last executing test programs: 9m14.058311466s ago: executing program 1 (id=562): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setresuid(0x0, 0xee00, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) 9m13.864150189s ago: executing program 1 (id=563): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0x1, @local, 0x7}}, 0x0, 0x0, 0x59, 0x0, "cebd7ceedb7b0ad952e966b92b346b023df2cb59e32e10366456deac64d99f206bd4aea40b7161161a8b2749fe18aab0d08bd23f603d373fcc250c30136f9ef2ef8b00"}, 0xd8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000001800)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e533005a5b152308435c559a2e30053a727c9"}) 9m11.20792275s ago: executing program 1 (id=568): mmap(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x3000000, 0x32, 0xffffffffffffffff, 0x1a326000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) 9m10.706575862s ago: executing program 1 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) 9m10.158838317s ago: executing program 1 (id=574): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 9m10.047452434s ago: executing program 1 (id=577): unshare(0x4000200) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0xaa1c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/191, 0xbf}], 0x2) ioctl$TIOCSTI(r5, 0x5412, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 8m24.084264327s ago: executing program 32 (id=577): unshare(0x4000200) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0xaa1c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/191, 0xbf}], 0x2) ioctl$TIOCSTI(r5, 0x5412, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3m20.39812188s ago: executing program 2 (id=1224): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) unshare(0x2040400) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) 3m20.215503862s ago: executing program 2 (id=1225): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x0, 0x0, 0x0, 0x8c4, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e01015a00000000010902"], 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x9, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1ff, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0x1a}, [@dmm={0x7, 0x24, 0x14, 0x80, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xaf, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x4, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x95, 0x81, 0xe}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085503, &(0x7f0000000200)=0x6) r3 = fsopen(&(0x7f00000002c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 3m19.746189262s ago: executing program 2 (id=1226): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x55) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x4c09, 0x0) 3m19.607696731s ago: executing program 2 (id=1227): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x64000600) 3m19.194884568s ago: executing program 2 (id=1228): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x0, 0x0, 0x0, 0x8c4, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e01015a00000000010902"], 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x9, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1ff, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0x1a}, [@dmm={0x7, 0x24, 0x14, 0x80, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xaf, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x4, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x95, 0x81, 0xe}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085503, &(0x7f0000000200)=0x6) r3 = fsopen(&(0x7f00000002c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 3m18.556987269s ago: executing program 2 (id=1229): socketpair$unix(0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r0, 0x0, 0x0, 0x804, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) madvise(&(0x7f0000569000/0x1000)=nil, 0x1000, 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0x5, 0xfff1}, {0xfff3, 0xfff3}}}, 0x24}}, 0x24048894) 2m32.895680043s ago: executing program 33 (id=1229): socketpair$unix(0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r0, 0x0, 0x0, 0x804, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) madvise(&(0x7f0000569000/0x1000)=nil, 0x1000, 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0x5, 0xfff1}, {0xfff3, 0xfff3}}}, 0x24}}, 0x24048894) 7.896741899s ago: executing program 0 (id=1471): sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4004000) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008054) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, 0x0, 0x20000014) write$nci(r0, &(0x7f0000000240)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x3, @f={0x54, 0x1, 0x6, 0x2, 0xf, 0x80, 0x5, {0x6, 0x5, "cc0390ccbc"}, 0xb3, 0x5, 0x8, 0x5}}, 0x16) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x2000c804) 2.496571379s ago: executing program 0 (id=1479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff02000000000000000000000000000133"], 0x10da) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 1.89426539s ago: executing program 3 (id=1481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x800) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 1.807692956s ago: executing program 0 (id=1482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000070a050000000000000000000a004001090001"], 0x48}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014) 1.677975775s ago: executing program 3 (id=1483): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) sendmsg$xdp(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008000}, 0x400c0c1) 1.538671554s ago: executing program 0 (id=1484): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022b000100000000090400000201035100090583130000000000072501"], 0x0) 1.007617021s ago: executing program 3 (id=1485): syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000025f85e40fd0b1700a32f0102030109022400010000000009040000027031660009050644000000000009058c02"], 0x0) 790.787706ms ago: executing program 3 (id=1486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x40, 0xf, 0x8, 0x201, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x8}, [@generic="48de0550bb74f08dbf628f98aa7521279d0ea8058c34d85bc22d9b3bc818b0d9a17d01a20c68e0552902c747"]}, 0x40}, 0x1, 0x0, 0x0, 0x20000810}, 0x840) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c00fe8000000000000000000000000000aaff0200000000000000000000000000012b", @ANYRES32=r0], 0xfce) 555.331022ms ago: executing program 0 (id=1487): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 417.554562ms ago: executing program 3 (id=1488): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000040)={0x18, r1}) 219.11µs ago: executing program 3 (id=1489): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f2a, 0xffffffff, 0x10007, 0x4, 0x1d02, 0x1, 0x85, 0x5, 0x81, 0x3, 0x2, 0xfffffffe, 0x1, 0x80000001, 0x0, 0x101, 0x8, 0x400009, 0x4, 0x5, 0x99, 0xcaa7, 0x80, 0x0, 0x5, 0x2000e67, 0x2, 0x8, 0x8, 0x0, 0xfffbfff8]}) 0s ago: executing program 0 (id=1490): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) kernel console output (not intermixed with test programs): ="/" dev="gadgetfs" ino=2356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 104.455484][ T534] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.456964][ T28] audit: type=1400 audit(104.340:90): avc: denied { mount } for pid=3085 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 104.458699][ T534] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.460204][ T28] audit: type=1400 audit(104.340:91): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 104.463480][ T534] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.466981][ T534] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.579795][ T3085] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.505412][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.814730][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.815359][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.815874][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 105.873366][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.874221][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 105.874498][ T23] usb 1-1: SerialNumber: syz [ 105.988764][ T23] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 106.486096][ T42] usb 1-1: USB disconnect, device number 2 [ 110.394380][ C0] hrtimer: interrupt took 7606112 ns [ 111.965257][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.134585][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 112.143556][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.144600][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.145055][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 112.145128][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.152649][ T23] usb 1-1: config 0 descriptor?? [ 112.165239][ T23] hub 1-1:0.0: USB hub found [ 112.394929][ T23] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 112.625375][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 112.626184][ T23] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 112.646975][ T23] usb 1-1: USB disconnect, device number 3 [ 112.881239][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 112.881707][ T28] audit: type=1400 audit(112.760:101): avc: denied { name_bind } for pid=3747 comm="syz.0.13" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 112.881955][ T28] audit: type=1400 audit(112.760:102): avc: denied { node_bind } for pid=3747 comm="syz.0.13" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 114.672861][ T28] audit: type=1400 audit(114.550:103): avc: denied { create } for pid=3723 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.684160][ T28] audit: type=1400 audit(114.560:104): avc: denied { ioctl } for pid=3723 comm="syz.1.8" path="socket:[3149]" dev="sockfs" ino=3149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.705878][ T28] audit: type=1400 audit(114.590:105): avc: denied { create } for pid=3723 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.738582][ T28] audit: type=1400 audit(114.620:106): avc: denied { write } for pid=3723 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.774994][ T23] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 115.934379][ T23] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 115.934772][ T23] usb 1-1: config 0 has no interface number 0 [ 115.956219][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 115.956598][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.958530][ T23] usb 1-1: Product: syz [ 115.958853][ T23] usb 1-1: Manufacturer: syz [ 115.958905][ T23] usb 1-1: SerialNumber: syz [ 115.970744][ T23] usb 1-1: config 0 descriptor?? [ 116.242298][ T23] usb 1-1: USB disconnect, device number 4 [ 116.399888][ T28] audit: type=1400 audit(116.280:107): avc: denied { create } for pid=3766 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.872630][ T28] audit: type=1400 audit(122.750:108): avc: denied { setopt } for pid=3770 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.884793][ T28] audit: type=1400 audit(122.760:109): avc: denied { bind } for pid=3770 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.028543][ T28] audit: type=1400 audit(122.910:110): avc: denied { append } for pid=3772 comm="syz.1.17" name="ptmx" dev="devtmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.818410][ T28] audit: type=1400 audit(123.690:111): avc: denied { map_create } for pid=3780 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.827392][ T28] audit: type=1400 audit(123.710:112): avc: denied { map_read map_write } for pid=3780 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.854784][ T28] audit: type=1400 audit(123.730:113): avc: denied { perfmon } for pid=3780 comm="syz.1.21" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.195520][ T28] audit: type=1400 audit(129.080:114): avc: denied { write } for pid=3786 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.702610][ T28] audit: type=1400 audit(129.580:115): avc: denied { write } for pid=3792 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.798231][ T28] audit: type=1400 audit(132.680:116): avc: denied { allowed } for pid=3794 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 132.820893][ T28] audit: type=1400 audit(132.700:117): avc: denied { create } for pid=3794 comm="syz.0.27" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.841222][ T28] audit: type=1400 audit(132.720:118): avc: denied { map } for pid=3794 comm="syz.0.27" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.841736][ T28] audit: type=1400 audit(132.720:119): avc: denied { read write } for pid=3794 comm="syz.0.27" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 136.133477][ T28] audit: type=1400 audit(136.010:120): avc: denied { create } for pid=3798 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 136.141587][ T28] audit: type=1400 audit(136.020:121): avc: denied { create } for pid=3798 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.148527][ T28] audit: type=1400 audit(136.030:122): avc: denied { write } for pid=3798 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.153596][ T28] audit: type=1400 audit(136.030:123): avc: denied { nlmsg_write } for pid=3798 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.192707][ T3799] netlink: 64 bytes leftover after parsing attributes in process `syz.1.28'. [ 136.761226][ T28] audit: type=1400 audit(136.640:124): avc: denied { read } for pid=3806 comm="syz.1.32" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 136.772623][ T28] audit: type=1400 audit(136.640:125): avc: denied { open } for pid=3806 comm="syz.1.32" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 136.788090][ T28] audit: type=1400 audit(136.670:126): avc: denied { ioctl } for pid=3806 comm="syz.1.32" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 136.799496][ T28] audit: type=1400 audit(136.680:127): avc: denied { set_context_mgr } for pid=3806 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 137.274919][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 137.426239][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 137.510231][ T42] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 137.510744][ T42] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.513312][ T42] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.517373][ T42] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.517747][ T42] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.518002][ T42] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.518062][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.766682][ T42] usb 2-1: GET_CAPABILITIES returned 0 [ 137.766948][ T42] usbtmc 2-1:16.0: can't read capabilities [ 138.196370][ T3810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.211897][ T3810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.227575][ T3810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.229414][ T3810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.241450][ T3810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.247004][ T3810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.269996][ T3810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.273429][ T3810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.282468][ T90] usb 2-1: USB disconnect, device number 2 [ 138.744955][ T90] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 138.897224][ T90] usb 2-1: Using ep0 maxpacket: 32 [ 138.919982][ T90] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 138.920894][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.929948][ T90] usb 2-1: config 0 descriptor?? [ 139.170138][ T90] usb 2-1: USB disconnect, device number 3 [ 139.624875][ T90] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.785727][ T90] usb 2-1: Using ep0 maxpacket: 8 [ 139.805350][ T90] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 139.807933][ T90] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.809452][ T90] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.810822][ T90] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.812185][ T90] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.813405][ T90] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.815160][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.062355][ T90] usb 2-1: GET_CAPABILITIES returned 0 [ 140.063363][ T90] usbtmc 2-1:16.0: can't read capabilities [ 140.500575][ T3848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.505724][ T3848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.516688][ T3648] usb 2-1: USB disconnect, device number 4 [ 141.114641][ T3648] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 141.276126][ T3648] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.277632][ T3648] usb 2-1: config 0 has no interfaces? [ 141.280221][ T3648] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 141.281939][ T3648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.289846][ T3648] usb 2-1: config 0 descriptor?? [ 141.521836][ T3868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.532428][ T3868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.545189][ T9] usb 2-1: USB disconnect, device number 5 [ 141.945391][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.024697][ T42] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.125779][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 142.126147][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.126483][ T9] usb 1-1: Product: syz [ 142.126586][ T9] usb 1-1: Manufacturer: syz [ 142.127137][ T9] usb 1-1: SerialNumber: syz [ 142.136377][ T9] usb 1-1: config 0 descriptor?? [ 142.149484][ T9] usb 1-1: interface 1 not found [ 142.185474][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 142.194363][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.194743][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.195089][ T42] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 142.195902][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.208056][ T42] usb 2-1: config 0 descriptor?? [ 142.365828][ T9] usb 1-1: USB disconnect, device number 5 [ 142.432768][ T3868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.437422][ T3868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.463017][ T42] usbhid 2-1:0.0: can't add hid device: -71 [ 142.463576][ T42] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 142.469756][ T42] usb 2-1: USB disconnect, device number 6 [ 142.621695][ T3910] binder: 3909:3910 ioctl c0306201 0 returned -14 [ 142.915330][ T42] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 143.131729][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.132073][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.145755][ T42] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice= 0.00 [ 143.146099][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.157589][ T42] usb 2-1: config 0 descriptor?? [ 143.591966][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 143.592686][ T42] usbhid 2-1:0.0: can't add hid device: -32 [ 143.592929][ T42] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 143.603058][ T42] usb 2-1: USB disconnect, device number 7 [ 143.985291][ T42] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 144.198600][ T42] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 144.198869][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.199334][ T42] usb 2-1: Product: syz [ 144.199386][ T42] usb 2-1: Manufacturer: syz [ 144.199411][ T42] usb 2-1: SerialNumber: syz [ 144.485093][ T42] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 144.656618][ T42] usb 1-1: config 118 interface 0 has no altsetting 0 [ 144.674472][ T42] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 144.674754][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.674999][ T42] usb 1-1: Product: syz [ 144.675164][ T42] usb 1-1: Manufacturer: syz [ 144.675324][ T42] usb 1-1: SerialNumber: syz [ 144.911362][ T3933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.921165][ T3933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.960503][ T42] usb 1-1: USB disconnect, device number 6 [ 145.395509][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.580520][ T9] usb 1-1: config 118 interface 0 has no altsetting 0 [ 145.600892][ T9] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 145.601251][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.601596][ T9] usb 1-1: Product: syz [ 145.601978][ T9] usb 1-1: Manufacturer: syz [ 145.602167][ T9] usb 1-1: SerialNumber: syz [ 153.659181][ T3648] usb 2-1: USB disconnect, device number 8 [ 154.084945][ T3648] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 154.282302][ T3648] usb 2-1: config 1 interface 0 has no altsetting 0 [ 154.310313][ T3648] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 154.310624][ T3648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.311838][ T3648] usb 2-1: Product: syz [ 154.311891][ T3648] usb 2-1: Manufacturer: syz [ 154.312109][ T3648] usb 2-1: SerialNumber: syz [ 154.750708][ T3648] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 156.069488][ T3648] usb 1-1: USB disconnect, device number 7 [ 156.465220][ T3648] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 156.614826][ T3648] usb 1-1: Using ep0 maxpacket: 16 [ 156.624938][ T3648] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.625257][ T3648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.625523][ T3648] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 209 [ 156.625582][ T3648] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.643123][ T3648] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 156.643314][ T3648] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 156.643596][ T3648] usb 1-1: Manufacturer: syz [ 156.652425][ T3648] usb 1-1: config 0 descriptor?? [ 158.502318][ T3987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.504965][ T3987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.516995][ T3987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.522654][ T3987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.555560][ T3987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.559390][ T3987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.772411][ T3987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.782065][ T3987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.545891][ T3648] rc_core: IR keymap rc-hauppauge not found [ 160.546546][ T3648] Registered IR keymap rc-empty [ 160.550118][ T3648] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 160.577153][ T3648] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 160.601588][ T3648] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 160.603343][ T3648] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input3 [ 160.618457][ T3996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.620383][ T3996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.627800][ T3648] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 160.646479][ T3648] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 160.664945][ T3996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.665606][ T3648] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 160.679279][ T3996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.699200][ T3648] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 160.718070][ T3648] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 160.747429][ T3648] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 160.777566][ T3648] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 160.797877][ T3648] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 160.826768][ T3648] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 160.846763][ T3648] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 160.882949][ T3648] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 160.894247][ T3648] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 160.943408][ T3648] usb 1-1: USB disconnect, device number 8 [ 161.128110][ T28] audit: type=1400 audit(161.010:128): avc: denied { create } for pid=4020 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 161.139015][ T28] audit: type=1400 audit(161.020:129): avc: denied { setopt } for pid=4020 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 161.899445][ T4023] binder: 4022:4023 ioctl c0306201 0 returned -14 [ 168.729987][ T23] usb 2-1: USB disconnect, device number 9 [ 168.738812][ T23] usblp0: removed [ 169.086626][ T4046] binder: 4045:4046 ioctl c0306201 0 returned -14 [ 170.951569][ T28] audit: type=1400 audit(170.830:130): avc: denied { prog_run } for pid=4048 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 175.141969][ T4057] binder: 4056:4057 ioctl c0306201 0 returned -14 [ 177.098884][ T42] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.216517][ T42] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.536766][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 177.741323][ T23] usb 2-1: config 0 has no interfaces? [ 177.771823][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.801839][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 177.824551][ T23] usb 2-1: SerialNumber: syz [ 177.836420][ T23] usb 2-1: config 0 descriptor?? [ 178.666276][ T42] usb 2-1: USB disconnect, device number 10 [ 179.476452][ T28] audit: type=1400 audit(179.360:131): avc: denied { ioctl } for pid=4088 comm="syz.1.57" path="socket:[3338]" dev="sockfs" ino=3338 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.345136][ T4094] binder: 4093:4094 ioctl c0306201 0 returned -14 [ 180.419203][ T28] audit: type=1400 audit(180.300:132): avc: denied { create } for pid=4096 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.432586][ T28] audit: type=1400 audit(180.310:133): avc: denied { ioctl } for pid=4096 comm="syz.1.60" path="socket:[3343]" dev="sockfs" ino=3343 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.945010][ T28] audit: type=1400 audit(180.820:134): avc: denied { mounton } for pid=4098 comm="syz.1.61" path="/32/file0" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 183.245385][ T4106] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 183.253304][ T28] audit: type=1400 audit(183.130:135): avc: denied { bind } for pid=4105 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.254447][ T28] audit: type=1400 audit(183.130:136): avc: denied { name_bind } for pid=4105 comm="syz.0.63" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 183.273400][ T28] audit: type=1400 audit(183.130:137): avc: denied { node_bind } for pid=4105 comm="syz.0.63" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 183.368141][ T28] audit: type=1400 audit(183.250:138): avc: denied { unmount } for pid=4098 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 184.100957][ T28] audit: type=1400 audit(183.980:139): avc: denied { setopt } for pid=4105 comm="syz.0.63" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.101836][ T4115] binder: 4114:4115 ioctl c0306201 0 returned -14 [ 192.327543][ T4128] binder: 4127:4128 ioctl c0306201 0 returned -14 [ 198.242175][ T28] audit: type=1400 audit(198.120:140): avc: denied { bind } for pid=4134 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 203.982676][ T4144] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 208.183239][ T4146] binder: 4145:4146 ioctl c0306201 0 returned -14 [ 208.698670][ T28] audit: type=1326 audit(208.580:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.0.78" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 208.708618][ T28] audit: type=1326 audit(208.590:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.0.78" exe="/syz-executor" sig=0 arch=40000028 syscall=20 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 208.718547][ T28] audit: type=1326 audit(208.590:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.0.78" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 208.725382][ T28] audit: type=1326 audit(208.610:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.0.78" exe="/syz-executor" sig=0 arch=40000028 syscall=434 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 208.730297][ T28] audit: type=1326 audit(208.610:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.0.78" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 208.750249][ T28] audit: type=1326 audit(208.630:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.0.78" exe="/syz-executor" sig=0 arch=40000028 syscall=375 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 208.769124][ T28] audit: type=1326 audit(208.640:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.0.78" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 208.771406][ T28] audit: type=1326 audit(208.650:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.0.78" exe="/syz-executor" sig=0 arch=40000028 syscall=120 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 208.777408][ T28] audit: type=1400 audit(208.650:149): avc: denied { create } for pid=4148 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 208.795956][ T28] audit: type=1400 audit(208.680:150): avc: denied { sys_admin } for pid=4148 comm="syz.0.78" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 209.130261][ T4155] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 209.847047][ T4159] binder: 4158:4159 ioctl c0306201 0 returned -14 [ 214.577392][ T4196] binder: 4195:4196 ioctl c0306201 0 returned -14 [ 216.138715][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 216.140674][ T28] audit: type=1400 audit(216.010:155): avc: denied { read } for pid=4206 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 216.819976][ T4210] binder: 4209:4210 ioctl c0306201 0 returned -14 [ 222.317677][ T4222] binder: 4221:4222 ioctl c0306201 0 returned -14 [ 224.985792][ T40] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 225.134514][ T40] usb 1-1: Using ep0 maxpacket: 32 [ 225.218611][ T40] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.407607][ T40] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 225.407873][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.408049][ T40] usb 1-1: Product: syz [ 225.408077][ T40] usb 1-1: Manufacturer: syz [ 225.408091][ T40] usb 1-1: SerialNumber: syz [ 225.415588][ T40] usb 1-1: config 0 descriptor?? [ 225.434980][ T40] usb 1-1: bad CDC descriptors [ 225.445700][ T40] usb 1-1: unsupported MDLM descriptors [ 225.644434][ T9] usb 1-1: USB disconnect, device number 9 [ 225.831337][ T28] audit: type=1400 audit(225.710:156): avc: denied { watch watch_reads } for pid=4241 comm="syz.0.101" path="/49" dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 228.873309][ T4247] binder: 4246:4247 ioctl c0306201 0 returned -14 [ 233.621392][ T4251] lo: entered promiscuous mode [ 234.083059][ T4251] tunl0: entered promiscuous mode [ 234.130065][ T4251] gre0: entered promiscuous mode [ 234.132252][ T4251] gretap0: entered promiscuous mode [ 234.198999][ T4251] erspan0: entered promiscuous mode [ 234.216438][ T4251] ip_vti0: entered promiscuous mode [ 234.219061][ T4251] ip6_vti0: entered promiscuous mode [ 234.241801][ T4251] sit0: entered promiscuous mode [ 234.248207][ T4251] ip6tnl0: entered promiscuous mode [ 234.256375][ T4251] ip6gre0: entered promiscuous mode [ 234.266710][ T4251] syz_tun: entered promiscuous mode [ 234.276866][ T4251] ip6gretap0: entered promiscuous mode [ 234.286216][ T4251] vcan0: entered promiscuous mode [ 234.289086][ T4251] bond0: entered promiscuous mode [ 234.294817][ T4251] bond_slave_0: entered promiscuous mode [ 234.296778][ T4251] bond_slave_1: entered promiscuous mode [ 234.452226][ T4251] dummy0: entered promiscuous mode [ 234.456386][ T4251] nlmon0: entered promiscuous mode [ 234.462996][ T4251] vxcan0: entered promiscuous mode [ 234.476863][ T4251] vxcan1: entered promiscuous mode [ 234.479351][ T4251] veth0: entered promiscuous mode [ 234.497826][ T4251] veth1: entered promiscuous mode [ 234.501569][ T4251] wg0: entered promiscuous mode [ 234.506507][ T4251] wg1: entered promiscuous mode [ 234.509904][ T4251] wg2: entered promiscuous mode [ 234.527149][ T4251] veth0_to_bridge: entered promiscuous mode [ 234.676540][ T4251] bridge_slave_0: entered promiscuous mode [ 234.681466][ T4251] veth1_to_bridge: entered promiscuous mode [ 234.696930][ T4251] bridge_slave_1: entered promiscuous mode [ 234.702641][ T4251] veth0_to_bond: entered promiscuous mode [ 234.730671][ T4251] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 234.746622][ T4261] binder: 4260:4261 ioctl c0306201 0 returned -14 [ 235.103477][ T4264] capability: warning: `syz.1.109' uses 32-bit capabilities (legacy support in use) [ 236.058339][ T28] audit: type=1400 audit(235.940:157): avc: denied { create } for pid=4267 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 236.172249][ T28] audit: type=1400 audit(236.050:158): avc: denied { setopt } for pid=4267 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 237.766034][ T4272] binder: 4271:4272 ioctl c0306201 0 returned -14 [ 246.545704][ T4292] binder: 4291:4292 ioctl c0306201 0 returned -14 [ 251.955211][ T2871] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 252.117670][ T2871] usb 1-1: Using ep0 maxpacket: 16 [ 252.138855][ T2871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.141355][ T2871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.142938][ T2871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 252.145995][ T2871] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 252.148024][ T2871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.179604][ T2871] usb 1-1: config 0 descriptor?? [ 252.641772][ T2871] microsoft 0003:045E:07DA.0002: unbalanced collection at end of report description [ 252.650278][ T2871] microsoft 0003:045E:07DA.0002: parse failed [ 252.654863][ T2871] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 252.871324][ T3648] usb 1-1: USB disconnect, device number 10 [ 266.934207][ T28] audit: type=1400 audit(266.810:159): avc: denied { create } for pid=4345 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 266.959442][ T28] audit: type=1400 audit(266.840:160): avc: denied { write } for pid=4345 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 267.086214][ T28] audit: type=1400 audit(266.960:161): avc: denied { write } for pid=4347 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 278.530427][ T28] audit: type=1400 audit(278.410:162): avc: denied { map } for pid=4367 comm="syz.0.138" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 279.588748][ T2871] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 279.797340][ T2871] usb 1-1: Using ep0 maxpacket: 16 [ 279.838911][ T2871] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.839895][ T2871] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.977288][ T2871] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.977657][ T2871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.977923][ T2871] usb 1-1: Product: syz [ 279.978134][ T2871] usb 1-1: Manufacturer: syz [ 279.978298][ T2871] usb 1-1: SerialNumber: syz [ 280.250025][ T2871] usb 1-1: 0:2 : does not exist [ 280.330745][ T2871] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 280.928055][ T2871] usb 1-1: USB disconnect, device number 11 [ 281.103423][ T4394] gretap1: entered promiscuous mode [ 285.822442][ T4415] capability: warning: `syz.1.148' uses deprecated v2 capabilities in a way that may be insecure [ 286.658831][ T4419] syzkaller0: entered promiscuous mode [ 286.661749][ T4419] syzkaller0: entered allmulticast mode [ 286.714649][ T28] audit: type=1400 audit(286.590:163): avc: denied { relabelfrom } for pid=4418 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 286.715030][ T28] audit: type=1400 audit(286.590:164): avc: denied { relabelto } for pid=4418 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 286.912005][ T4419] syzkaller0: create flow: hash 1220833460 index 1 [ 286.962177][ T4418] syzkaller0: delete flow: hash 1220833460 index 1 [ 331.717094][ T28] audit: type=1400 audit(331.600:165): avc: denied { write } for pid=4516 comm="syz.0.178" name="unix" dev="proc" ino=4026532772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 335.735567][ T4535] UHID_CREATE from different security context by process 270 (syz.0.185), this is not allowed. [ 346.597380][ T28] audit: type=1400 audit(346.480:166): avc: denied { connect } for pid=4563 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 346.601946][ T28] audit: type=1400 audit(346.480:167): avc: denied { read } for pid=4563 comm="syz.1.195" path="socket:[4170]" dev="sockfs" ino=4170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 354.342621][ T28] audit: type=1400 audit(354.220:168): avc: denied { load_policy } for pid=4587 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 355.043403][ T4589] SELinux: failed to load policy [ 356.726324][ T4607] syz.0.208 uses obsolete (PF_INET,SOCK_PACKET) [ 357.441747][ T4614] netlink: 196 bytes leftover after parsing attributes in process `syz.1.210'. [ 363.008177][ T28] audit: type=1400 audit(362.890:169): avc: denied { mount } for pid=4635 comm="syz.1.219" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 364.107753][ T28] audit: type=1400 audit(363.990:170): avc: denied { write } for pid=4641 comm="syz.1.222" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 364.113435][ T4642] binder: 4641:4642 ioctl 400c620e 0 returned -14 [ 369.438449][ T28] audit: type=1400 audit(369.320:171): avc: denied { mount } for pid=4667 comm="syz.1.225" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 370.984925][ T28] audit: type=1400 audit(370.850:172): avc: denied { unmount } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 372.724262][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 373.113437][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.114273][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.114563][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.114676][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.114760][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.129331][ T9] usb 2-1: config 0 descriptor?? [ 373.598886][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 373.599573][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 373.599717][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 373.599822][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 373.599962][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 373.600130][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x2 [ 373.600310][ T9] plantronics 0003:047F:FFFF.0003: item fetching failed at offset 7/15 [ 373.600748][ T9] plantronics 0003:047F:FFFF.0003: parse failed [ 373.600893][ T9] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 373.796717][ T9] usb 2-1: USB disconnect, device number 11 [ 376.546566][ T4714] Zero length message leads to an empty skb [ 387.517800][ T4746] macsec1: entered promiscuous mode [ 398.364965][ T4760] binder: 4759:4760 ioctl c0306201 0 returned -14 [ 401.393291][ T4765] netlink: 136 bytes leftover after parsing attributes in process `syz.1.252'. [ 401.403692][ T4765] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 401.735195][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 401.886700][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 401.912370][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.941775][ T9] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 401.942024][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.942322][ T9] usb 2-1: Product: syz [ 401.942368][ T9] usb 2-1: Manufacturer: syz [ 401.942637][ T9] usb 2-1: SerialNumber: syz [ 401.952339][ T9] usb 2-1: config 0 descriptor?? [ 401.957972][ T9] usb 2-1: bad CDC descriptors [ 401.959540][ T9] usb 2-1: unsupported MDLM descriptors [ 402.165978][ T9] usb 2-1: USB disconnect, device number 12 [ 402.407915][ T4783] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.255'. [ 403.721208][ T4789] netlink: 60 bytes leftover after parsing attributes in process `syz.1.258'. [ 403.732739][ T4789] netlink: 60 bytes leftover after parsing attributes in process `syz.1.258'. [ 404.355909][ T4795] netlink: 16174 bytes leftover after parsing attributes in process `syz.0.261'. [ 406.985826][ T28] audit: type=1400 audit(406.870:173): avc: denied { create } for pid=4801 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 410.457375][ T4823] binder: 4822:4823 ioctl c0306201 0 returned -14 [ 410.477214][ T4823] binder: 4822:4823 ioctl c0306201 0 returned -14 [ 411.907094][ T28] audit: type=1400 audit(411.790:174): avc: denied { create } for pid=4829 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 412.998967][ T4836] binder: 4835:4836 ioctl c0306201 0 returned -14 [ 416.592977][ T4853] binder: 4852:4853 ioctl c0306201 0 returned -14 [ 419.832221][ T4865] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 420.234742][ T28] audit: type=1400 audit(420.100:175): avc: denied { create } for pid=4869 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 420.261885][ T28] audit: type=1400 audit(420.140:176): avc: denied { setopt } for pid=4869 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 420.335979][ T4871] vlan0: entered promiscuous mode [ 420.338478][ T4871] vlan0: entered allmulticast mode [ 420.346276][ T4871] veth0_vlan: entered allmulticast mode [ 421.173308][ T28] audit: type=1400 audit(421.050:177): avc: denied { read } for pid=4886 comm="syz.1.293" lport=115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 426.982742][ T28] audit: type=1400 audit(426.860:178): avc: denied { create } for pid=4913 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 430.575560][ T4935] pim6reg1: entered promiscuous mode [ 430.579103][ T4935] pim6reg1: entered allmulticast mode [ 431.502489][ T4945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.310'. [ 431.513342][ T4945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.310'. [ 431.533645][ T4945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.310'. [ 433.662985][ T28] audit: type=1400 audit(433.540:179): avc: denied { sqpoll } for pid=4957 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 434.434597][ T4946] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 434.594706][ T4946] usb 2-1: Using ep0 maxpacket: 8 [ 434.618039][ T4946] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 434.618283][ T4946] usb 2-1: config 179 has no interface number 0 [ 434.618550][ T4946] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 434.618690][ T4946] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 434.618779][ T4946] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 434.618804][ T4946] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 434.618840][ T4946] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 434.618938][ T4946] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 434.618962][ T4946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.647706][ T4967] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 435.161685][ T40] usb 2-1: USB disconnect, device number 13 [ 435.162252][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 435.162459][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 435.406445][ T4946] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 435.584899][ T4946] usb 1-1: Using ep0 maxpacket: 32 [ 435.658169][ T4946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.658484][ T4946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.658597][ T4946] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 435.658696][ T4946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.685409][ T4946] usb 1-1: config 0 descriptor?? [ 435.693309][ T4946] hub 1-1:0.0: USB hub found [ 435.910651][ T4946] hub 1-1:0.0: 6 ports detected [ 435.912975][ T4946] hub 1-1:0.0: insufficient power available to use all downstream ports [ 436.332084][ T4946] usb 1-1: USB disconnect, device number 12 [ 439.181321][ T40] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 439.384843][ T40] usb 1-1: Using ep0 maxpacket: 32 [ 439.424628][ T40] usb 1-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 439.424959][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.429400][ T40] usb 1-1: config 0 descriptor?? [ 439.877066][ T40] chicony 0003:04F2:0418.0004: item fetching failed at offset 3/7 [ 439.879304][ T40] chicony 0003:04F2:0418.0004: Chicony hid parse failed: -22 [ 439.880967][ T40] chicony 0003:04F2:0418.0004: probe with driver chicony failed with error -22 [ 440.079503][ T4877] usb 1-1: USB disconnect, device number 13 [ 442.955337][ T28] audit: type=1400 audit(442.840:180): avc: denied { getopt } for pid=5045 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 443.060311][ T5048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.334'. [ 443.078095][ T5048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.334'. [ 443.320130][ T28] audit: type=1400 audit(443.200:181): avc: denied { name_bind } for pid=5049 comm="syz.0.335" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 446.192363][ T5075] process 'syz.0.337' launched './file0' with NULL argv: empty string added [ 446.195918][ T28] audit: type=1400 audit(446.070:182): avc: denied { execute } for pid=5074 comm="syz.0.337" name="file0" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 446.206693][ T28] audit: type=1400 audit(446.070:183): avc: denied { execute_no_trans } for pid=5074 comm="syz.0.337" path="/172/file0" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 446.794613][ T4905] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 446.975116][ T4905] usb 2-1: config 95 has an invalid descriptor of length 0, skipping remainder of the config [ 447.029382][ T4905] usb 2-1: New USB device found, idVendor=04e6, idProduct=0101, bcdDevice= 2.00 [ 447.030796][ T4905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.034427][ T4905] usb 2-1: Product: syz [ 447.045432][ T4905] usb 2-1: Manufacturer: syz [ 447.045779][ T4905] usb 2-1: SerialNumber: syz [ 447.317650][ T4905] usb-storage 2-1:95.0: USB Mass Storage device detected [ 447.337542][ T4902] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 447.342052][ T4905] usb-storage 2-1:95.0: USB Mass Storage not supported on this host controller [ 447.400799][ T4905] usb-storage 2-1:95.0: probe with driver usb-storage failed with error -22 [ 447.418277][ T4905] usb 2-1: USB disconnect, device number 14 [ 447.543472][ T4902] usb 1-1: Using ep0 maxpacket: 32 [ 447.615538][ T4902] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 447.615923][ T4902] usb 1-1: config 0 has no interface number 0 [ 447.616353][ T4902] usb 1-1: config 0 interface 184 has no altsetting 0 [ 447.629262][ T4902] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 447.631591][ T4902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.631684][ T4902] usb 1-1: Product: syz [ 447.631714][ T4902] usb 1-1: Manufacturer: syz [ 447.631743][ T4902] usb 1-1: SerialNumber: syz [ 447.648293][ T4902] usb 1-1: config 0 descriptor?? [ 448.869734][ T4902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 448.873156][ T4902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 449.106697][ T4902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 449.107301][ T4902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 449.107759][ T4902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 449.108094][ T4902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 449.108664][ T4902] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 449.147655][ T4902] usb 1-1: USB disconnect, device number 14 [ 449.710728][ T4902] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 449.856195][ T4902] usb 2-1: device descriptor read/64, error -71 [ 450.048291][ T28] audit: type=1400 audit(449.930:184): avc: denied { ioctl } for pid=5123 comm="syz.0.345" path="socket:[5410]" dev="sockfs" ino=5410 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 450.124697][ T4902] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 450.260730][ T4902] usb 2-1: device descriptor read/64, error -71 [ 450.384838][ T4902] usb usb2-port1: attempt power cycle [ 450.566111][ T5126] netlink: 172 bytes leftover after parsing attributes in process `syz.0.346'. [ 450.794551][ T4902] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 450.821818][ T4902] usb 2-1: device descriptor read/8, error -71 [ 451.124797][ T4902] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 451.174207][ T4902] usb 2-1: device descriptor read/8, error -71 [ 451.365779][ T4902] usb usb2-port1: unable to enumerate USB device [ 455.521857][ T28] audit: type=1400 audit(455.400:185): avc: denied { ioctl } for pid=5149 comm="syz.0.356" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4865 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 455.873519][ T28] audit: type=1400 audit(455.750:186): avc: denied { unmount } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 458.885961][ T5167] netlink: 'syz.0.364': attribute type 1 has an invalid length. [ 459.235579][ T4905] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 459.392995][ T4905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.393373][ T4905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.394269][ T4905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 459.394530][ T4905] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 459.394714][ T4905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.407561][ T4905] usb 1-1: config 0 descriptor?? [ 459.881312][ T28] audit: type=1400 audit(459.760:187): avc: denied { getopt } for pid=5182 comm="syz.1.368" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 460.052715][ T4905] usbhid 1-1:0.0: can't add hid device: -71 [ 460.053153][ T4905] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 460.062224][ T4905] usb 1-1: USB disconnect, device number 15 [ 460.170268][ T28] audit: type=1326 audit(460.050:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.0.371" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x0 [ 467.064502][ T42] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 467.214531][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 467.290932][ T42] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 467.292436][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.304416][ T42] usb 2-1: Product: syz [ 467.304764][ T42] usb 2-1: Manufacturer: syz [ 467.304952][ T42] usb 2-1: SerialNumber: syz [ 467.350246][ T42] r8152-cfgselector 2-1: Unknown version 0x0000 [ 467.351354][ T42] r8152-cfgselector 2-1: config 0 descriptor?? [ 467.791788][ T42] r8152-cfgselector 2-1: USB disconnect, device number 19 [ 468.754185][ T28] audit: type=1400 audit(468.620:189): avc: denied { nlmsg_read } for pid=5274 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 469.134723][ T42] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 469.152380][ T28] audit: type=1400 audit(469.030:190): avc: denied { mount } for pid=5283 comm="syz.0.399" name="/" dev="ramfs" ino=5594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 469.301348][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 469.319224][ T42] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 469.321720][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 469.323216][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 469.325699][ T42] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 469.328536][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.343092][ T42] usb 2-1: config 0 descriptor?? [ 469.487864][ T5292] fuse: Bad value for 'user_id' [ 469.488134][ T5292] fuse: Bad value for 'user_id' [ 469.857065][ T42] apple 0003:05AC:027D.0005: hidraw0: USB HID v10.00 Device [HID 05ac:027d] on usb-dummy_hcd.1-1/input0 [ 470.048044][ T42] usb 2-1: USB disconnect, device number 20 [ 472.224697][ T5333] GUP no longer grows the stack in syz.0.411 (5333): 20005000-20008000 (20004000) [ 472.231023][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.0.411 Not tainted syzkaller #0 PREEMPT [ 472.231296][ T5333] Hardware name: ARM-Versatile Express [ 472.231656][ T5333] Call trace: [ 472.232052][ T5333] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 472.233275][ T5333] r7:60000013 r6:60000013 r5:822a7868 r4:00000000 [ 472.233375][ T5333] [<80201af0>] (show_stack) from [<8021e458>] (dump_stack_lvl+0x5c/0x70) [ 472.233512][ T5333] [<8021e3fc>] (dump_stack_lvl) from [<8021e484>] (dump_stack+0x18/0x1c) [ 472.233579][ T5333] r7:ea591dc4 r6:00000002 r5:20004000 r4:20004000 [ 472.233601][ T5333] [<8021e46c>] (dump_stack) from [<804cfdf8>] (gup_vma_lookup+0xbc/0xc0) [ 472.233668][ T5333] [<804cfd3c>] (gup_vma_lookup) from [<804d1aa8>] (__get_user_pages+0x108/0x718) [ 472.233728][ T5333] r4:00210003 [ 472.233746][ T5333] [<804d19a0>] (__get_user_pages) from [<804d3068>] (__gup_longterm_locked+0xd8/0xb90) [ 472.233839][ T5333] r10:860dcf00 r9:ea591e48 r8:ea591dc4 r7:86a4b800 r6:00000001 r5:00210003 [ 472.233875][ T5333] r4:860dd00c [ 472.233896][ T5333] [<804d2f90>] (__gup_longterm_locked) from [<804d4118>] (gup_fast_fallback+0x5f8/0x83c) [ 472.233979][ T5333] r10:86a4b800 r9:00000001 r8:20004000 r7:86a4b800 r6:20005000 r5:00000000 [ 472.234002][ T5333] r4:00000000 [ 472.234019][ T5333] [<804d3b20>] (gup_fast_fallback) from [<804d4410>] (get_user_pages_fast+0x50/0x60) [ 472.234085][ T5333] r10:00000000 r9:00000000 r8:00000000 r7:00000001 r6:00000001 r5:20004000 [ 472.234108][ T5333] r4:ea591e48 [ 472.234126][ T5333] [<804d43c0>] (get_user_pages_fast) from [<8034b28c>] (get_futex_key+0x10c/0x558) [ 472.234200][ T5333] r6:ea591ec0 r5:828f9314 r4:20004000 [ 472.234219][ T5333] [<8034b180>] (get_futex_key) from [<8034e6d8>] (futex_requeue+0xc4/0xd6c) [ 472.234287][ T5333] r10:000000f0 r9:00000000 r8:846ac800 r7:00000000 r6:846ac800 r5:00000003 [ 472.234309][ T5333] r4:00000001 [ 472.234326][ T5333] [<8034e614>] (futex_requeue) from [<8034c5c0>] (do_futex+0xf8/0x180) [ 472.234392][ T5333] r10:000000f0 r9:00000003 r8:846ac800 r7:00000001 r6:20004000 r5:00000003 [ 472.234415][ T5333] r4:00000001 [ 472.234433][ T5333] [<8034c4c8>] (do_futex) from [<8034ceb8>] (sys_futex_time32+0x11c/0x1bc) [ 472.234528][ T5333] r4:00000000 [ 472.234549][ T5333] [<8034cd9c>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 472.234687][ T5333] Exception stack(0xea591fa8 to 0xea591ff0) [ 472.234864][ T5333] 1fa0: 00000000 00000000 20004000 00000003 00000001 00000000 [ 472.234933][ T5333] 1fc0: 00000000 00000000 0034631c 000000f0 003462d8 00000000 00000001 76f7d0dc [ 472.234969][ T5333] 1fe0: 76f7ce88 76f7ce78 00018ba0 001302e0 [ 472.235050][ T5333] r9:846ac800 r8:8020029c r7:000000f0 r6:0034631c r5:00000000 r4:00000000 [ 472.985455][ T4902] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 473.164571][ T4902] usb 1-1: unable to get BOS descriptor or descriptor too short [ 473.171034][ T4902] usb 1-1: config 5 has an invalid interface number: 195 but max is 0 [ 473.171413][ T4902] usb 1-1: config 5 has no interface number 0 [ 473.171613][ T4902] usb 1-1: config 5 interface 195 altsetting 3 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 473.171788][ T4902] usb 1-1: config 5 interface 195 altsetting 3 endpoint 0xC has an invalid bInterval 42, changing to 7 [ 473.171821][ T4902] usb 1-1: config 5 interface 195 altsetting 3 endpoint 0x84 has invalid maxpacket 1024, setting to 64 [ 473.171846][ T4902] usb 1-1: config 5 interface 195 has no altsetting 0 [ 473.194808][ T4902] usb 1-1: string descriptor 0 read error: -22 [ 473.195247][ T4902] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice=a4.9e [ 473.195305][ T4902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.211116][ T4902] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:5.195/input/input4 [ 473.409523][ T28] audit: type=1400 audit(473.290:191): avc: denied { create } for pid=5338 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 473.423581][ T4850] usb 1-1: USB disconnect, device number 16 [ 474.014957][ T4850] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 474.175512][ T4850] usb 1-1: Using ep0 maxpacket: 32 [ 474.189205][ T4850] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 474.189421][ T4850] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.189551][ T4850] usb 1-1: config 0 has no interface number 0 [ 474.189779][ T4850] usb 1-1: config 0 interface 196 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 474.208504][ T4850] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 474.208789][ T4850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.209027][ T4850] usb 1-1: Product: syz [ 474.209054][ T4850] usb 1-1: Manufacturer: syz [ 474.209068][ T4850] usb 1-1: SerialNumber: syz [ 474.211701][ T4850] usb 1-1: config 0 descriptor?? [ 474.226374][ T4850] ipheth 1-1:0.196: Unable to find alternate settings interface [ 474.377990][ T5380] syzkaller1: entered promiscuous mode [ 474.379288][ T5380] syzkaller1: entered allmulticast mode [ 474.422328][ T4902] usb 1-1: USB disconnect, device number 17 [ 474.613325][ T28] audit: type=1400 audit(474.490:192): avc: denied { connect } for pid=5392 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 474.726235][ T28] audit: type=1400 audit(474.600:193): avc: denied { ioctl } for pid=5396 comm="syz.1.420" path="socket:[5105]" dev="sockfs" ino=5105 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 475.116148][ T5393] fuse: root generation should be zero [ 475.406045][ T5431] cgroup: Name too long [ 476.054456][ T28] audit: type=1400 audit(475.930:194): avc: denied { getopt } for pid=5433 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 479.993132][ T28] audit: type=1400 audit(479.870:195): avc: denied { mounton } for pid=5481 comm="syz.0.438" path="/proc/559/task" dev="proc" ino=6236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 480.748529][ T28] audit: type=1400 audit(480.630:196): avc: denied { bind } for pid=5493 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 480.751686][ T28] audit: type=1400 audit(480.630:197): avc: denied { listen } for pid=5493 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 480.781080][ T28] audit: type=1400 audit(480.660:198): avc: denied { connect } for pid=5493 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 480.793592][ T28] audit: type=1400 audit(480.670:199): avc: denied { write } for pid=5493 comm="syz.0.442" path="socket:[6251]" dev="sockfs" ino=6251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 480.895437][ T4902] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 481.069700][ T4902] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 481.071757][ T4902] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.075894][ T4902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 481.076245][ T4902] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 481.076422][ T4902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.083659][ T4902] usb 2-1: config 0 descriptor?? [ 481.527961][ T4902] pyra 0003:1E7D:2C24.0006: item fetching failed at offset 0/3 [ 481.528725][ T4902] pyra 0003:1E7D:2C24.0006: parse failed [ 481.528890][ T4902] pyra 0003:1E7D:2C24.0006: probe with driver pyra failed with error -22 [ 481.733509][ T4902] usb 2-1: USB disconnect, device number 21 [ 482.454596][ T4902] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 482.623159][ T4902] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 3 [ 482.623463][ T4902] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 482.638438][ T4902] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 482.638901][ T4902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 482.639110][ T4902] usb 2-1: Product: syz [ 482.639169][ T4902] usb 2-1: Manufacturer: syz [ 482.639211][ T4902] usb 2-1: SerialNumber: syz [ 482.655134][ T5515] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 482.882633][ T4902] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 483.092564][ T5515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.093541][ T5515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.117734][ T4850] usb 2-1: USB disconnect, device number 22 [ 483.135700][ T4850] usblp0: removed [ 484.495561][ T4850] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 484.655978][ T4850] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 484.656358][ T4850] usb 2-1: config 0 has no interface number 0 [ 484.656709][ T4850] usb 2-1: config 0 interface 41 has no altsetting 0 [ 484.673137][ T4850] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 484.673662][ T4850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.675399][ T4850] usb 2-1: Product: syz [ 484.675757][ T4850] usb 2-1: Manufacturer: syz [ 484.675963][ T4850] usb 2-1: SerialNumber: syz [ 484.681786][ T4850] usb 2-1: config 0 descriptor?? [ 485.536632][ T4850] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 486.253555][ T28] audit: type=1400 audit(486.130:200): avc: denied { connect } for pid=5561 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 486.260447][ T28] audit: type=1400 audit(486.140:201): avc: denied { bind } for pid=5561 comm="syz.0.455" lport=18320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 486.262975][ T28] audit: type=1400 audit(486.140:202): avc: denied { name_bind } for pid=5561 comm="syz.0.455" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 486.266018][ T28] audit: type=1400 audit(486.140:203): avc: denied { node_bind } for pid=5561 comm="syz.0.455" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 486.965183][ T4902] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 486.998996][ T4850] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 487.002749][ T4850] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 487.006156][ T4850] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 487.014790][ T4850] usb 2-1: USB disconnect, device number 23 [ 487.114535][ T4902] usb 1-1: Using ep0 maxpacket: 16 [ 487.124462][ T4902] usb 1-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00 [ 487.125674][ T4902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.136079][ T4902] usb 1-1: config 0 descriptor?? [ 487.580302][ T4902] apple 0003:05AC:0267.0007: hidraw0: USB HID v0.00 Device [HID 05ac:0267] on usb-dummy_hcd.0-1/input0 [ 487.769688][ T4850] usb 1-1: USB disconnect, device number 18 [ 487.956376][ T28] audit: type=1400 audit(487.830:204): avc: denied { setopt } for pid=5606 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 488.284562][ T4850] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 488.445198][ T4850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.445620][ T4850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.445935][ T4850] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 488.446050][ T4850] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 488.446094][ T4850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.457672][ T4850] usb 1-1: config 0 descriptor?? [ 488.903087][ T4850] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 490.120742][ C0] plantronics 0003:047F:FFFF.0008: usb_submit_urb(ctrl) failed: -1 [ 490.910892][ T3079] usb 1-1: USB disconnect, device number 19 [ 491.295437][ T3079] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 491.516921][ T3079] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 491.517324][ T3079] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 491.517386][ T3079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.525543][ T3079] usb 1-1: config 0 descriptor?? [ 491.562927][ T5639] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.037172][ T3079] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 492.240286][ T3079] usb 1-1: USB disconnect, device number 20 [ 494.135986][ T5687] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5687 comm=syz.0.477 [ 495.142855][ T5698] af_packet: tpacket_rcv: packet too big, clamped from 65526 to 4. macoff=68 [ 495.269275][ T28] audit: type=1400 audit(495.150:205): avc: denied { create } for pid=5699 comm="syz.0.483" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 495.289372][ T28] audit: type=1400 audit(495.170:206): avc: denied { mounton } for pid=5699 comm="syz.0.483" path="/266/file0" dev="tmpfs" ino=1368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 496.604307][ T28] audit: type=1400 audit(496.480:207): avc: denied { unlink } for pid=3085 comm="syz-executor" name="file0" dev="tmpfs" ino=1368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 497.402831][ T5707] batadv_slave_1: entered promiscuous mode [ 497.891710][ T5706] batadv_slave_1: left promiscuous mode [ 499.564317][ T42] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 499.750211][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.750582][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.750862][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 499.751101][ T42] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 499.751257][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.763591][ T42] usb 1-1: config 0 descriptor?? [ 500.249702][ T42] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 500.577766][ T4850] usb 1-1: USB disconnect, device number 21 [ 500.857750][ T5738] syzkaller1: entered promiscuous mode [ 500.858193][ T5738] syzkaller1: entered allmulticast mode [ 501.330301][ T28] audit: type=1400 audit(501.210:208): avc: denied { watch watch_reads } for pid=5743 comm="syz.0.490" path="/273/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 503.234463][ T3079] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 503.484703][ T3079] usb 1-1: unable to get BOS descriptor or descriptor too short [ 503.507168][ T3079] usb 1-1: not running at top speed; connect to a high speed hub [ 503.537852][ T3079] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.550302][ T3079] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.605625][ T3079] usb 1-1: string descriptor 0 read error: -22 [ 503.607952][ T3079] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 503.624690][ T3079] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.673298][ T3079] usb 1-1: 0:2 : does not exist [ 504.546178][ T3079] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 504.567982][ T3079] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 504.584775][ T3079] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 504.743495][ T3079] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 504.777396][ T3079] usb 1-1: USB disconnect, device number 22 [ 506.391129][ T28] audit: type=1400 audit(506.230:209): avc: denied { create } for pid=5788 comm="syz.1.501" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 514.205027][ T28] audit: type=1326 audit(514.090:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5829 comm="syz.0.520" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x0 [ 528.798004][ T28] audit: type=1400 audit(528.680:211): avc: denied { unmount } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 529.411221][ T5896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.551'. [ 533.030403][ T28] audit: type=1400 audit(532.910:212): avc: denied { unlink } for pid=5900 comm="syz.0.553" name="loop0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 533.354511][ T28] audit: type=1400 audit(533.230:213): avc: denied { create } for pid=5905 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 534.904747][ T28] audit: type=1400 audit(534.780:214): avc: denied { kexec_image_load } for pid=5915 comm="syz.0.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 537.326775][ T28] audit: type=1400 audit(537.200:215): avc: denied { view } for pid=5917 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 539.450145][ T5916] kexec: Could not allocate control_code_buffer [ 542.789017][ T5954] SELinux: Context Y7j [ 542.789017][ T5954] u/$2Sٟ2'ks2- vjd #,N< [ 542.789017][ T5954] :E]Y\?ͼ=ً1KIk{kL^0}4nr}pįNwyxiu?+H~F1Wjm &8UۂVN2)GxV%5xeRM4r4cJsHU&'p2EMMk&cbU,,f@8bD%$f=8@kI|w Ox&KCH;x-Ko4i!Oi%ڂ2 F"2E,P] k? is not valid (left unmapped). [ 558.883738][ T6015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.593'. [ 559.166039][ T6021] netlink: 'syz.0.596': attribute type 1 has an invalid length. [ 566.109894][ T28] audit: type=1326 audit(565.970:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.0.605" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7fc00000 [ 568.363687][ T6060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.611'. [ 574.558682][ T6081] syzkaller1: entered promiscuous mode [ 574.559725][ T6081] syzkaller1: entered allmulticast mode [ 575.565749][ T6087] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 576.029849][ T6091] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 576.030313][ T6091] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 576.055235][ T6091] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 576.055766][ T6091] netlink: 'syz.0.622': attribute type 2 has an invalid length. [ 576.056120][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 577.810573][ T6098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.420972][ T28] audit: type=1400 audit(582.270:217): avc: denied { compute_member } for pid=6130 comm="syz.0.634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 584.758341][ T6146] netlink: 'syz.0.641': attribute type 1 has an invalid length. [ 584.861109][ T6146] bond1: entered promiscuous mode [ 584.862131][ T6146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 584.993102][ T6146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.008762][ T6146] bond1: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 585.012682][ T6146] bond1: (slave ip6tnl3): Setting fail_over_mac to active for active-backup mode [ 585.049032][ T6146] bond1: (slave ip6tnl3): making interface the new active one [ 585.064788][ T6146] ip6tnl3: entered promiscuous mode [ 585.073045][ T6146] bond1: (slave ip6tnl3): Enslaving as an active interface with an up link [ 596.455161][ T6198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.486745][ T6198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.419176][ T28] audit: type=1400 audit(600.300:218): avc: denied { create } for pid=6463 comm="syz.0.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 600.431216][ T28] audit: type=1400 audit(600.310:219): avc: denied { setopt } for pid=6463 comm="syz.0.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 600.985728][ T28] audit: type=1400 audit(600.860:220): avc: denied { create } for pid=6466 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 601.004832][ T28] audit: type=1400 audit(600.870:221): avc: denied { bind } for pid=6466 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 601.940736][ T6198] hsr_slave_0: entered promiscuous mode [ 601.968565][ T6198] hsr_slave_1: entered promiscuous mode [ 601.971222][ T6198] debugfs: 'hsr0' already exists in 'hsr' [ 601.972323][ T6198] Cannot create hsr debugfs directory [ 602.670636][ T28] audit: type=1400 audit(602.540:222): avc: denied { wake_alarm } for pid=6558 comm="syz.0.671" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 603.055480][ T6198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 603.063387][ T6198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 603.104958][ T6198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 603.114777][ T6198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 603.805797][ T6600] netlink: 256 bytes leftover after parsing attributes in process `syz.0.675'. [ 605.109743][ T28] audit: type=1400 audit(604.990:223): avc: denied { mount } for pid=6605 comm="syz.0.677" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 605.447883][ T6198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.077760][ T6198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 615.540123][ T6198] veth0_vlan: entered promiscuous mode [ 615.577123][ T6198] veth1_vlan: entered promiscuous mode [ 615.653088][ T6198] veth0_macvtap: entered promiscuous mode [ 615.667507][ T6198] veth1_macvtap: entered promiscuous mode [ 615.770529][ T6403] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.771262][ T6403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.771360][ T6403] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.771425][ T6403] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.139753][ T28] audit: type=1400 audit(616.020:224): avc: denied { unmount } for pid=6198 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 619.297897][ T28] audit: type=1400 audit(619.170:225): avc: denied { setopt } for pid=6726 comm="syz.2.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 619.956750][ T6731] syzkaller0: entered promiscuous mode [ 619.967747][ T6731] syzkaller0: entered allmulticast mode [ 620.025910][ T6731] 0: reclassify loop, rule prio 0, protocol 800 [ 622.631978][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 623.053211][ T28] audit: type=1400 audit(622.930:226): avc: granted { setsecparam } for pid=6750 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 623.640599][ T6757] vlan2: entered promiscuous mode [ 623.641063][ T6757] gretap0: entered promiscuous mode [ 623.689107][ T6757] vlan2: entered allmulticast mode [ 623.706556][ T6757] gretap0: entered allmulticast mode [ 626.029802][ T6769] SELinux: failed to load policy [ 628.661681][ T6793] netlink: 80 bytes leftover after parsing attributes in process `syz.0.735'. [ 628.676101][ T28] audit: type=1400 audit(628.540:227): avc: denied { write } for pid=6791 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 628.725358][ T6794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.736'. [ 630.051440][ T28] audit: type=1326 audit(629.920:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.742" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 630.079892][ T28] audit: type=1326 audit(629.920:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.742" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 630.080597][ T28] audit: type=1326 audit(629.920:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.742" exe="/syz-executor" sig=0 arch=40000028 syscall=430 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 630.080807][ T28] audit: type=1326 audit(629.920:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.742" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 630.081003][ T28] audit: type=1326 audit(629.920:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.742" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 630.081217][ T28] audit: type=1326 audit(629.960:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.742" exe="/syz-executor" sig=0 arch=40000028 syscall=431 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 630.081409][ T28] audit: type=1400 audit(629.960:234): avc: denied { mount } for pid=6806 comm="syz.0.742" name="/" dev="configfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 630.081604][ T28] audit: type=1326 audit(629.960:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.742" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 630.081800][ T28] audit: type=1326 audit(629.960:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.742" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 630.489248][ T6809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.743'. [ 637.947718][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 637.953258][ T28] audit: type=1400 audit(637.830:238): avc: denied { setopt } for pid=6846 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 638.516110][ T28] audit: type=1400 audit(638.400:239): avc: denied { write } for pid=6846 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 639.069060][ T28] audit: type=1400 audit(638.950:240): avc: denied { listen } for pid=6846 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 642.362589][ T6847] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 642.375038][ T6847] syz.0.759: vmalloc error: size 536870904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 642.390858][ T6847] CPU: 0 UID: 0 PID: 6847 Comm: syz.0.759 Not tainted syzkaller #0 PREEMPT [ 642.391110][ T6847] Hardware name: ARM-Versatile Express [ 642.391150][ T6847] Call trace: [ 642.391205][ T6847] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 642.391405][ T6847] r7:600e0013 r6:600e0013 r5:822a7868 r4:00000000 [ 642.391432][ T6847] [<80201af0>] (show_stack) from [<8021e458>] (dump_stack_lvl+0x5c/0x70) [ 642.391495][ T6847] [<8021e3fc>] (dump_stack_lvl) from [<8021e484>] (dump_stack+0x18/0x1c) [ 642.391562][ T6847] r7:00000000 r6:822c35d0 r5:86b24800 r4:00000000 [ 642.391582][ T6847] [<8021e46c>] (dump_stack) from [<80512b88>] (warn_alloc+0xe0/0x188) [ 642.391646][ T6847] [<80512aa8>] (warn_alloc) from [<80500364>] (__vmalloc_node_range_noprof+0xbc/0x668) [ 642.391712][ T6847] r3:1ffffff8 r2:822c35d0 [ 642.391742][ T6847] r7:822c3608 r6:00000dc0 r5:ff800000 r4:df800000 [ 642.391762][ T6847] [<805002a8>] (__vmalloc_node_range_noprof) from [<8052372c>] (__kvmalloc_node_noprof+0x328/0x57c) [ 642.391839][ T6847] r10:000029c0 r9:817998f8 r8:ffffffff r7:86b24800 r6:dfaf1cf8 r5:00000400 [ 642.391860][ T6847] r4:1ffffff8 [ 642.391878][ T6847] [<80523404>] (__kvmalloc_node_noprof) from [<817998f8>] (xt_alloc_entry_offsets+0x28/0x34) [ 642.392049][ T6847] r10:85f0c800 r9:dfaf1d00 r8:85c1a080 r7:00000000 r6:dfaf1cf8 r5:85f0c840 [ 642.392076][ T6847] r4:07fffffe [ 642.392096][ T6847] [<817998d0>] (xt_alloc_entry_offsets) from [<8192a034>] (translate_table+0x74/0x764) [ 642.392159][ T6847] [<81929fc0>] (translate_table) from [<8192b1fc>] (do_replace+0xf4/0x5f0) [ 642.392224][ T6847] r10:00000000 r9:20000060 r8:85c1a080 r7:85f0c840 r6:dfaf1cf8 r5:000002d0 [ 642.392246][ T6847] r4:85f0c800 [ 642.392273][ T6847] [<8192b108>] (do_replace) from [<8192b82c>] (do_ip6t_set_ctl+0x134/0x29c) [ 642.392336][ T6847] r10:00000126 r9:815c4cbc r8:00000330 r7:86c995ac r6:dfaf1da8 r5:00000040 [ 642.392357][ T6847] r4:850d3000 [ 642.392373][ T6847] [<8192b6f8>] (do_ip6t_set_ctl) from [<817208fc>] (nf_setsockopt+0x54/0x70) [ 642.392448][ T6847] r10:00000126 r9:815c4cbc r8:00000330 r7:86c995ac r6:00000040 r5:8192b6f8 [ 642.392517][ T6847] r4:829f7838 [ 642.392538][ T6847] [<817208ac>] (nf_setsockopt) from [<818e15e0>] (ipv6_setsockopt+0x9c/0xbc) [ 642.392602][ T6847] r6:00000330 r5:850d3000 r4:00000040 [ 642.392620][ T6847] [<818e1548>] (ipv6_setsockopt) from [<817d078c>] (tcp_setsockopt+0x3c/0x58) [ 642.392688][ T6847] r6:86c99080 r5:00000029 r4:818e1544 [ 642.392706][ T6847] [<817d0754>] (tcp_setsockopt) from [<815c4cf4>] (sock_common_setsockopt+0x38/0x40) [ 642.392773][ T6847] r4:817d0750 [ 642.392793][ T6847] [<815c4cc0>] (sock_common_setsockopt) from [<819d7944>] (smc_setsockopt+0xac/0x354) [ 642.392859][ T6847] r4:00000040 [ 642.392880][ T6847] [<819d789c>] (smc_setsockopt) from [<815c0408>] (do_sock_setsockopt+0x70/0xc8) [ 642.393017][ T6847] r9:86b24800 r8:00000330 r7:837d8000 r6:00000040 r5:00000029 r4:819d7898 [ 642.393045][ T6847] [<815c0398>] (do_sock_setsockopt) from [<815c3f58>] (__sys_setsockopt+0x7c/0xc4) [ 642.393124][ T6847] r8:00000000 r7:852c2000 r6:852c2001 r5:00000040 r4:00000029 [ 642.393145][ T6847] [<815c3edc>] (__sys_setsockopt) from [<815c3fbc>] (sys_setsockopt+0x1c/0x24) [ 642.393210][ T6847] r8:8020029c r7:00000126 r6:00346318 r5:00000000 r4:00000330 [ 642.393228][ T6847] [<815c3fa0>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 642.393288][ T6847] Exception stack(0xdfaf1fa8 to 0xdfaf1ff0) [ 642.393338][ T6847] 1fa0: 00000330 00000000 00000003 00000029 00000040 20000000 [ 642.393376][ T6847] 1fc0: 00000330 00000000 00346318 00000126 003462d8 00000000 00000001 76f7d0dc [ 642.393405][ T6847] 1fe0: 76f7ce88 76f7ce78 00018ba0 001302e0 [ 642.435323][ T6847] Mem-Info: [ 642.436024][ T6847] active_anon:10122 inactive_anon:0 isolated_anon:0 [ 642.436024][ T6847] active_file:6144 inactive_file:35508 isolated_file:0 [ 642.436024][ T6847] unevictable:768 dirty:12 writeback:0 [ 642.436024][ T6847] slab_reclaimable:1216 slab_unreclaimable:7693 [ 642.436024][ T6847] mapped:8242 shmem:9380 pagetables:481 [ 642.436024][ T6847] sec_pagetables:0 bounce:0 [ 642.436024][ T6847] kernel_misc_reclaimable:0 [ 642.436024][ T6847] free:422825 free_pcp:760 free_cma:4032 [ 642.437417][ T6847] Node 0 active_anon:40488kB inactive_anon:0kB active_file:24576kB inactive_file:142032kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:32968kB dirty:48kB writeback:0kB shmem:37520kB kernel_stack:1864kB pagetables:1924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 642.438232][ T6847] Normal free:1367780kB boost:0kB min:4772kB low:6196kB high:7620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:24kB zspages:0kB present:1556480kB managed:1426876kB mlocked:0kB bounce:0kB free_pcp:3040kB local_pcp:1448kB free_cma:0kB [ 642.438561][ T6847] lowmem_reserve[]: 0 4224 4224 [ 642.439545][ T6847] Normal: 25*4kB (UM) 12*8kB (U) 0*16kB 1*32kB (M) 2*64kB (UM) 7*128kB (UME) 8*256kB (UM) 11*512kB (UME) 9*1024kB (UME) 7*2048kB (UME) 326*4096kB (UM) = 1367780kB [ 642.443451][ T6847] 51034 total pagecache pages [ 642.455961][ T6847] 0 pages in swap cache [ 642.457126][ T6847] Free swap = 124996kB [ 642.458822][ T6847] Total swap = 124996kB [ 642.465103][ T6847] 524288 pages RAM [ 642.465563][ T6847] 135168 pages HighMem/MovableOnly [ 642.465752][ T6847] 32401 pages reserved [ 642.465820][ T6847] 4096 pages cma reserved [ 645.296402][ T6876] netlink: 'syz.0.771': attribute type 2 has an invalid length. [ 647.325467][ T28] audit: type=1400 audit(647.210:241): avc: denied { map } for pid=6880 comm="syz.0.773" path="socket:[9313]" dev="sockfs" ino=9313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 647.327038][ T28] audit: type=1400 audit(647.210:242): avc: denied { accept } for pid=6880 comm="syz.0.773" path="socket:[9313]" dev="sockfs" ino=9313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 653.415093][ T6903] netlink: 96 bytes leftover after parsing attributes in process `syz.2.781'. [ 654.015173][ T28] audit: type=1400 audit(653.900:243): avc: denied { bind } for pid=6906 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 661.139315][ T28] audit: type=1400 audit(661.020:244): avc: denied { bind } for pid=6943 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 661.973629][ T28] audit: type=1400 audit(661.850:245): avc: denied { search } for pid=6947 comm="syz.2.802" name="/" dev="configfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 661.979659][ T28] audit: type=1400 audit(661.860:246): avc: denied { search } for pid=6947 comm="syz.2.802" name="/" dev="configfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 661.996647][ T28] audit: type=1400 audit(661.860:247): avc: denied { setattr } for pid=6947 comm="syz.2.802" name="/" dev="configfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 665.942917][ T6972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.814'. [ 668.475262][ T6986] bond0: (slave bond_slave_0): Releasing backup interface [ 668.516254][ T6986] bond0: (slave bond_slave_1): Releasing backup interface [ 668.549670][ T6986] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 668.822275][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'. [ 668.861556][ T6991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 668.933322][ T28] audit: type=1400 audit(668.810:248): avc: denied { ioctl } for pid=6990 comm="syz.0.823" path="socket:[8932]" dev="sockfs" ino=8932 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 669.500091][ T7027] ipvlan2: entered promiscuous mode [ 669.500518][ T7027] ipvlan2: entered allmulticast mode [ 669.525479][ T7027] bond2: entered allmulticast mode [ 670.785374][ T7033] Process accounting resumed [ 671.059899][ T7034] SELinux: unknown common r [ 671.104896][ T7034] SELinux: failed to load policy [ 672.362000][ T7045] syzkaller0: entered promiscuous mode [ 672.362480][ T7045] syzkaller0: entered allmulticast mode [ 675.796239][ T28] audit: type=1400 audit(675.660:249): avc: denied { read } for pid=7036 comm="syz.2.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 677.418872][ T6410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.617545][ T6410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.779316][ T6410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.869417][ T6410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.476637][ T6410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.516232][ T6410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.546414][ T6410] bond0 (unregistering): Released all slaves [ 679.724817][ T6410] hsr_slave_0: left promiscuous mode [ 679.728701][ T6410] hsr_slave_1: left promiscuous mode [ 679.796075][ T6410] veth1_macvtap: left promiscuous mode [ 679.797848][ T6410] veth0_macvtap: left promiscuous mode [ 679.815539][ T6410] veth1_vlan: left promiscuous mode [ 685.909170][ T28] audit: type=1400 audit(685.780:250): avc: denied { override_creds } for pid=7123 comm="syz.2.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 689.867986][ T28] audit: type=1400 audit(689.750:251): avc: denied { write } for pid=7163 comm="syz.2.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 692.428833][ T7194] IPv6: NLM_F_CREATE should be specified when creating new route [ 695.944661][ T3714] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 696.151728][ T3714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.152083][ T3714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.152380][ T3714] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 696.152567][ T3714] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 696.152645][ T3714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.169851][ T3714] usb 1-1: config 0 descriptor?? [ 698.366067][ T3714] usbhid 1-1:0.0: can't add hid device: -71 [ 698.366475][ T3714] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 698.378385][ T3714] usb 1-1: USB disconnect, device number 23 [ 698.889281][ T28] audit: type=1400 audit(698.770:252): avc: denied { create } for pid=7236 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 698.896428][ T28] audit: type=1400 audit(698.780:253): avc: denied { write } for pid=7236 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 699.482625][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.859'. [ 699.748918][ T7246] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 704.264196][ T28] audit: type=1400 audit(704.130:254): avc: denied { setopt } for pid=7261 comm="syz.2.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 704.296282][ T7262] netlink: 68 bytes leftover after parsing attributes in process `syz.2.867'. [ 704.609751][ T28] audit: type=1400 audit(704.490:255): avc: denied { block_suspend } for pid=7269 comm="syz.2.870" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 705.879195][ T7295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.874'. [ 706.019840][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 706.326555][ T28] audit: type=1400 audit(706.190:256): avc: denied { getopt } for pid=7312 comm="syz.0.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 712.905311][ T28] audit: type=1400 audit(712.780:257): avc: denied { write } for pid=7392 comm="syz.0.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 716.250095][ T28] audit: type=1400 audit(716.130:258): avc: denied { unmount } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 735.985538][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.923'. [ 736.175820][ T7506] netlink: 272 bytes leftover after parsing attributes in process `syz.0.920'. [ 737.925073][ T7519] netlink: 60 bytes leftover after parsing attributes in process `syz.2.928'. [ 744.039280][ T28] audit: type=1400 audit(743.920:259): avc: denied { getopt } for pid=7526 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 747.465559][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 750.241373][ T7574] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 750.299774][ T28] audit: type=1400 audit(750.180:260): avc: denied { associate } for pid=7575 comm="syz.2.947" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 751.024847][ T28] audit: type=1400 audit(750.900:261): avc: denied { bind } for pid=7573 comm="syz.2.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 753.005630][ T28] audit: type=1400 audit(752.890:262): avc: denied { ioctl } for pid=7583 comm="syz.2.950" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 753.351771][ T28] audit: type=1400 audit(753.230:263): avc: denied { ioctl } for pid=7587 comm="syz.2.952" path="socket:[10530]" dev="sockfs" ino=10530 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 753.370239][ T28] audit: type=1400 audit(753.250:264): avc: denied { write } for pid=7587 comm="syz.2.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 756.221456][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 756.226388][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 756.470456][ T7614] netlink: 80 bytes leftover after parsing attributes in process `syz.2.962'. [ 764.843580][ T7662] netlink: 32 bytes leftover after parsing attributes in process `syz.2.981'. [ 769.411890][ T7702] netlink: 40 bytes leftover after parsing attributes in process `syz.0.998'. [ 770.687620][ T6433] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.689394][ T6433] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.690990][ T6433] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.694664][ T6433] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.457729][ T28] audit: type=1326 audit(771.340:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.2.1008" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 771.458156][ T28] audit: type=1326 audit(771.340:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.2.1008" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 771.458461][ T28] audit: type=1326 audit(771.340:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.2.1008" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 771.468321][ T28] audit: type=1326 audit(771.330:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.2.1008" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 771.469071][ T28] audit: type=1326 audit(771.340:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.2.1008" exe="/syz-executor" sig=0 arch=40000028 syscall=26 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 771.469168][ T28] audit: type=1326 audit(771.340:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.2.1008" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 771.469272][ T28] audit: type=1326 audit(771.340:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.2.1008" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 771.469331][ T28] audit: type=1326 audit(771.340:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.2.1008" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 771.483670][ T28] audit: type=1326 audit(771.350:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.2.1008" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 771.502130][ T28] audit: type=1326 audit(771.350:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.2.1008" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 772.455354][ T7729] syz.2.1010 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 776.523368][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1022'. [ 776.694798][ T7769] vlan3: entered allmulticast mode [ 776.695129][ T7769] syz_tun: entered allmulticast mode [ 778.041786][ T7782] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1026'. [ 785.158963][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 785.159429][ T28] audit: type=1400 audit(785.040:314): avc: denied { sqpoll } for pid=7818 comm="syz.2.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 787.885044][ T7808] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 789.858295][ T28] audit: type=1400 audit(789.740:315): avc: denied { read } for pid=7849 comm="syz.2.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 791.138424][ T7835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.145646][ T7835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.053040][ T7835] hsr_slave_0: entered promiscuous mode [ 792.058203][ T7835] hsr_slave_1: entered promiscuous mode [ 792.423098][ T7835] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.505224][ T7835] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.572551][ T7835] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.645931][ T7835] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.788552][ T7835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 792.806582][ T7835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 792.827818][ T7835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 792.842635][ T7835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 793.996613][ T7835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.598596][ T7835] veth0_vlan: entered promiscuous mode [ 797.629211][ T7835] veth1_vlan: entered promiscuous mode [ 797.706449][ T7835] veth0_macvtap: entered promiscuous mode [ 797.717857][ T7835] veth1_macvtap: entered promiscuous mode [ 797.809322][ T6433] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.809820][ T6433] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.810364][ T6433] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.810606][ T6433] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.583044][ T8170] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 798.589060][ T8170] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 798.598419][ T8170] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 798.599569][ T8170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1049'. [ 798.734370][ T28] audit: type=1400 audit(798.610:316): avc: denied { create } for pid=8171 comm="syz.0.1050" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=iucv_socket permissive=1 [ 800.935583][ T8183] netlink: 'syz.0.1053': attribute type 2 has an invalid length. [ 805.761166][ T8208] tun0: tun_chr_ioctl cmd 1074025672 [ 805.765107][ T8208] tun0: ignored: set checksum enabled [ 806.502716][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 806.612298][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 807.229832][ T28] audit: type=1400 audit(807.110:317): avc: denied { relabelfrom } for pid=8221 comm="syz.0.1067" name="" dev="pipefs" ino=11696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 812.485078][ T28] audit: type=1400 audit(812.370:318): avc: denied { bind } for pid=8213 comm="syz.2.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 813.447240][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1083'. [ 818.594879][ T4905] hid-generic 0003:0004:FFFFFFFE.000B: unknown main item tag 0x0 [ 818.596660][ T4905] hid-generic 0003:0004:FFFFFFFE.000B: unknown main item tag 0x0 [ 818.600670][ T4905] hid-generic 0003:0004:FFFFFFFE.000B: unknown main item tag 0x0 [ 818.619519][ T4905] hid-generic 0003:0004:FFFFFFFE.000B: hidraw0: USB HID v4.00 Device [syz0] on syz1 [ 822.135267][ T28] audit: type=1400 audit(822.020:319): avc: denied { nlmsg_read } for pid=8303 comm="syz.0.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 824.950581][ T28] audit: type=1400 audit(824.830:320): avc: denied { create } for pid=8312 comm="syz.2.1102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 824.957027][ T28] audit: type=1400 audit(824.840:321): avc: denied { create } for pid=8312 comm="syz.2.1102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_tcpdiag_socket permissive=1 [ 824.960318][ T28] audit: type=1400 audit(824.840:322): avc: denied { write } for pid=8312 comm="syz.2.1102" path="socket:[12504]" dev="sockfs" ino=12504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_tcpdiag_socket permissive=1 [ 824.964253][ T28] audit: type=1400 audit(824.840:323): avc: denied { create } for pid=8312 comm="syz.2.1102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 824.966579][ T28] audit: type=1400 audit(824.850:324): avc: denied { bind } for pid=8312 comm="syz.2.1102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 824.973655][ T28] audit: type=1400 audit(824.850:325): avc: denied { connect } for pid=8312 comm="syz.2.1102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 824.981128][ T28] audit: type=1400 audit(824.860:326): avc: denied { sendto } for pid=8312 comm="syz.2.1102" path=2F3232312FE91F7189591E9233614B scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 824.984619][ T28] audit: type=1400 audit(824.860:327): avc: denied { read } for pid=8312 comm="syz.2.1102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 825.498629][ T28] audit: type=1400 audit(825.370:328): avc: denied { write } for pid=8312 comm="syz.2.1102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 828.829752][ T8330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1109'. [ 834.048993][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 835.900736][ T8374] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1124'. [ 840.435204][ T8368] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 854.736037][ T8476] syzkaller0: entered promiscuous mode [ 854.736657][ T8476] syzkaller0: entered allmulticast mode [ 855.764820][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 855.767583][ T28] audit: type=1400 audit(855.640:330): avc: denied { read } for pid=8486 comm="syz.2.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 859.197277][ T28] audit: type=1400 audit(859.070:331): avc: denied { create } for pid=8495 comm="syz.2.1170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_audit_socket permissive=1 [ 870.539969][ T28] audit: type=1400 audit(870.420:332): avc: denied { mount } for pid=8540 comm="syz.2.1185" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 872.225185][ T8550] ======================================================= [ 872.225185][ T8550] WARNING: The mand mount option has been deprecated and [ 872.225185][ T8550] and is ignored by this kernel. Remove the mand [ 872.225185][ T8550] option from the mount to silence this warning. [ 872.225185][ T8550] ======================================================= [ 872.437214][ T28] audit: type=1400 audit(872.310:333): avc: denied { unmount } for pid=6198 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 876.519637][ T28] audit: type=1400 audit(876.400:334): avc: denied { setopt } for pid=8551 comm="syz.2.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 883.045148][ T28] audit: type=1400 audit(882.920:335): avc: denied { write } for pid=8615 comm="syz.0.1208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 886.238774][ T8628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1213'. [ 890.023543][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.028337][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.055696][ T8661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.058037][ T8661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.278006][ T8661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.279147][ T8661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.418582][ T28] audit: type=1400 audit(893.300:336): avc: denied { create } for pid=8667 comm="syz.2.1226" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 893.428572][ T28] audit: type=1400 audit(893.310:337): avc: denied { write } for pid=8667 comm="syz.2.1226" name="file0" dev="tmpfs" ino=1537 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 893.436824][ T28] audit: type=1400 audit(893.320:338): avc: denied { open } for pid=8667 comm="syz.2.1226" path="/300/file0" dev="tmpfs" ino=1537 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 893.469183][ T28] audit: type=1400 audit(893.350:339): avc: denied { unlink } for pid=6198 comm="syz-executor" name="file0" dev="tmpfs" ino=1537 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 894.098335][ T8692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.099456][ T8692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.368446][ T8692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.369658][ T8692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.513494][ T28] audit: type=1400 audit(896.390:340): avc: denied { setcheckreqprot } for pid=8704 comm="syz.0.1231" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 897.455870][ T3714] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 897.624801][ T3714] usb 1-1: Using ep0 maxpacket: 16 [ 897.646448][ T3714] usb 1-1: config 0 has no interfaces? [ 897.646880][ T3714] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 897.647130][ T3714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.653109][ T3714] usb 1-1: config 0 descriptor?? [ 898.104627][ T8707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.105802][ T8707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.139078][ T3714] usb 1-1: USB disconnect, device number 24 [ 899.014274][ T3714] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 899.184739][ T3714] usb 1-1: Using ep0 maxpacket: 16 [ 899.191091][ T3714] usb 1-1: config 0 has no interfaces? [ 899.191328][ T3714] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 899.191432][ T3714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.196099][ T3714] usb 1-1: config 0 descriptor?? [ 899.661615][ T3714] usb 1-1: USB disconnect, device number 25 [ 903.327137][ T8740] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 903.855142][ T4902] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 904.015160][ T4902] usb 1-1: Using ep0 maxpacket: 16 [ 904.046297][ T4902] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 904.047566][ T4902] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 904.072048][ T4902] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 904.073327][ T4902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.078367][ T4902] usb 1-1: Product: syz [ 904.083687][ T4902] usb 1-1: Manufacturer: syz [ 904.087280][ T4902] usb 1-1: SerialNumber: syz [ 904.323135][ T4902] usb 1-1: 0:2 : does not exist [ 904.348850][ T4902] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 904.393093][ T4902] usb 1-1: USB disconnect, device number 26 [ 916.459403][ T8775] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 916.464975][ T8775] SELinux: failed to load policy [ 918.724517][ T3714] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 918.884930][ T3714] usb 1-1: Using ep0 maxpacket: 16 [ 918.896977][ T3714] usb 1-1: config 0 has no interfaces? [ 918.897216][ T3714] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 918.897311][ T3714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.900372][ T3714] usb 1-1: config 0 descriptor?? [ 919.339092][ T3079] usb 1-1: USB disconnect, device number 27 [ 934.624814][ T3714] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 934.786218][ T3714] usb 1-1: Using ep0 maxpacket: 16 [ 934.810940][ T3714] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 934.813506][ T3714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.817721][ T3714] usb 1-1: config 0 has no interface number 0 [ 934.855125][ T3714] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 934.856820][ T3714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.859570][ T3714] usb 1-1: Product: syz [ 934.861308][ T3714] usb 1-1: Manufacturer: syz [ 934.862064][ T3714] usb 1-1: SerialNumber: syz [ 934.871565][ T3714] usb 1-1: config 0 descriptor?? [ 935.092183][ T3714] usb 1-1: USB disconnect, device number 28 [ 943.727796][ T8859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.757184][ T8859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.903591][ T8859] hsr_slave_0: entered promiscuous mode [ 944.917054][ T8859] hsr_slave_1: entered promiscuous mode [ 944.918698][ T8859] debugfs: 'hsr0' already exists in 'hsr' [ 944.919248][ T8859] Cannot create hsr debugfs directory [ 945.385732][ T8859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 945.397756][ T8859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 945.416513][ T8859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 945.436032][ T8859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 947.275398][ T8859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.068329][ T9167] tmpfs: Unsupported parameter 'huge' [ 955.272947][ T8859] veth0_vlan: entered promiscuous mode [ 955.294150][ T8859] veth1_vlan: entered promiscuous mode [ 955.435247][ T8859] veth0_macvtap: entered promiscuous mode [ 955.470737][ T8859] veth1_macvtap: entered promiscuous mode [ 955.797094][ T7378] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.800842][ T7378] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.817483][ T7378] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.821451][ T7378] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.573223][ T9181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1261'. [ 979.903693][ T9223] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1280'. [ 979.921280][ T9223] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1280'. [ 981.660513][ T28] audit: type=1400 audit(981.530:341): avc: denied { create } for pid=9228 comm="syz.0.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 989.598450][ T9297] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1298'. [ 989.697031][ T6436] bond0 (unregistering): Released all slaves [ 989.895327][ T6436] hsr_slave_0: left promiscuous mode [ 989.905795][ T6436] hsr_slave_1: left promiscuous mode [ 994.640822][ T9342] netlink: 'syz.3.1311': attribute type 6 has an invalid length. [ 996.356174][ T9354] macvlan1: entered allmulticast mode [ 996.416557][ T9354] veth1_vlan: entered allmulticast mode [ 996.418752][ T9354] macvlan1: entered promiscuous mode [ 1000.835091][ T9386] netlink: 'syz.3.1324': attribute type 10 has an invalid length. [ 1001.127064][ T9391] netlink: 'syz.3.1325': attribute type 2 has an invalid length. [ 1001.127611][ T9391] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 1001.127905][ T9391] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1325'. [ 1001.601264][ T9394] syzkaller0: entered promiscuous mode [ 1001.615562][ T9394] syzkaller0: entered allmulticast mode [ 1008.556936][ T9444] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1339'. [ 1011.751867][ T9484] *** NOT YET: opcode c3 *** [ 1016.771287][ T9532] syzkaller0: entered promiscuous mode [ 1016.775483][ T9532] syzkaller0: entered allmulticast mode [ 1018.227463][ T9555] netlink: 'syz.0.1370': attribute type 6 has an invalid length. [ 1020.009123][ T9580] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1379'. [ 1023.541633][ T9605] syzkaller0: entered promiscuous mode [ 1023.542097][ T9605] syzkaller0: entered allmulticast mode [ 1032.710695][ T7378] bond1 (unregistering): (slave ip6tnl3): Releasing backup interface [ 1032.712027][ T7378] ip6tnl3 (unregistering): left promiscuous mode [ 1032.952958][ T7378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.972654][ T7378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.998910][ T7378] bond_slave_1: left promiscuous mode [ 1033.001797][ T7378] bond0 (unregistering): Released all slaves [ 1033.015357][ T7378] bond1 (unregistering): Released all slaves [ 1033.057243][ T7378] bond2 (unregistering): Released all slaves [ 1033.166718][ T7378] hsr_slave_0: left promiscuous mode [ 1033.184529][ T7378] hsr_slave_1: left promiscuous mode [ 1033.212025][ T7378] veth1_macvtap: left promiscuous mode [ 1033.226673][ T7378] veth0_macvtap: left promiscuous mode [ 1033.227324][ T7378] veth1_vlan: left promiscuous mode [ 1033.227825][ T7378] veth0_vlan: left promiscuous mode [ 1050.665573][ T9665] netlink: 'syz.0.1401': attribute type 1 has an invalid length. [ 1050.666155][ T9665] nbd: couldn't find device at index 65544 [ 1054.083106][ T28] audit: type=1400 audit(1053.960:342): avc: denied { ioctl } for pid=9675 comm="syz.0.1404" path="socket:[15217]" dev="sockfs" ino=15217 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1054.136062][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 1055.976182][ T9697] syzkaller0: entered promiscuous mode [ 1055.984390][ T9697] syzkaller0: entered allmulticast mode [ 1056.250204][ T7378] nci: nci_ntf_packet: unknown ntf opcode 0x11c [ 1056.463389][ T9702] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1406'. [ 1060.756059][ T9688] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1061.655995][ T28] audit: type=1400 audit(1061.540:343): avc: denied { audit_write } for pid=9710 comm="syz.3.1411" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1061.658379][ T28] audit: type=1107 audit(1061.540:344): pid=9710 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ǷHbh9iYcH7aqI'{ۍgkYVE]}ʘ >/mP^f#F+a[-]W(' [ 1067.760108][ T28] audit: type=1400 audit(1067.640:345): avc: denied { write } for pid=9737 comm="syz.3.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1068.429251][ T28] audit: type=1400 audit(1068.310:346): avc: denied { connect } for pid=9746 comm="syz.3.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1071.100426][ T9765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1071.823567][ T9766] macvlan1: left promiscuous mode [ 1074.914632][ T9751] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1076.436137][ T9801] nbd: device at index 3 is going down [ 1080.867394][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 1080.875776][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 1082.367604][ T9868] syzkaller0: entered promiscuous mode [ 1082.375664][ T9868] syzkaller0: entered allmulticast mode [ 1088.988141][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 1090.348182][ T9938] syzkaller0: entered promiscuous mode [ 1090.353458][ T9938] syzkaller0: entered allmulticast mode [ 1090.469139][ T9910] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1091.489874][ T9962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1482'. [ 1091.974645][ T2871] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1092.169171][ T2871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.169575][ T2871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1092.169972][ T2871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1092.170124][ T2871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1092.170226][ T2871] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1092.170268][ T2871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.178911][ T2871] usb 1-1: config 0 descriptor?? [ 1092.188331][ T2871] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1092.189352][ T2871] usb 1-1: MIDIStreaming interface descriptor not found [ 1092.282193][ T9977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.287665][ T9977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.411371][ T9400] usb 1-1: USB disconnect, device number 29 [ 1093.205989][T10011] 8<--- cut here --- [ 1093.209850][T10011] Unable to handle kernel paging request at virtual address fee04f2d when write [ 1093.214575][T10011] [fee04f2d] *pgd=80000080007003, *pmd=00000000 [ 1093.228128][T10011] Internal error: Oops: a06 [#1] SMP ARM [ 1093.230560][T10011] Modules linked in: [ 1093.231270][T10011] CPU: 0 UID: 0 PID: 10011 Comm: syz.3.1489 Not tainted syzkaller #0 PREEMPT [ 1093.231686][T10011] Hardware name: ARM-Versatile Express [ 1093.232158][T10011] PC is at subdev_8255_io+0x60/0x6c [ 1093.232867][T10011] LR is at subdev_8255_io+0x4c/0x6c [ 1093.233414][T10011] pc : [<8143e3e0>] lr : [<8143e3cc>] psr: 60000013 [ 1093.234020][T10011] sp : eaa95cb8 ip : eaa95cb8 fp : eaa95cd4 [ 1093.234576][T10011] r10: 00000000 r9 : 00000084 r8 : eaa95da4 [ 1093.234890][T10011] r7 : 00004f2a r6 : 0000009b r5 : 841d0cc0 r4 : 00004f2d [ 1093.235375][T10011] r3 : 0000009b r2 : fee04f2d r1 : 00000001 r0 : 841d0cc0 [ 1093.235889][T10011] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 1093.236866][T10011] Control: 30c5387d Table: 84da73c0 DAC: fffffffd [ 1093.237340][T10011] Register r0 information: slab kmalloc-192 start 841d0cc0 pointer offset 0 size 192 [ 1093.239386][T10011] Register r1 information: non-paged memory [ 1093.239918][T10011] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 1093.240544][ T28] audit: type=1400 audit(1093.120:347): avc: denied { read } for pid=2892 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1093.242612][T10011] Register r3 information: non-paged memory [ 1093.243109][T10011] Register r4 information: non-paged memory [ 1093.243464][T10011] Register r5 information: slab kmalloc-192 start 841d0cc0 pointer offset 0 size 192 [ 1093.244244][T10011] Register r6 information: non-paged memory [ 1093.244553][T10011] Register r7 information: non-paged memory [ 1093.244811][T10011] Register r8 information: 2-page vmalloc region starting at 0xeaa94000 allocated at kernel_clone+0xac/0x428 [ 1093.245292][T10011] Register r9 information: non-paged memory [ 1093.245571][T10011] Register r10 information: NULL pointer [ 1093.245850][T10011] Register r11 information: 2-page vmalloc region starting at 0xeaa94000 allocated at kernel_clone+0xac/0x428 [ 1093.246485][T10011] Register r12 information: 2-page vmalloc region starting at 0xeaa94000 allocated at kernel_clone+0xac/0x428 [ 1093.247317][T10011] Process syz.3.1489 (pid: 10011, stack limit = 0xeaa94000) [ 1093.248003][T10011] Stack: (0xeaa95cb8 to 0xeaa96000) [ 1093.248632][T10011] 5ca0: 8143e380 00004f2a [ 1093.249205][T10011] 5cc0: 841d0cc0 00004f2a eaa95cf4 eaa95cd8 8143e0bc 8143e38c 00004f2a 80522740 [ 1093.249893][T10011] 5ce0: 90bbf800 90bbf800 eaa95d14 eaa95cf8 8143e474 8143e070 841d0cc0 00000000 [ 1093.250353][T10011] 5d00: 90bbf800 00004f2a eaa95d54 eaa95d18 8143e624 8143e3f8 829d6e04 841d0cc0 [ 1093.250738][T10011] 5d20: 00000000 00000000 841d0cc0 829d6e04 841d0cc0 00000000 eaa95d90 841d0cc0 [ 1093.251066][T10011] 5d40: 00000000 82b2efdc eaa95d8c eaa95d58 8142cf68 8143e5bc 40946400 00000000 [ 1093.251527][T10011] 5d60: eaa95d7c 200000c0 841d0cc0 b5403587 40946400 00000003 00000003 83e06c00 [ 1093.251870][T10011] 5d80: eaa95e4c eaa95d90 81428774 8142ce68 35353238 00000000 00000000 00000000 [ 1093.252212][T10011] 5da0: 00000000 00004f2a ffffffff 00010007 00000004 00001d02 00000001 00000085 [ 1093.252682][T10011] 5dc0: 00000005 00000081 00000003 00000002 fffffffe 00000001 80000001 00000000 [ 1093.253123][T10011] 5de0: 00000101 00000008 00400009 00000004 00000005 00000099 0000caa7 00000080 [ 1093.253520][T10011] 5e00: 00000000 00000005 02000e67 00000002 00000008 00000008 00000000 fffbfff8 [ 1093.254270][T10011] 5e20: 00000000 f41cacf8 00000000 86257a80 841d0cc0 200000c0 40946400 00000003 [ 1093.255299][T10011] 5e40: eaa95f14 eaa95e50 81429a98 814286ac 00000000 f41cacf8 00000000 00000000 [ 1093.255658][T10011] 5e60: 824b857c eaa95ea4 0000005f 8476a838 00000064 841d0cf0 eaa95ee4 eaa95e88 [ 1093.256001][T10011] 5e80: 807cda4c 807c3e24 00000064 00000001 00000000 eaa95ea4 86289010 83430c38 [ 1093.256364][T10011] 5ea0: 00006400 0000000b eaa95e98 00000000 00000000 f41cacf8 00000000 86257a80 [ 1093.256781][T10011] 5ec0: 40946400 200000c0 200000c0 86257a80 00000003 83e06c00 eaa95ef4 eaa95ee8 [ 1093.257273][T10011] 5ee0: 807cdb7c f41cacf8 eaa95f14 00000000 86257a81 40946400 200000c0 86257a80 [ 1093.257610][T10011] 5f00: 00000003 83e06c00 eaa95fa4 eaa95f18 8058f90c 81429750 ecac8b10 83e06c00 [ 1093.257962][T10011] 5f20: eaa95f3c eaa95f30 81ae17f4 81ae16c0 eaa95f54 eaa95f40 8025a868 8028c368 [ 1093.258299][T10011] 5f40: eaa95fb0 40000000 eaa95f84 eaa95f58 80220bf8 8025a824 00000000 8281d2bc [ 1093.258622][T10011] 5f60: eaa95fb0 0013e480 ecac8b10 80220b4c 00000000 f41cacf8 eaa95fac 00000000 [ 1093.258934][T10011] 5f80: 00000000 00346310 00000036 8020029c 83e06c00 00000036 00000000 eaa95fa8 [ 1093.259464][T10011] 5fa0: 80200060 8058f6d4 00000000 00000000 00000003 40946400 200000c0 00000000 [ 1093.259923][T10011] 5fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f950dc [ 1093.260283][T10011] 5fe0: 76f94e88 76f94e78 00018ba0 001302e0 60000010 00000003 00000000 00000000 [ 1093.261146][T10011] Call trace: [ 1093.261503][T10011] [<8143e380>] (subdev_8255_io) from [<8143e0bc>] (subdev_8255_do_config+0x58/0x60) [ 1093.261647][ T28] audit: type=1400 audit(1093.140:348): avc: denied { search } for pid=2892 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1093.262603][ T28] audit: type=1400 audit(1093.140:349): avc: denied { search } for pid=2892 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1093.263009][ T28] audit: type=1400 audit(1093.140:350): avc: denied { add_name } for pid=2892 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1093.263286][ T28] audit: type=1400 audit(1093.140:351): avc: denied { create } for pid=2892 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1093.263821][ T28] audit: type=1400 audit(1093.140:352): avc: denied { append open } for pid=2892 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1093.274884][T10011] r7:00004f2a r6:841d0cc0 r5:00004f2a r4:8143e380 [ 1093.275296][T10011] [<8143e064>] (subdev_8255_do_config) from [<8143e474>] (subdev_8255_io_init+0x88/0x98) [ 1093.275939][T10011] r4:90bbf800 [ 1093.276135][T10011] [<8143e3ec>] (subdev_8255_io_init) from [<8143e624>] (dev_8255_attach+0x74/0x120) [ 1093.276506][T10011] r7:00004f2a r6:90bbf800 r5:00000000 r4:841d0cc0 [ 1093.276790][T10011] [<8143e5b0>] (dev_8255_attach) from [<8142cf68>] (comedi_device_attach+0x10c/0x248) [ 1093.277449][T10011] r10:82b2efdc r9:00000000 r8:841d0cc0 r7:eaa95d90 r6:00000000 r5:841d0cc0 [ 1093.278149][T10011] r4:829d6e04 [ 1093.278685][T10011] [<8142ce5c>] (comedi_device_attach) from [<81428774>] (do_devconfig_ioctl+0xd4/0x21c) [ 1093.279805][T10011] r10:83e06c00 r9:00000003 r8:00000003 r7:40946400 r6:b5403587 r5:841d0cc0 [ 1093.280790][T10011] r4:200000c0 [ 1093.281072][T10011] [<814286a0>] (do_devconfig_ioctl) from [<81429a98>] (comedi_unlocked_ioctl+0x354/0x1dbc) [ 1093.281874][T10011] r8:00000003 r7:40946400 r6:200000c0 r5:841d0cc0 r4:86257a80 [ 1093.282213][T10011] [<81429744>] (comedi_unlocked_ioctl) from [<8058f90c>] (sys_ioctl+0x244/0xb5c) [ 1093.282596][T10011] r10:83e06c00 r9:00000003 r8:86257a80 r7:200000c0 r6:40946400 r5:86257a81 [ 1093.282921][T10011] r4:00000000 [ 1093.283100][T10011] [<8058f6c8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1093.283538][T10011] Exception stack(0xeaa95fa8 to 0xeaa95ff0) [ 1093.284281][T10011] 5fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 1093.284839][T10011] 5fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f950dc [ 1093.285510][T10011] 5fe0: 76f94e88 76f94e78 00018ba0 001302e0 [ 1093.285889][T10011] r10:00000036 r9:83e06c00 r8:8020029c r7:00000036 r6:00346310 r5:00000000 [ 1093.286620][T10011] r4:00000000 [ 1093.287368][T10011] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 1093.290793][T10011] ---[ end trace 0000000000000000 ]--- [ 1093.293281][T10011] Kernel panic - not syncing: Fatal exception [ 1093.295960][T10011] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:34:35 Registers: info registers vcpu 0 CPU#0 R00=5b705000 R01=001fbc69 R02=826c12c4 R03=81ae20c0 R04=00000006 R05=828f8388 R06=00000004 R07=828f8380 R08=83e06c00 R09=828f8388 R10=00000000 R11=df801c94 R12=df801c98 R13=df801c88 R14=80341368 R15=81ae20d0 PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=0007d3c4 R01=76f4c3bc R02=7eec8c94 R03=00000000 R04=00000001 R05=76f6d140 R06=00000000 R07=7eec87f8 R08=0000000a R09=76c65b00 R10=00000000 R11=76f4c3bc R12=00000010 R13=7eec87c0 R14=76e87e40 R15=76e0ebc8 PSR=800e0010 N--- A S usr32 s00=00000000 s01=d00b0000 d00=d00b000000000000 s02=00080004 s03=000c0000 d01=000c000000080004 s04=000e0014 s05=00200000 d02=00200000000e0014 s06=00180000 s07=dcc00000 d03=dcc0000000180000 s08=00003703 s09=00e00000 d04=00e0000000003703 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00020000 d06=0002000000000000 s14=00340000 s15=00140000 d07=0014000000340000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=ffffffff s33=75706301 d16=75706301ffffffff s34=6174732e s35=46ee0074 d17=46ee00746174732e s36=08000800 s37=800201c7 d18=800201c708000800 s38=b4080001 s39=0400019d d19=0400019db4080001 s40=017ac600 s41=00080606 d20=00080606017ac600 s42=02010000 s43=12080000 d21=1208000002010000 s44=0c013f98 s45=08000002 d22=080000020c013f98 s46=00028080 s47=08000208 d23=0800020800028080 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=10d16afa s53=bf630c33 d26=bf630c3310d16afa s54=95cddf8d s55=981a2a7e d27=981a2a7e95cddf8d s56=32730e2b s57=da24d250 d28=da24d25032730e2b s58=a50e6a44 s59=eb3ca542 d29=eb3ca542a50e6a44 s60=45377cf4 s61=f7e23f1e d30=f7e23f1e45377cf4 s62=dc54144c s63=21aa04d8 d31=21aa04d8dc54144c FPSCR: 00000000