel_clone+0xac/0x3ec [ 160.133336][ T4098] Process syz.1.49 (pid: 4098, stack limit = 0xdfb4c000) [ 160.133817][ T4098] Stack: (0xdfb4dd28 to 0xdfb4e000) [ 160.134423][ T4098] dd20: 82432d2c 83f8d600 829d3f08 829d3f08 81e1a7f8 83f8d644 [ 160.134752][ T4098] dd40: dfb4dd84 dfb4dd50 81404490 81408680 b5403587 00000000 858cbc00 20000300 [ 160.135014][ T4098] dd60: 83f8d600 b5403587 83f8d630 858cbc00 40946400 00000003 dfb4de44 dfb4dd88 [ 160.135284][ T4098] dd80: 813ffde8 81404394 656d6f63 705f6964 6f707261 00007472 00000000 00000800 [ 160.135566][ T4098] dda0: 0000001f 00010000 00000004 00000003 00000cc7 00000004 00000010 00000008 [ 160.135841][ T4098] ddc0: 00000006 00000002 00000004 00000007 00000001 00000006 10000105 00000000 [ 160.136144][ T4098] dde0: 0001244d 00000003 3fff7fff 00000089 00000010 00000008 20001e58 0080000b [ 160.136433][ T4098] de00: 00000e6c 0000003c 00000009 00000002 ffffffff effffff8 00000000 fdadd9e8 [ 160.136721][ T4098] de20: 00000000 833713c0 83f8d600 20000300 83f8d630 858cbc00 dfb4df14 dfb4de48 [ 160.136995][ T4098] de40: 81400ddc 813ffcf4 00000000 00000000 00000000 00000000 00000000 fdadd9e8 [ 160.137276][ T4098] de60: 00000000 00000000 824a35ec 0000005f 8410dbe8 00000064 844f37a4 858cbc00 [ 160.137567][ T4098] de80: dfb4dee4 dfb4de90 807b7d30 807ae254 00000064 00000001 00000000 dfb4deac [ 160.137843][ T4098] dea0: 85f686d0 834ea5d8 00006400 0000000b dfb4dea0 00000000 00000000 fdadd9e8 [ 160.138127][ T4098] dec0: 833713c0 40946400 20000300 20000300 833713c0 00000003 dfb4def4 dfb4dee8 [ 160.138402][ T4098] dee0: 807b7e50 fdadd9e8 dfb4df14 40946400 00000000 833713c1 20000300 833713c0 [ 160.138687][ T4098] df00: 00000003 858cbc00 dfb4dfa4 dfb4df18 805854f4 8140082c ecac8b10 858cbc00 [ 160.138968][ T4098] df20: dfb4df3c dfb4df30 81aaf29c 81aaf16c dfb4df54 dfb4df40 8025bcbc 8028e07c [ 160.139246][ T4098] df40: dfb4dfb0 40000000 dfb4df84 dfb4df58 80221a38 8025bc78 00000000 8281d17c [ 160.139526][ T4098] df60: dfb4dfb0 0014c880 ecac8b10 8022198c 00000000 fdadd9e8 dfb4dfac 00000000 [ 160.139792][ T4098] df80: 00000000 00316310 00000036 8020029c 858cbc00 00000036 00000000 dfb4dfa8 [ 160.140103][ T4098] dfa0: 80200060 805853d0 00000000 00000000 00000003 40946400 20000300 00000000 [ 160.140378][ T4098] dfc0: 00000000 00000000 00316310 00000036 00300000 00000000 00006364 76fe30bc [ 160.140669][ T4098] dfe0: 76fe2ec0 76fe2eb0 0001929c 00132320 60000010 00000003 00000000 00000000 [ 160.141025][ T4098] Call trace: [ 160.141372][ T4098] [<81408674>] (parport_attach) from [<81404490>] (comedi_device_attach+0x108/0x250) [ 160.142806][ T4098] r6:83f8d644 r5:81e1a7f8 r4:829d3f08 [ 160.143172][ T4098] [<81404388>] (comedi_device_attach) from [<813ffde8>] (do_devconfig_ioctl+0x100/0x220) [ 160.143644][ T4098] r10:00000003 r9:40946400 r8:858cbc00 r7:83f8d630 r6:b5403587 r5:83f8d600 [ 160.144025][ T4098] r4:20000300 [ 160.144204][ T4098] [<813ffce8>] (do_devconfig_ioctl) from [<81400ddc>] (comedi_unlocked_ioctl+0x5bc/0x1c2c) [ 160.144577][ T4098] r8:858cbc00 r7:83f8d630 r6:20000300 r5:83f8d600 r4:833713c0 [ 160.144821][ T4098] [<81400820>] (comedi_unlocked_ioctl) from [<805854f4>] (sys_ioctl+0x130/0xba0) [ 160.145187][ T4098] r10:858cbc00 r9:00000003 r8:833713c0 r7:20000300 r6:833713c1 r5:00000000 [ 160.145466][ T4098] r4:40946400 [ 160.145597][ T4098] [<805853c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 160.145992][ T4098] Exception stack(0xdfb4dfa8 to 0xdfb4dff0) [ 160.146340][ T4098] dfa0: 00000000 00000000 00000003 40946400 20000300 00000000 [ 160.146657][ T4098] dfc0: 00000000 00000000 00316310 00000036 00300000 00000000 00006364 76fe30bc [ 160.146930][ T4098] dfe0: 76fe2ec0 76fe2eb0 0001929c 00132320 [ 160.147196][ T4098] r10:00000036 r9:858cbc00 r8:8020029c r7:00000036 r6:00316310 r5:00000000 [ 160.147478][ T4098] r4:00000000 [ 160.147883][ T4098] Code: e596306c e3a04000 e7f33053 e2433612 (e5c34000) [ 160.149655][ T4098] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 160.150600][ T29] audit: type=1400 audit(160.040:142): avc: denied { create } for pid=2912 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 160.153525][ T29] audit: type=1400 audit(160.080:143): avc: denied { append open } for pid=2912 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 160.155430][ T29] audit: type=1400 audit(160.080:144): avc: denied { getattr } for pid=2912 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 160.317397][ T4098] Kernel panic - not syncing: Fatal exception [ 160.320009][ T4098] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:35:06 Registers: info registers vcpu 0 CPU#0 R00=826b92c4 R01=5b70c000 R02=0002a41f R03=81aafad0 R04=00000006 R05=828f7f88 R06=00000000 R07=828f7f80 R08=858c8c00 R09=00000028 R10=828f7f88 R11=ebc01cf4 R12=ebc01cf8 R13=ebc01ce8 R14=80340c68 R15=81aafae0 PSR=800c0093 N--- A S svc32 s00=30303830 s01=65687720 d00=6568772030303830 s02=54205b5d s03=38393034 d01=3839303454205b5d s04=6e55205d s05=656c6261 d02=656c62616e55205d s06=206f7420 s07=646e6168 d03=646e6168206f7420 s08=6b20656c s09=656e7265 d04=656e72656b20656c s10=6170206c s11=676e6967 d05=676e69676170206c s12=71657220 s13=74736575 d06=7473657571657220 s14=20746120 s15=74726976 d07=7472697620746120 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=84be46c0 R01=dfa05ee0 R02=dfa05cd4 R03=845ae000 R04=84be46c0 R05=8592e3c0 R06=8592e614 R07=00000002 R08=00000000 R09=00000002 R10=dfa05d4c R11=dfa05dfc R12=845ae000 R13=dfa05d40 R14=818801c8 R15=81596868 PSR=60070113 -ZC- A S svc32 s00=62696c2f s01=646f6d2f d00=646f6d2f62696c2f s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000