last executing test programs: 37.234610132s ago: executing program 0 (id=47): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x2, r0}, 0x38) 16.309162105s ago: executing program 0 (id=50): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) syz_usb_connect(0x0, 0x41, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0, 0x166676000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000500)=""/58, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1ff) unshare(0x2040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 16.08974148s ago: executing program 0 (id=51): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000080000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) sigaltstack(0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="b8000000190001000000000000b7f454000000e0000002000000000000fcff00000000fc01000000000000d736d475bd70068d907dd9f6120a000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) 13.469460667s ago: executing program 0 (id=53): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f00000015c0)=""/4096, 0x26, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) 12.777796894s ago: executing program 0 (id=54): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="ac9e0e521e426779d50c3c23208f1cbfee2a7bb9", 0x14}, {&(0x7f00000004c0)="ccd2eee14718f624e97d25ae931ab805658511cf51471a64fd8cde8c000cf9ed6b096a91136b1d4a93a4c1030707fe", 0x2f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0xc8000) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x800000000000045, 0x0) 10.609916079s ago: executing program 1 (id=57): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000008"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x4}, 0x38) 10.379118366s ago: executing program 1 (id=58): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 9.79151276s ago: executing program 1 (id=59): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8) 4.139587304s ago: executing program 1 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe(&(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x11, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00', 0x1}]) 3.843730122s ago: executing program 1 (id=61): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x3b, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r1, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x1000000], [0x9]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r2}) 3.735143375s ago: executing program 1 (id=62): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/meminfo\x00', 0x0, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000ac0)={0x2020}, 0x2020) 0s ago: executing program 0 (id=63): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff0000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) kernel console output (not intermixed with test programs): [ 52.745283][ T31] audit: type=1400 audit(52.650:68): avc: denied { read write } for pid=3077 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.748057][ T31] audit: type=1400 audit(52.650:69): avc: denied { open } for pid=3077 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:51010' (ED25519) to the list of known hosts. [ 62.455134][ T31] audit: type=1400 audit(62.340:70): avc: denied { name_bind } for pid=3078 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.379449][ T31] audit: type=1400 audit(64.280:71): avc: denied { execute } for pid=3080 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.402650][ T31] audit: type=1400 audit(64.310:72): avc: denied { execute_no_trans } for pid=3080 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 68.613206][ T31] audit: type=1400 audit(68.520:73): avc: denied { mounton } for pid=3080 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 68.615754][ T31] audit: type=1400 audit(68.520:74): avc: denied { mount } for pid=3080 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.627579][ T3080] cgroup: Unknown subsys name 'net' [ 68.633314][ T31] audit: type=1400 audit(68.540:75): avc: denied { unmount } for pid=3080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.835986][ T3080] cgroup: Unknown subsys name 'cpuset' [ 68.844410][ T3080] cgroup: Unknown subsys name 'hugetlb' [ 68.845459][ T3080] cgroup: Unknown subsys name 'rlimit' [ 69.100663][ T31] audit: type=1400 audit(69.010:76): avc: denied { setattr } for pid=3080 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.103817][ T31] audit: type=1400 audit(69.010:77): avc: denied { mounton } for pid=3080 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 69.105755][ T31] audit: type=1400 audit(69.010:78): avc: denied { mount } for pid=3080 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 69.399767][ T3082] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 69.401895][ T31] audit: type=1400 audit(69.310:79): avc: denied { relabelto } for pid=3082 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 69.404859][ T31] audit: type=1400 audit(69.310:80): avc: denied { write } for pid=3082 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 69.443468][ T31] audit: type=1400 audit(69.350:81): avc: denied { read } for pid=3080 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 69.444416][ T31] audit: type=1400 audit(69.350:82): avc: denied { open } for pid=3080 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 76.772832][ T3080] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.829194][ T31] audit: type=1400 audit(78.730:83): avc: denied { execmem } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.895390][ T31] audit: type=1400 audit(78.800:84): avc: denied { read } for pid=3085 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.909188][ T31] audit: type=1400 audit(78.800:85): avc: denied { open } for pid=3085 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.922634][ T31] audit: type=1400 audit(78.830:86): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 78.964891][ T31] audit: type=1400 audit(78.870:87): avc: denied { module_request } for pid=3086 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 78.965781][ T31] audit: type=1400 audit(78.870:88): avc: denied { module_request } for pid=3085 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 79.038878][ T31] audit: type=1400 audit(78.940:89): avc: denied { sys_module } for pid=3085 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 79.806890][ T31] audit: type=1400 audit(79.710:90): avc: denied { ioctl } for pid=3085 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.961529][ T3085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.965885][ T3085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.268126][ T3086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.274003][ T3086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.882687][ T3085] hsr_slave_0: entered promiscuous mode [ 81.886476][ T3085] hsr_slave_1: entered promiscuous mode [ 82.302469][ T3086] hsr_slave_0: entered promiscuous mode [ 82.303548][ T3086] hsr_slave_1: entered promiscuous mode [ 82.304367][ T3086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.304592][ T3086] Cannot create hsr debugfs directory [ 82.377583][ T31] audit: type=1400 audit(82.280:91): avc: denied { create } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.389591][ T31] audit: type=1400 audit(82.290:92): avc: denied { write } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.392153][ T3085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.407258][ T3085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.417608][ T3085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.426857][ T3085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.670488][ T3086] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.677265][ T3086] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.687624][ T3086] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.696457][ T3086] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.204557][ T3085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.547457][ T3086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.501245][ T3085] veth0_vlan: entered promiscuous mode [ 86.525243][ T3085] veth1_vlan: entered promiscuous mode [ 86.550701][ T3086] veth0_vlan: entered promiscuous mode [ 86.566746][ T3086] veth1_vlan: entered promiscuous mode [ 86.617417][ T3085] veth0_macvtap: entered promiscuous mode [ 86.634597][ T3085] veth1_macvtap: entered promiscuous mode [ 86.638187][ T3086] veth0_macvtap: entered promiscuous mode [ 86.658041][ T3086] veth1_macvtap: entered promiscuous mode [ 86.727730][ T3086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.732819][ T3086] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.733327][ T3086] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.733713][ T3086] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.749797][ T3085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.750354][ T3085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.750833][ T3085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.751329][ T3085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.917160][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 86.917264][ T31] audit: type=1400 audit(86.820:94): avc: denied { mount } for pid=3085 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.931707][ T31] audit: type=1400 audit(86.840:95): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/syzkaller.IAtPwp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.934021][ T31] audit: type=1400 audit(86.840:96): avc: denied { mount } for pid=3085 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 86.960608][ T31] audit: type=1400 audit(86.860:97): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/syzkaller.IAtPwp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 86.961437][ T31] audit: type=1400 audit(86.860:98): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/syzkaller.IAtPwp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 86.981323][ T31] audit: type=1400 audit(86.890:99): avc: denied { unmount } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.984333][ T31] audit: type=1400 audit(86.890:100): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 86.987499][ T31] audit: type=1400 audit(86.890:101): avc: denied { mount } for pid=3085 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 86.990467][ T31] audit: type=1400 audit(86.900:102): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 86.991744][ T31] audit: type=1400 audit(86.900:103): avc: denied { mount } for pid=3085 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 87.052701][ T3085] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.052705][ T3086] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.529774][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.689646][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 87.707493][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.708083][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.709077][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 87.710034][ T24] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 87.710354][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.721274][ T24] usb 2-1: config 0 descriptor?? [ 88.182173][ T24] ntrig 0003:1B96:000A.0001: unknown main item tag 0x0 [ 88.182878][ T24] ntrig 0003:1B96:000A.0001: unknown main item tag 0x0 [ 88.183206][ T24] ntrig 0003:1B96:000A.0001: unknown main item tag 0x0 [ 88.183519][ T24] ntrig 0003:1B96:000A.0001: unknown main item tag 0x0 [ 88.183846][ T24] ntrig 0003:1B96:000A.0001: unknown main item tag 0x0 [ 88.189610][ T24] ntrig 0003:1B96:000A.0001: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 88.670207][ T1781] usb 2-1: USB disconnect, device number 2 [ 90.843264][ T3041] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.067143][ T3041] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.074948][ T3041] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.079714][ T3041] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 91.080181][ T3041] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.125150][ T3041] usb 1-1: config 0 descriptor?? [ 92.354032][ T3041] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 92.753588][ T3041] hid-led 0003:0FC5:B080.0002: probe with driver hid-led failed with error -71 [ 92.789253][ T3041] usb 1-1: USB disconnect, device number 2 [ 110.569495][ T1781] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 110.753109][ T1781] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 110.753835][ T1781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.754281][ T1781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.754704][ T1781] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 110.755210][ T1781] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 110.755561][ T1781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.764313][ T1781] usb 2-1: config 0 descriptor?? [ 110.879539][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.029344][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 111.049914][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.050892][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.051559][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 111.052021][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.061653][ T24] usb 1-1: config 0 descriptor?? [ 111.210242][ T1781] hid-rmi 0003:17EF:6085.0003: item 0 0 0 8 parsing failed [ 111.211067][ T1781] hid-rmi 0003:17EF:6085.0003: parse failed [ 111.211640][ T1781] hid-rmi 0003:17EF:6085.0003: probe with driver hid-rmi failed with error -22 [ 111.411283][ T1781] usb 2-1: USB disconnect, device number 3 [ 111.516046][ T24] logitech 0003:046D:C24F.0004: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.0-1/input0 [ 111.517714][ T24] logitech 0003:046D:C24F.0004: no inputs found [ 111.542187][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 111.542278][ T31] audit: type=1400 audit(111.440:113): avc: denied { create } for pid=3857 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.543620][ T31] audit: type=1400 audit(111.440:114): avc: denied { bind } for pid=3857 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.121162][ T49] usb 1-1: USB disconnect, device number 3 [ 112.369259][ T46] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.529145][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 112.556794][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.557372][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.558045][ T46] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 112.560347][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.582319][ T46] usb 2-1: config 0 descriptor?? [ 113.031636][ T46] lua 0003:1E7D:2C2E.0005: item fetching failed at offset 5/7 [ 113.032583][ T46] lua 0003:1E7D:2C2E.0005: parse failed [ 113.032942][ T46] lua 0003:1E7D:2C2E.0005: probe with driver lua failed with error -22 [ 113.245477][ T3764] usb 2-1: USB disconnect, device number 4 [ 113.690044][ T31] audit: type=1400 audit(113.590:115): avc: denied { create } for pid=3897 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.721324][ T31] audit: type=1400 audit(113.620:116): avc: denied { setopt } for pid=3897 comm="syz.1.17" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.628911][ C0] hrtimer: interrupt took 9992784 ns [ 119.000554][ T31] audit: type=1400 audit(118.900:117): avc: denied { create } for pid=3906 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.296074][ T31] audit: type=1400 audit(119.200:118): avc: denied { mount } for pid=3908 comm="syz.1.21" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 120.019577][ T46] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 120.273718][ T46] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 120.278926][ T46] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 120.279523][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 120.280004][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 120.280518][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 120.300148][ T46] usb 2-1: string descriptor 0 read error: -22 [ 120.304999][ T46] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 120.306877][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.330785][ T46] usb 2-1: config 0 descriptor?? [ 120.339838][ T46] hub 2-1:0.0: bad descriptor, ignoring hub [ 120.340142][ T46] hub 2-1:0.0: probe with driver hub failed with error -5 [ 120.365093][ T46] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input3 [ 120.544761][ T8] usb 2-1: USB disconnect, device number 5 [ 120.889143][ T31] audit: type=1326 audit(120.780:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.1.23" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 120.899928][ T31] audit: type=1326 audit(120.810:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.1.23" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 120.923817][ T31] audit: type=1326 audit(120.820:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.1.23" exe="/syz-executor" sig=0 arch=40000028 syscall=171 compat=0 ip=0x133450 code=0x7ffc0000 [ 120.944950][ T31] audit: type=1326 audit(120.840:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.1.23" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 120.946783][ T31] audit: type=1326 audit(120.840:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.1.23" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 128.343403][ T31] audit: type=1400 audit(128.250:124): avc: denied { create } for pid=3939 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.046619][ T31] audit: type=1400 audit(143.950:125): avc: denied { write } for pid=3966 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 144.235969][ T31] audit: type=1400 audit(144.140:126): avc: denied { setopt } for pid=3969 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.251478][ T31] audit: type=1400 audit(144.160:127): avc: denied { create } for pid=3964 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.261950][ T31] audit: type=1400 audit(144.160:128): avc: denied { setopt } for pid=3964 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.269151][ T31] audit: type=1400 audit(144.170:129): avc: denied { write } for pid=3964 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.269846][ T31] audit: type=1400 audit(144.170:130): avc: denied { connect } for pid=3964 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.270366][ T31] audit: type=1400 audit(144.180:131): avc: denied { name_connect } for pid=3964 comm="syz.0.26" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 144.352987][ T3965] netlink: 'syz.0.26': attribute type 4 has an invalid length. [ 148.219648][ T3984] can0: slcan on pts0. [ 149.345598][ T3969] can0 (unregistered): slcan off pts0. [ 150.162180][ T3994] netlink: 'syz.0.33': attribute type 4 has an invalid length. [ 157.109309][ T31] audit: type=1400 audit(157.010:132): avc: denied { unmount } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 157.639902][ T46] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 157.882219][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.882751][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.883112][ T46] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 157.883421][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.886871][ T46] usb 1-1: config 0 descriptor?? [ 158.731237][ T46] petalynx 0003:18B1:0037.0006: collection stack underflow [ 158.732343][ T46] petalynx 0003:18B1:0037.0006: item 0 1 0 12 parsing failed [ 158.737665][ T46] petalynx 0003:18B1:0037.0006: parse failed [ 158.738074][ T46] petalynx 0003:18B1:0037.0006: probe with driver petalynx failed with error -22 [ 158.900175][ T1781] usb 1-1: USB disconnect, device number 4 [ 159.530470][ T1781] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 159.699110][ T1781] usb 1-1: Using ep0 maxpacket: 16 [ 159.710765][ T1781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.711435][ T1781] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.711989][ T1781] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 159.712425][ T1781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.720412][ T1781] usb 1-1: config 0 descriptor?? [ 160.247742][ T1781] kye 0003:0458:5015.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 160.260097][ T1781] kye 0003:0458:5015.0007: item fetching failed at offset 5/11 [ 160.261001][ T1781] kye 0003:0458:5015.0007: parse failed [ 160.261319][ T1781] kye 0003:0458:5015.0007: probe with driver kye failed with error -22 [ 160.979636][ T91] usb 1-1: USB disconnect, device number 5 [ 164.143146][ T4052] netlink: 'syz.0.38': attribute type 4 has an invalid length. [ 165.948373][ T31] audit: type=1400 audit(165.840:133): avc: denied { ioctl } for pid=4055 comm="syz.0.40" path="socket:[2268]" dev="sockfs" ino=2268 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.891688][ T31] audit: type=1400 audit(166.780:134): avc: denied { create } for pid=4059 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.914875][ T31] audit: type=1400 audit(166.820:135): avc: denied { connect } for pid=4059 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.505369][ T4066] pim6reg1: entered promiscuous mode [ 169.506229][ T4066] pim6reg1: entered allmulticast mode [ 172.461956][ T4064] netlink: 'syz.1.44': attribute type 4 has an invalid length. [ 173.202494][ T31] audit: type=1400 audit(173.110:136): avc: denied { create } for pid=4078 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 179.872616][ T4083] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 191.466968][ T31] audit: type=1400 audit(191.370:137): avc: denied { write } for pid=4087 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 191.468038][ T31] audit: type=1400 audit(191.370:138): avc: denied { nlmsg_write } for pid=4087 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 193.762868][ T4091] netlink: 'syz.1.52': attribute type 4 has an invalid length. [ 194.980789][ T31] audit: type=1400 audit(194.890:139): avc: denied { name_bind } for pid=4094 comm="syz.0.54" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 195.611423][ T31] audit: type=1400 audit(195.520:140): avc: denied { read } for pid=4096 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.012033][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.759558][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.235516][ T31] audit: type=1400 audit(203.140:141): avc: denied { bind } for pid=4106 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.243381][ T31] audit: type=1400 audit(203.140:142): avc: denied { name_bind } for pid=4106 comm="syz.1.59" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 203.244176][ T31] audit: type=1400 audit(203.140:143): avc: denied { node_bind } for pid=4106 comm="syz.1.59" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 203.252113][ T4107] netlink: 'syz.1.59': attribute type 4 has an invalid length. [ 207.799856][ T4122] usercopy: Kernel memory overwrite attempt detected to SLUB object 'task_struct' (offset 80, size 116)! [ 207.801718][ T4122] ------------[ cut here ]------------ [ 207.802109][ T4122] kernel BUG at mm/usercopy.c:102! [ 207.802425][ T4122] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP ARM [ 207.803072][ T4122] Modules linked in: [ 207.805149][ T4122] CPU: 1 UID: 0 PID: 4122 Comm: syz.0.63 Not tainted 6.12.0-rc7-syzkaller #0 [ 207.806201][ T4122] Hardware name: ARM-Versatile Express [ 207.807003][ T4122] PC is at usercopy_abort+0x98/0x9c [ 207.808622][ T4122] LR is at __wake_up_klogd.part.0+0x7c/0xac [ 207.809150][ T4122] pc : [<819a3a88>] lr : [<802bcae4>] psr: 60000013 [ 207.809503][ T4122] sp : dfa01d90 ip : dfa01cd0 fp : dfa01db4 [ 207.809804][ T4122] r10: 81a0056c r9 : 00000078 r8 : 84958c50 [ 207.810443][ T4122] r7 : dde9e060 r6 : 00000000 r5 : 00000074 r4 : 00000050 [ 207.810945][ T4122] r3 : 84959800 r2 : 00000000 r1 : 00000000 r0 : 00000066 [ 207.811407][ T4122] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 207.811748][ T4122] Control: 30c5387d Table: 850a5b80 DAC: 00000000 [ 207.812413][ T4122] Register r0 information: non-paged memory [ 207.813111][ T4122] Register r1 information: NULL pointer [ 207.813387][ T4122] Register r2 information: NULL pointer [ 207.813652][ T4122] Register r3 information: slab task_struct start 84959800 pointer offset 0 size 3072 [ 207.814766][ T4122] Register r4 information: non-paged memory [ 207.815044][ T4122] Register r5 information: non-paged memory [ 207.815308][ T4122] Register r6 information: NULL pointer [ 207.815590][ T4122] Register r7 information: non-slab/vmalloc memory [ 207.816128][ T4122] Register r8 information: slab task_struct start 84958c00 pointer offset 80 size 3072 [ 207.816667][ T4122] Register r9 information: non-paged memory [ 207.816944][ T4122] Register r10 information: non-slab/vmalloc memory [ 207.817246][ T4122] Register r11 information: 2-page vmalloc region starting at 0xdfa00000 allocated at kernel_clone+0xac/0x3e4 [ 207.817849][ T4122] Register r12 information: 2-page vmalloc region starting at 0xdfa00000 allocated at kernel_clone+0xac/0x3e4 [ 207.818442][ T4122] Process syz.0.63 (pid: 4122, stack limit = 0xdfa00000) [ 207.819196][ T4122] Stack: (0xdfa01d90 to 0xdfa02000) [ 207.819809][ T4122] 1d80: 8205c038 8202da2c 8204307c 00000050 [ 207.820428][ T4122] 1da0: 00000074 00000078 dfa01de4 dfa01db8 804cf9b8 819a39fc 00000074 dfa01dc8 [ 207.820781][ T4122] 1dc0: 802147c0 84958c50 00000074 00000000 84958cc4 dde9e060 dfa01e1c dfa01de8 [ 207.821110][ T4122] 1de0: 8050e86c 804cf8ec 00000074 20000084 dfa01e0c 84958c50 00000074 20000084 [ 207.821711][ T4122] 1e00: 00000074 81a005a4 00000078 81a0056c dfa01e4c dfa01e20 80209d94 8050e5f0 [ 207.822205][ T4122] 1e20: 8260ca7c 82f2e6c0 00000064 dfa01e2c dfa01e2c 80209d04 84958c00 20000084 [ 207.822584][ T4122] 1e40: dfa01ef4 dfa01e50 80252f10 80209d10 00000000 20000000 20000000 81a00580 [ 207.822902][ T4122] 1e60: 819c89bc 00000000 dfa01eb4 dfa01e78 8020d090 8020c014 824bc400 00000000 [ 207.823214][ T4122] 1e80: 8027ebe4 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 207.823583][ T4122] 1ea0: 00000000 84959800 dfa01edc dfa01eb8 8027d414 802ae61c 00000000 00000000 [ 207.823913][ T4122] 1ec0: dfa01eec e67fff1d 84958c00 20000080 00004202 00000002 00000000 20000080 [ 207.824304][ T4122] 1ee0: 84959800 0000001a dfa01f6c dfa01ef8 8020a1c4 80252c08 84958c00 84959484 [ 207.824911][ T4122] 1f00: dfa01f1c dfa01f10 819c8e68 8027b990 dfa01f6c dfa01f20 802805a4 819c8e44 [ 207.825234][ T4122] 1f20: dfa01f54 00000000 8027d414 60000013 81975950 8198cbd4 dfa01f54 e67fff1d [ 207.825562][ T4122] 1f40: 84958c00 00004205 84958c00 e67fff1d 00004205 84958c00 00000002 00000000 [ 207.825884][ T4122] 1f60: dfa01fa4 dfa01f70 802528b4 8020a120 80202cc0 e67fff1d dfa01fac 00000000 [ 207.826198][ T4122] 1f80: 00000000 002862f4 0000001a 8020029c 84959800 0000001a 00000000 dfa01fa8 [ 207.826523][ T4122] 1fa0: 80200060 80252688 00000000 00000000 00004205 00000052 00000002 20000080 [ 207.826839][ T4122] 1fc0: 00000000 00000000 002862f4 0000001a 00000000 00006364 003d0f00 76b0c0bc [ 207.827157][ T4122] 1fe0: 76b0bec0 76b0beb0 00018af0 00133450 60000010 00004205 00000000 00000000 [ 207.827613][ T4122] Call trace: [ 207.828035][ T4122] [<819a39f0>] (usercopy_abort) from [<804cf9b8>] (__check_heap_object+0xd8/0xf4) [ 207.829265][ T4122] [<804cf8e0>] (__check_heap_object) from [<8050e86c>] (__check_object_size+0x288/0x304) [ 207.829779][ T4122] r8:dde9e060 r7:84958cc4 r6:00000000 r5:00000074 r4:84958c50 [ 207.830070][ T4122] [<8050e5e4>] (__check_object_size) from [<80209d94>] (fpa_set+0x90/0x118) [ 207.830506][ T4122] r10:81a0056c r9:00000078 r8:81a005a4 r7:00000074 r6:20000084 r5:00000074 [ 207.830841][ T4122] r4:84958c50 [ 207.831029][ T4122] [<80209d04>] (fpa_set) from [<80252f10>] (ptrace_request+0x314/0xa78) [ 207.831412][ T4122] r6:20000084 r5:84958c00 r4:80209d04 [ 207.831636][ T4122] [<80252bfc>] (ptrace_request) from [<8020a1c4>] (arch_ptrace+0xb0/0x424) [ 207.832009][ T4122] r10:0000001a r9:84959800 r8:20000080 r7:00000000 r6:00000002 r5:00004202 [ 207.832418][ T4122] r4:20000080 [ 207.832621][ T4122] [<8020a114>] (arch_ptrace) from [<802528b4>] (sys_ptrace+0x238/0x4e0) [ 207.833196][ T4122] r7:00000000 r6:00000002 r5:84958c00 r4:00004205 [ 207.833502][ T4122] [<8025267c>] (sys_ptrace) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 207.833871][ T4122] Exception stack(0xdfa01fa8 to 0xdfa01ff0) [ 207.834153][ T4122] 1fa0: 00000000 00000000 00004205 00000052 00000002 20000080 [ 207.834509][ T4122] 1fc0: 00000000 00000000 002862f4 0000001a 00000000 00006364 003d0f00 76b0c0bc [ 207.834835][ T4122] 1fe0: 76b0bec0 76b0beb0 00018af0 00133450 [ 207.835082][ T4122] r10:0000001a r9:84959800 r8:8020029c r7:0000001a r6:002862f4 r5:00000000 [ 207.835393][ T4122] r4:00000000 [ 207.835951][ T4122] Code: e30c003c e3480205 e58dc000 ebfff273 (e7f001f2) [ 207.836705][ T4122] ---[ end trace 0000000000000000 ]--- [ 207.837614][ T4122] Kernel panic - not syncing: Fatal exception [ 207.841128][ T4122] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:47:45 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=df9b1ee0 R02=00000000 R03=7fffffff R04=849b6100 R05=60000113 R06=819c89bc R07=df9b1c60 R08=df9b1cbc R09=00000002 R10=849b6188 R11=df9b1bc4 R12=df9b1ba8 R13=df9b1b98 R14=8020c02c R15=8027d41c PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=82873433 R01=00000000 R02=00000000 R03=0000003c R04=82778798 R05=00000000 R06=60000093 R07=00000001 R08=00000001 R09=dfa01b30 R10=00000001 R11=dfa01b1c R12=00000020 R13=dfa01aa0 R14=32313454 R15=802bf7b0 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000