last executing test programs: 13.031699877s ago: executing program 0 (id=482): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x8, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12.652848351s ago: executing program 0 (id=483): syz_emit_ethernet(0x82, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @dev}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x1c, 0x0, [{0x0, 0x5, "369954"}, {0x0, 0xc, "08050000000000fc000a"}, {0x0, 0x5, "dcc69a"}]}, @rr={0x7, 0x1f, 0x0, [@multicast1, @rand_addr, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) 12.455237769s ago: executing program 0 (id=484): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x3c}}, 0x0) 12.030440537s ago: executing program 0 (id=486): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003bc0)=[{{&(0x7f0000001000)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dstopts_2292={{0x10}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) 11.963203092s ago: executing program 0 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5}]}}}]}, 0x3c}}, 0x0) 11.680552148s ago: executing program 0 (id=489): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000240)=0x300, 0x4) 1.287778654s ago: executing program 1 (id=503): pipe(&(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) write$P9_RWSTAT(r1, 0x0, 0x0) 1.071604734s ago: executing program 1 (id=504): pipe(&(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 621.306004ms ago: executing program 1 (id=505): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001340), &(0x7f0000001380)=0x10) 358.145407ms ago: executing program 1 (id=506): fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1ff3efb7f5d37571) 122.438769ms ago: executing program 1 (id=507): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff06, 0x0) 0s ago: executing program 1 (id=508): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff07, 0x0) kernel console output (not intermixed with test programs): [ 48.007227][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 48.007338][ T31] audit: type=1400 audit(47.950:68): avc: denied { read write } for pid=3001 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.008523][ T31] audit: type=1400 audit(47.950:69): avc: denied { open } for pid=3001 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:24649' (ED25519) to the list of known hosts. [ 57.661724][ T31] audit: type=1400 audit(57.610:70): avc: denied { name_bind } for pid=3002 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 59.740169][ T31] audit: type=1400 audit(59.680:71): avc: denied { execute } for pid=3004 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 59.750680][ T31] audit: type=1400 audit(59.690:72): avc: denied { execute_no_trans } for pid=3004 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.094924][ T31] audit: type=1400 audit(63.040:73): avc: denied { mounton } for pid=3004 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.097888][ T31] audit: type=1400 audit(63.040:74): avc: denied { mount } for pid=3004 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.114249][ T3004] cgroup: Unknown subsys name 'net' [ 63.124120][ T31] audit: type=1400 audit(63.070:75): avc: denied { unmount } for pid=3004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.437787][ T3004] cgroup: Unknown subsys name 'hugetlb' [ 63.438805][ T3004] cgroup: Unknown subsys name 'rlimit' [ 63.670275][ T31] audit: type=1400 audit(63.610:76): avc: denied { setattr } for pid=3004 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.671321][ T31] audit: type=1400 audit(63.610:77): avc: denied { mounton } for pid=3004 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 63.673001][ T31] audit: type=1400 audit(63.620:78): avc: denied { mount } for pid=3004 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 63.871825][ T3006] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 63.872681][ T31] audit: type=1400 audit(63.820:79): avc: denied { relabelto } for pid=3006 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 63.880664][ T31] audit: type=1400 audit(63.820:80): avc: denied { write } for pid=3006 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 63.901749][ T31] audit: type=1400 audit(63.850:81): avc: denied { read } for pid=3004 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 63.902870][ T31] audit: type=1400 audit(63.850:82): avc: denied { open } for pid=3004 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 70.421228][ T3004] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.219519][ T31] audit: type=1400 audit(72.160:83): avc: denied { execmem } for pid=3007 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.291788][ T31] audit: type=1400 audit(72.240:84): avc: denied { mounton } for pid=3009 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 72.292815][ T31] audit: type=1400 audit(72.240:85): avc: denied { mount } for pid=3009 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 72.296708][ T31] audit: type=1400 audit(72.240:86): avc: denied { read } for pid=3009 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.298008][ T31] audit: type=1400 audit(72.240:87): avc: denied { open } for pid=3009 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.303635][ T31] audit: type=1400 audit(72.250:88): avc: denied { mounton } for pid=3009 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 72.329071][ T31] audit: type=1400 audit(72.270:89): avc: denied { module_request } for pid=3010 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.331453][ T31] audit: type=1400 audit(72.270:90): avc: denied { module_request } for pid=3009 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.418379][ T31] audit: type=1400 audit(72.360:91): avc: denied { sys_module } for pid=3009 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.026072][ T31] audit: type=1400 audit(72.970:92): avc: denied { ioctl } for pid=3010 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=691 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.944072][ T3010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.956512][ T3010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.078108][ T3009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.085303][ T3009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.693960][ T3009] hsr_slave_0: entered promiscuous mode [ 74.696994][ T3009] hsr_slave_1: entered promiscuous mode [ 74.919001][ T3009] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.927934][ T3009] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.934192][ T3009] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.966635][ T3009] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.999085][ T3010] hsr_slave_0: entered promiscuous mode [ 75.002690][ T3010] hsr_slave_1: entered promiscuous mode [ 75.003681][ T3010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.004030][ T3010] Cannot create hsr debugfs directory [ 75.226084][ T3010] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.231793][ T3010] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.246169][ T3010] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.256470][ T3010] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.775377][ T3009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.818417][ T3010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.732035][ T3009] veth0_vlan: entered promiscuous mode [ 77.739258][ T3009] veth1_vlan: entered promiscuous mode [ 77.775060][ T3009] veth0_macvtap: entered promiscuous mode [ 77.779618][ T3009] veth1_macvtap: entered promiscuous mode [ 77.818594][ T3009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.819227][ T3009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.819508][ T3009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.821042][ T3009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.930668][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 77.930763][ T31] audit: type=1400 audit(77.870:96): avc: denied { mount } for pid=3009 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.931882][ T31] audit: type=1400 audit(77.870:97): avc: denied { mounton } for pid=3009 comm="syz-executor" path="/syzkaller.BeV7yt/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.938154][ T31] audit: type=1400 audit(77.880:98): avc: denied { mount } for pid=3009 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.949686][ T31] audit: type=1400 audit(77.890:99): avc: denied { unmount } for pid=3009 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.963175][ T31] audit: type=1400 audit(77.910:100): avc: denied { mounton } for pid=3009 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 77.967384][ T31] audit: type=1400 audit(77.910:101): avc: denied { mount } for pid=3009 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.054408][ T31] audit: type=1400 audit(77.990:102): avc: denied { read write } for pid=3009 comm="syz-executor" name="loop0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.055680][ T31] audit: type=1400 audit(77.990:103): avc: denied { open } for pid=3009 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.056466][ T31] audit: type=1400 audit(77.990:104): avc: denied { ioctl } for pid=3009 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=635 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.126954][ T31] audit: type=1400 audit(78.070:105): avc: denied { node_bind } for pid=3680 comm="syz.0.1" saddr=10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 79.622953][ T3010] veth0_vlan: entered promiscuous mode [ 79.693366][ T3010] veth1_vlan: entered promiscuous mode [ 79.995352][ T3702] Illegal XDP return value 4294967274 on prog (id 2) dev syz_tun, expect packet loss! [ 80.049245][ T3010] veth0_macvtap: entered promiscuous mode [ 80.084250][ T3010] veth1_macvtap: entered promiscuous mode [ 80.272131][ T3010] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.274391][ T3010] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.276883][ T3010] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.290848][ T3010] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.194791][ T3711] syz_tun: entered promiscuous mode [ 81.197867][ T3711] vlan2: entered promiscuous mode [ 81.208176][ T3711] syz_tun: left promiscuous mode [ 83.255245][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 83.255410][ T31] audit: type=1400 audit(83.200:122): avc: denied { create } for pid=3726 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.292283][ T31] audit: type=1400 audit(83.240:123): avc: denied { ioctl } for pid=3726 comm="syz.1.17" path="socket:[2252]" dev="sockfs" ino=2252 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.844932][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.053907][ T24] usb 2-1: config index 0 descriptor too short (expected 4114, got 18) [ 86.076626][ T24] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 86.084905][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.085664][ T24] usb 2-1: Product: syz [ 86.085908][ T24] usb 2-1: Manufacturer: syz [ 86.086157][ T24] usb 2-1: SerialNumber: syz [ 86.119395][ T24] usb 2-1: config 0 descriptor?? [ 86.169748][ C1] hrtimer: interrupt took 3473072 ns [ 86.362803][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 86.363448][ T24] asix 2-1:0.0: probe with driver asix failed with error -71 [ 86.368469][ T24] usb 2-1: USB disconnect, device number 2 [ 90.700547][ T31] audit: type=1400 audit(90.630:124): avc: denied { ioctl } for pid=3757 comm="syz.1.23" path="socket:[2291]" dev="sockfs" ino=2291 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.435148][ T31] audit: type=1400 audit(91.380:125): avc: denied { bind } for pid=3762 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.444574][ T31] audit: type=1400 audit(91.390:126): avc: denied { write } for pid=3762 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.703038][ T31] audit: type=1400 audit(95.650:127): avc: denied { create } for pid=3776 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.740017][ T31] audit: type=1400 audit(95.680:128): avc: denied { setopt } for pid=3776 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.752219][ T31] audit: type=1400 audit(95.700:129): avc: denied { write } for pid=3776 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 96.668249][ T31] audit: type=1400 audit(96.610:130): avc: denied { setopt } for pid=3784 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.620319][ T31] audit: type=1400 audit(98.560:131): avc: denied { setopt } for pid=3802 comm="syz.1.43" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.850615][ T31] audit: type=1400 audit(98.790:132): avc: denied { create } for pid=3804 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.863870][ T31] audit: type=1400 audit(98.790:133): avc: denied { write } for pid=3804 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.996835][ T31] audit: type=1400 audit(98.940:134): avc: denied { execute } for pid=3806 comm="syz.1.45" path="/32/cpuacct.usage_percpu_user" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.150543][ T31] audit: type=1400 audit(99.090:135): avc: denied { create } for pid=3808 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.164275][ T31] audit: type=1400 audit(99.110:136): avc: denied { create } for pid=3808 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 99.230432][ T31] audit: type=1400 audit(99.150:137): avc: denied { write } for pid=3808 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 101.390353][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 101.390466][ T31] audit: type=1400 audit(101.330:140): avc: denied { setopt } for pid=3827 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.271298][ T31] audit: type=1400 audit(102.220:141): avc: denied { create } for pid=3831 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.304694][ T31] audit: type=1400 audit(107.250:142): avc: denied { write } for pid=3878 comm="syz.1.74" path="socket:[2517]" dev="sockfs" ino=2517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.065914][ T2952] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.129056][ T2952] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.184547][ T2952] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.241765][ T2952] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.591844][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.598095][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.606964][ T2952] bond0 (unregistering): Released all slaves [ 108.727603][ T2952] hsr_slave_0: left promiscuous mode [ 108.733190][ T2952] hsr_slave_1: left promiscuous mode [ 108.751370][ T2952] veth1_macvtap: left promiscuous mode [ 108.752174][ T2952] veth0_macvtap: left promiscuous mode [ 108.752581][ T2952] veth1_vlan: left promiscuous mode [ 108.753011][ T2952] veth0_vlan: left promiscuous mode [ 110.013658][ T31] audit: type=1400 audit(109.960:143): avc: denied { read } for pid=3993 comm="syz.0.82" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 110.014917][ T31] audit: type=1400 audit(109.960:144): avc: denied { open } for pid=3993 comm="syz.0.82" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 110.759349][ T3891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.773263][ T3891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.182487][ T3891] hsr_slave_0: entered promiscuous mode [ 112.184592][ T3891] hsr_slave_1: entered promiscuous mode [ 112.186926][ T3891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.187344][ T3891] Cannot create hsr debugfs directory [ 112.826380][ T3891] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.833873][ T3891] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.837898][ T3891] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.845053][ T3891] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.678725][ T3891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.866736][ T31] audit: type=1400 audit(116.800:145): avc: denied { connect } for pid=4332 comm="syz.0.96" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.894965][ T31] audit: type=1400 audit(117.840:146): avc: denied { read } for pid=4346 comm="syz.0.99" path="socket:[3872]" dev="sockfs" ino=3872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.302742][ T3891] veth0_vlan: entered promiscuous mode [ 118.339398][ T3891] veth1_vlan: entered promiscuous mode [ 118.439122][ T3891] veth0_macvtap: entered promiscuous mode [ 118.492051][ T3891] veth1_macvtap: entered promiscuous mode [ 118.686745][ T3891] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.694514][ T3891] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.694991][ T3891] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.695376][ T3891] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.935594][ T31] audit: type=1400 audit(119.880:147): avc: denied { ioctl } for pid=4366 comm="syz.1.104" path="socket:[3018]" dev="sockfs" ino=3018 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.779459][ T31] audit: type=1400 audit(122.720:148): avc: denied { create } for pid=4397 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 122.805928][ T31] audit: type=1400 audit(122.750:149): avc: denied { bind } for pid=4397 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 123.347771][ T31] audit: type=1400 audit(123.260:150): avc: denied { setopt } for pid=4397 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 123.353249][ T31] audit: type=1400 audit(123.270:151): avc: denied { accept } for pid=4397 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.575676][ T31] audit: type=1400 audit(128.520:152): avc: denied { setopt } for pid=4416 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.588078][ T31] audit: type=1400 audit(128.530:153): avc: denied { write } for pid=4416 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 131.100769][ T2966] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 131.315714][ T2966] usb 1-1: Using ep0 maxpacket: 8 [ 131.435919][ T2966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.436531][ T2966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.436964][ T2966] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 131.437298][ T2966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.455084][ T2966] usb 1-1: config 0 descriptor?? [ 131.965186][ T2966] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 131.968273][ T2966] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 131.969505][ T2966] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 131.980263][ T2966] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 131.981293][ T2966] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 131.983711][ T2966] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 131.984037][ T2966] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 131.985733][ T2966] steelseries 0003:1038:1410.0001: missing HID_OUTPUT_REPORT 0 [ 132.161002][ T2966] usb 1-1: USB disconnect, device number 2 [ 132.507251][ T31] audit: type=1326 audit(132.440:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.0.121" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130580 code=0x7ffc0000 [ 132.509169][ T31] audit: type=1326 audit(132.450:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.0.121" exe="/syz-executor" sig=0 arch=40000028 syscall=360 compat=0 ip=0x130580 code=0x7ffc0000 [ 132.536885][ T31] audit: type=1326 audit(132.460:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.0.121" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130580 code=0x7ffc0000 [ 132.537774][ T31] audit: type=1326 audit(132.460:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.0.121" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130580 code=0x7ffc0000 [ 164.793795][ T31] audit: type=1400 audit(164.740:158): avc: denied { create } for pid=4554 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.817794][ T31] audit: type=1400 audit(164.760:159): avc: denied { bind } for pid=4554 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.824754][ T31] audit: type=1400 audit(164.760:160): avc: denied { connect } for pid=4554 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.842821][ T31] audit: type=1400 audit(164.770:161): avc: denied { write } for pid=4554 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.364718][ T4579] netlink: 144 bytes leftover after parsing attributes in process `syz.0.168'. [ 181.630459][ T31] audit: type=1400 audit(181.570:162): avc: denied { ioctl } for pid=4612 comm="syz.0.183" path="socket:[5214]" dev="sockfs" ino=5214 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 182.910365][ T4628] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 183.650506][ T4560] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 183.834277][ T4560] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 183.852476][ T4560] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.853138][ T4560] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.853842][ T4560] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.862982][ T4560] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.863503][ T4560] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.863921][ T4560] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.876558][ T4560] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.877501][ T4560] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.878090][ T4560] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.898527][ T4560] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.899246][ T4560] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.900380][ T4560] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.908466][ T4560] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.909423][ T4560] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.912860][ T4560] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.917730][ T4560] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.918269][ T4560] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.918797][ T4560] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.932431][ T4560] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.933150][ T4560] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.933783][ T4560] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.950327][ T4560] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.951270][ T4560] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.951880][ T4560] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.973942][ T4560] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 183.974269][ T4560] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 183.974484][ T4560] usb 2-1: Product: syz [ 183.974778][ T4560] usb 2-1: Manufacturer: syz [ 183.974914][ T4560] usb 2-1: SerialNumber: syz [ 183.977495][ T4560] usb 2-1: config 0 descriptor?? [ 184.026728][ T4560] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 184.222482][ T4552] usb 2-1: USB disconnect, device number 3 [ 184.271416][ T4552] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 185.067372][ T31] audit: type=1400 audit(185.000:163): avc: denied { write } for pid=4657 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 186.596533][ T4687] IPv6: addrconf: prefix option has invalid lifetime [ 187.125213][ T4693] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.631530][ T4535] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 189.010458][ T4535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.011085][ T4535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.011803][ T4535] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 189.012378][ T4535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.015786][ T4535] usb 2-1: config 0 descriptor?? [ 189.310411][ T4532] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 189.510122][ T4532] usb 1-1: Using ep0 maxpacket: 8 [ 189.515105][ T4532] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 189.515749][ T4532] usb 1-1: config 179 has no interface number 0 [ 189.516128][ T4532] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 189.516949][ T4532] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 189.517800][ T4532] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 189.518534][ T4532] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 189.519216][ T4532] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 189.530677][ T4532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.548585][ T4714] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 189.792689][ T4535] hid-led 0003:1D34:000A.0002: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 189.795987][ T4535] hid-led 0003:1D34:000A.0002: Dream Cheeky Webmail Notifier initialized [ 189.833343][ T4532] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input3 [ 190.018121][ T31] audit: type=1326 audit(189.960:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.1.217" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130580 code=0x7ffc0000 [ 190.028587][ T4535] usb 2-1: USB disconnect, device number 4 [ 190.033172][ T4532] usb 1-1: USB disconnect, device number 3 [ 190.033374][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 190.034155][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 190.036941][ T4532] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 190.038363][ T31] audit: type=1326 audit(189.960:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.1.217" exe="/syz-executor" sig=0 arch=40000028 syscall=236 compat=0 ip=0x130580 code=0x7ffc0000 [ 190.039436][ T31] audit: type=1326 audit(189.970:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.1.217" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130580 code=0x7ffc0000 [ 190.051205][ T31] audit: type=1326 audit(189.990:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.1.217" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130580 code=0x7ffc0000 [ 191.581759][ T4560] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 191.963213][ T4560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.972198][ T4560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.973278][ T4560] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 191.977191][ T4560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.000715][ T4560] usb 2-1: config 0 descriptor?? [ 192.865681][ T4560] hid-led 0003:1D34:000A.0003: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 192.878445][ T4560] hid-led 0003:1D34:000A.0003: Dream Cheeky Webmail Notifier initialized [ 193.316719][ T31] audit: type=1326 audit(193.260:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.221" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130580 code=0x7ffc0000 [ 193.317386][ T31] audit: type=1326 audit(193.260:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.221" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130580 code=0x7ffc0000 [ 193.340479][ T31] audit: type=1326 audit(193.280:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.221" exe="/syz-executor" sig=0 arch=40000028 syscall=236 compat=0 ip=0x130580 code=0x7ffc0000 [ 193.341909][ T31] audit: type=1326 audit(193.280:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.221" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130580 code=0x7ffc0000 [ 193.342737][ T31] audit: type=1326 audit(193.290:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.221" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130580 code=0x7ffc0000 [ 193.381016][ T4546] usb 2-1: USB disconnect, device number 5 [ 196.720682][ T31] audit: type=1400 audit(196.650:173): avc: denied { write } for pid=4804 comm="syz.1.229" path="socket:[4473]" dev="sockfs" ino=4473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 196.721716][ T31] audit: type=1400 audit(196.650:174): avc: denied { nlmsg_read } for pid=4804 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 197.145205][ T31] audit: type=1400 audit(197.090:175): avc: denied { unmount } for pid=3891 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 198.360755][ T31] audit: type=1400 audit(198.300:176): avc: denied { ioctl } for pid=4810 comm="syz.1.232" path="socket:[4478]" dev="sockfs" ino=4478 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 198.362144][ T4813] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 209.063739][ T4819] netlink: 48 bytes leftover after parsing attributes in process `syz.1.234'. [ 209.064429][ T4819] tc_dump_action: action bad kind [ 209.156864][ T31] audit: type=1400 audit(209.100:177): avc: denied { mount } for pid=4820 comm="syz.1.235" name="/" dev="ramfs" ino=5432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 209.420888][ T31] audit: type=1400 audit(209.360:178): avc: denied { create } for pid=4826 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.414519][ T4838] syzkaller0: entered promiscuous mode [ 211.416216][ T4838] syzkaller0: entered allmulticast mode [ 212.213067][ T31] audit: type=1400 audit(212.160:179): avc: denied { mounton } for pid=4849 comm="syz.0.245" path="/120/file0" dev="tmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 213.572386][ T31] audit: type=1400 audit(213.510:180): avc: denied { unmount } for pid=3009 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 217.049711][ T4863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.248'. [ 222.219203][ T31] audit: type=1400 audit(222.160:181): avc: denied { block_suspend } for pid=4878 comm="syz.0.249" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.074402][ T4896] capability: warning: `syz.0.255' uses 32-bit capabilities (legacy support in use) [ 231.615734][ T1044] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.696944][ T1044] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.765131][ T1044] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.853491][ T1044] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.177744][ T1044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.196928][ T1044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.207017][ T1044] bond0 (unregistering): Released all slaves [ 232.381059][ T1044] hsr_slave_0: left promiscuous mode [ 232.396079][ T1044] hsr_slave_1: left promiscuous mode [ 232.428918][ T1044] veth1_macvtap: left promiscuous mode [ 232.440878][ T1044] veth0_macvtap: left promiscuous mode [ 232.442032][ T1044] veth1_vlan: left promiscuous mode [ 232.442498][ T1044] veth0_vlan: left promiscuous mode [ 234.470269][ T4906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.474166][ T4906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.615620][ T4906] hsr_slave_0: entered promiscuous mode [ 235.621747][ T4906] hsr_slave_1: entered promiscuous mode [ 236.389450][ T4906] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 236.408567][ T4906] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 236.426425][ T4906] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.445507][ T4906] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 237.423112][ T4906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.995646][ T4906] veth0_vlan: entered promiscuous mode [ 242.038109][ T4906] veth1_vlan: entered promiscuous mode [ 242.174917][ T4906] veth0_macvtap: entered promiscuous mode [ 242.194221][ T4906] veth1_macvtap: entered promiscuous mode [ 242.252451][ T4906] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.252948][ T4906] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.253310][ T4906] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.253601][ T4906] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.090418][ T31] audit: type=1400 audit(243.030:182): avc: denied { setopt } for pid=5341 comm="syz.1.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 246.695605][ T5377] pim6reg1: entered promiscuous mode [ 246.718015][ T5377] pim6reg1: entered allmulticast mode [ 246.911447][ T5381] pim6reg1: entered promiscuous mode [ 246.921694][ T5381] pim6reg1: entered allmulticast mode [ 247.553423][ T5395] wg2: entered promiscuous mode [ 247.554117][ T5395] wg2: entered allmulticast mode [ 264.110317][ T31] audit: type=1400 audit(264.050:183): avc: denied { setattr } for pid=5474 comm="syz.1.315" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 270.701920][ T5516] Zero length message leads to an empty skb [ 274.565593][ T31] audit: type=1400 audit(274.510:184): avc: denied { ioctl } for pid=5547 comm="syz.1.348" path="uts:[4026532755]" dev="nsfs" ino=4026532755 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 274.667897][ T31] audit: type=1400 audit(274.610:185): avc: denied { getopt } for pid=5551 comm="syz.1.350" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 276.345842][ T31] audit: type=1400 audit(276.290:186): avc: denied { bind } for pid=5588 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 276.346831][ T31] audit: type=1400 audit(276.290:187): avc: denied { name_bind } for pid=5588 comm="syz.0.366" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 276.347564][ T31] audit: type=1400 audit(276.290:188): avc: denied { node_bind } for pid=5588 comm="syz.0.366" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 276.370691][ T31] audit: type=1400 audit(276.310:189): avc: denied { write } for pid=5588 comm="syz.0.366" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 276.371790][ T31] audit: type=1400 audit(276.310:190): avc: denied { connect } for pid=5588 comm="syz.0.366" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 276.390839][ T31] audit: type=1400 audit(276.310:191): avc: denied { name_connect } for pid=5588 comm="syz.0.366" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 277.182852][ T31] audit: type=1400 audit(277.130:192): avc: denied { write } for pid=5605 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 277.620951][ T31] audit: type=1400 audit(277.570:193): avc: denied { create } for pid=5610 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 278.245839][ T5620] pimreg: entered allmulticast mode [ 278.902088][ T5620] lo: entered allmulticast mode [ 278.908266][ T5620] lo: left allmulticast mode [ 278.912242][ T5620] pimreg: left allmulticast mode [ 279.087413][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'. [ 288.241805][ T31] audit: type=1400 audit(288.180:194): avc: denied { create } for pid=5670 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.285913][ T4517] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 289.625873][ T4517] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.627871][ T4517] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 289.630935][ T4517] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.631290][ T4517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.637384][ T4517] usb 2-1: config 0 descriptor?? [ 289.677998][ T4517] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 293.649461][ T5689] syzkaller0: entered promiscuous mode [ 293.655300][ T5689] syzkaller0: entered allmulticast mode [ 296.463101][ T31] audit: type=1400 audit(296.410:195): avc: denied { write } for pid=5708 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 297.645396][ T31] audit: type=1326 audit(297.590:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.0.405" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130580 code=0x7ffc0000 [ 297.646641][ T31] audit: type=1326 audit(297.590:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.0.405" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130580 code=0x7ffc0000 [ 297.659214][ T31] audit: type=1326 audit(297.600:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.0.405" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x130580 code=0x7ffc0000 [ 297.667294][ T31] audit: type=1326 audit(297.610:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.0.405" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130580 code=0x7ffc0000 [ 297.668730][ T31] audit: type=1326 audit(297.610:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.0.405" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130580 code=0x7ffc0000 [ 297.677728][ T31] audit: type=1326 audit(297.620:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.0.405" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x130580 code=0x7ffc0000 [ 297.688222][ T31] audit: type=1326 audit(297.630:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.0.405" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130580 code=0x7ffc0000 [ 297.689290][ T31] audit: type=1326 audit(297.630:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.0.405" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x130580 code=0x7ffc0000 [ 297.701474][ T31] audit: type=1326 audit(297.640:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.0.405" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130580 code=0x7ffc0000 [ 303.486493][ T4509] usb 2-1: USB disconnect, device number 6 [ 304.398134][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 305.512743][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 305.512793][ T31] audit: type=1400 audit(305.460:211): avc: denied { getopt } for pid=5779 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 305.513776][ T31] audit: type=1400 audit(305.460:212): avc: denied { name_connect } for pid=5779 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 306.622051][ T31] audit: type=1400 audit(306.560:213): avc: denied { bind } for pid=5785 comm="syz.1.427" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 306.634815][ T31] audit: type=1400 audit(306.570:214): avc: denied { node_bind } for pid=5785 comm="syz.1.427" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 307.212848][ T31] audit: type=1400 audit(307.160:215): avc: denied { name_bind } for pid=5787 comm="syz.1.428" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 313.143215][ T31] audit: type=1400 audit(313.080:216): avc: denied { bind } for pid=5809 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 337.695636][ T31] audit: type=1400 audit(337.640:217): avc: denied { watch watch_reads } for pid=5934 comm="syz.1.488" path="/200/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 337.823941][ T31] audit: type=1400 audit(337.770:218): avc: denied { unmount } for pid=3891 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 338.482344][ T31] audit: type=1804 audit(338.420:219): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.491" name="/" dev="pidfs" ino=301 res=1 errno=0 [ 339.629231][ T31] audit: type=1400 audit(339.570:220): avc: denied { create } for pid=5951 comm="syz.1.494" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 339.811808][ T31] audit: type=1400 audit(339.750:221): avc: denied { unlink } for pid=3891 comm="syz-executor" name="file5" dev="tmpfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 349.412714][ T5981] 8<--- cut here --- [ 349.413201][ T5981] Unable to handle kernel NULL pointer dereference at virtual address 00000008 when read [ 349.413623][ T5981] [00000008] *pgd=85042003, *pmd=fe768003 [ 349.415421][ T5981] Internal error: Oops: 205 [#1] PREEMPT SMP ARM [ 349.420772][ T5981] Modules linked in: [ 349.421449][ T5981] CPU: 1 PID: 5981 Comm: syz.1.508 Not tainted 6.10.0-syzkaller #0 [ 349.423112][ T5981] Hardware name: ARM-Versatile Express [ 349.423594][ T5981] PC is at path_from_stashed+0x1c/0x308 [ 349.424926][ T5981] LR is at open_namespace+0x44/0xbc [ 349.425246][ T5981] pc : [<8053af54>] lr : [<8054d6f8>] psr: 80000013 [ 349.425558][ T5981] sp : df98de80 ip : 85566000 fp : df98dec4 [ 349.425840][ T5981] r10: 85566000 r9 : 00000005 r8 : 850e56c0 [ 349.426106][ T5981] r7 : 82caa250 r6 : 85566000 r5 : 00000000 r4 : 84c22078 [ 349.426406][ T5981] r3 : df98decc r2 : 00000008 r1 : 82c95800 r0 : 00000008 [ 349.426799][ T5981] Flags: Nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 349.427139][ T5981] Control: 30c5387d Table: 84e3c180 DAC: 00000000 [ 349.427468][ T5981] Register r0 information: non-paged memory [ 349.428131][ T5981] Register r1 information: slab kmalloc-1k start 82c95800 pointer offset 0 size 1024 [ 349.429420][ T5981] Register r2 information: non-paged memory [ 349.429794][ T5981] Register r3 information: 2-page vmalloc region starting at 0xdf98c000 allocated at kernel_clone+0xac/0x3e4 [ 349.430626][ T5981] Register r4 information: slab anon_vma_chain start 84c22078 pointer offset 0 size 40 [ 349.433876][ T5981] Register r5 information: NULL pointer [ 349.434270][ T5981] Register r6 information: slab task_struct start 85566000 pointer offset 0 size 3072 [ 349.434837][ T5981] Register r7 information: slab mnt_cache start 82caa240 pointer offset 16 size 184 [ 349.435500][ T5981] Register r8 information: slab filp start 850e56c0 pointer offset 0 size 160 [ 349.436013][ T5981] Register r9 information: non-paged memory [ 349.436314][ T5981] Register r10 information: slab task_struct start 85566000 pointer offset 0 size 3072 [ 349.436916][ T5981] Register r11 information: 2-page vmalloc region starting at 0xdf98c000 allocated at kernel_clone+0xac/0x3e4 [ 349.440760][ T5981] Register r12 information: slab task_struct start 85566000 pointer offset 0 size 3072 [ 349.441826][ T5981] Process syz.1.508 (pid: 5981, stack limit = 0xdf98c000) [ 349.442422][ T5981] Stack: (0xdf98de80 to 0xdf98e000) [ 349.443134][ T5981] de80: 805525e4 85566000 df98debc df98de98 8027c93c 802ac404 00000000 84c22078 [ 349.443568][ T5981] dea0: 00000000 85566000 85560880 850e56c0 00000005 85566000 df98def4 df98dec8 [ 349.443943][ T5981] dec0: 8054d6f8 8053af44 df98def4 00000000 00000000 1e0c4c21 84c22078 84c22078 [ 349.444326][ T5981] dee0: 85560000 00000008 df98df14 df98def8 8055271c 8054d6c0 0000ff07 00000000 [ 349.444690][ T5981] df00: 850e56c1 00000000 df98dfa4 df98df18 8051a7f0 805525a4 85566000 00000001 [ 349.445154][ T5981] df20: ecac8b10 85566000 df98df44 df98df38 81903eac 81903d7c df98df5c df98df48 [ 349.445519][ T5981] df40: 8024b544 8027aebc 40000000 df98dfb0 df98df84 df98df60 80202dd8 8024b500 SYZFAIL: failed to recv rpc [ 349.446157][ T5981] df60: 8261c90c df98dfb0 0014aa30 ecac8b10 80202cc0 1e0c4c21 df98dfac 00000000 [ 349.446708][ T5981] df80: 00000000 002642e0 00000036 8020029c 85566000 00000036 00000000 df98dfa8 [ 349.447059][ T5981] dfa0: 80200060 8051a6c8 00000000 00000000 00000005 0000ff07 00000000 00000000 [ 349.447654][ T5981] dfc0: 00000000 00000000 002642e0 00000036 7ea65766 7ea65767 003d0f00 76bf80bc [ 349.448061][ T5981] dfe0: 76bf7ec8 76bf7eb8 000183ec 00130580 60000010 00000005 00000000 00000000 [ 349.448619][ T5981] Call trace: [ 349.449145][ T5981] [<8053af38>] (path_from_stashed) from [<8054d6f8>] (open_namespace+0x44/0xbc) [ 349.450057][ T5981] r10:85566000 r9:00000005 r8:850e56c0 r7:85560880 r6:85566000 r5:00000000 [ 349.450545][ T5981] r4:84c22078 [ 349.450839][ T5981] [<8054d6b4>] (open_namespace) from [<8055271c>] (pidfd_ioctl+0x184/0x4c4) [ 349.451191][ T5981] r6:00000008 r5:85560000 r4:84c22078 [ 349.451394][ T5981] [<80552598>] (pidfd_ioctl) from [<8051a7f0>] (sys_ioctl+0x134/0xda4) [ 349.451954][ T5981] r7:00000000 r6:850e56c1 r5:00000000 r4:0000ff07 [ 349.452638][ T5981] [<8051a6bc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 349.453213][ T5981] Exception stack(0xdf98dfa8 to 0xdf98dff0) [ 349.453511][ T5981] dfa0: 00000000 00000000 00000005 0000ff07 00000000 00000000 [ 349.453856][ T5981] dfc0: 00000000 00000000 002642e0 00000036 7ea65766 7ea65767 003d0f00 76bf80bc [ 349.454196][ T5981] dfe0: 76bf7ec8 76bf7eb8 000183ec 00130580 [ 349.454475][ T5981] r10:00000036 r9:85566000 r8:8020029c r7:00000036 r6:002642e0 r5:00000000 [ 349.454788][ T5981] r4:00000000 [ 349.455183][ T5981] Code: e24dd01c e1a07001 e5911004 ee1dcf70 (e5905000) fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 349.521040][ T5981] ---[ end trace 0000000000000000 ]--- [ 349.522405][ T5981] Kernel panic - not syncing: Fatal exception [ 349.524588][ T5981] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:37:00 Registers: info registers vcpu 0 CPU#0 R00=00000024 R01=76a1f008 R02=00040000 R03=00000000 R04=00040000 R05=76fb9c80 R06=7ef9e198 R07=00000003 R08=00000000 R09=010af2b0 R10=7ef9e27c R11=00000001 R12=005e0b48 R13=df979ff8 R14=76bab2fc R15=76bab2fc PSR=40000093 -Z-- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=005a27e9 s17=00000000 d08=00000000005a27e9 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=09800200 s33=ffffff02 d16=ffffff0209800200 s34=02dc03ff s35=08000401 d17=0800040102dc03ff s36=01080001 s37=080a8003 d18=080a800301080001 s38=ffffffef s39=ffffffff d19=ffffffffffffffef s40=2f2e01ff s41=656c6966 d20=656c69662f2e01ff s42=02d60030 s43=80020400 d21=8002040002d60030 s44=0008000a s45=08010380 d22=080103800008000a s46=00000806 s47=08000100 d23=0800010000000806 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=fb90d197 s53=04fbc6b4 d26=04fbc6b4fb90d197 s54=22506dd0 s55=3f456930 d27=3f45693022506dd0 s56=c9b1e66f s57=1a84b702 d28=1a84b702c9b1e66f s58=b9ba3fb9 s59=8d6ae92a d29=8d6ae92ab9ba3fb9 s60=ec0ae6ff s61=d119f451 d30=d119f451ec0ae6ff s62=af7b9639 s63=96794959 d31=96794959af7b9639 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=83ed0040 R01=00000034 R02=ebdef000 R03=ebdef018 R04=8286429c R05=83ed0040 R06=809b3ca0 R07=828642dd R08=82864298 R09=00000046 R10=60000193 R11=df98db94 R12=00000002 R13=df98db88 R14=82753548 R15=809b3cb0 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000