last executing test programs: 17.309536645s ago: executing program 1 (id=306): ustat(0x9, &(0x7f0000000000)) (async, rerun: 64) ustat(0x1, &(0x7f0000000040)) (async, rerun: 64) r0 = syz_io_uring_setup(0x84e, &(0x7f0000000080)={0x0, 0xbf60, 0x400, 0x3, 0x29d}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, 0x10010, r0, 0x6c67000) r1 = openat$dlm_plock(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f0000000200)={0xfffffffffffffffd, 0x8001}) read$alg(r1, &(0x7f0000000240)=""/127, 0x7f) (async) syz_usb_connect$midi(0x3, 0x51, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xa7, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x6, 0x50, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x62, [@midi_out_jack={0xf, 0x24, 0x3, 0x0, 0x4, 0x4, [{0x6c, 0x44}, {0x9f, 0x1}, {0xc, 0xd}, {0x76, 0xb}], 0x7}, @midi_out_jack={0x15, 0x24, 0x3, 0x1, 0x0, 0x7, [{0x5, 0x1}, {0x8, 0x7c}, {0xa3, 0x1}, {0x9, 0x80}, {0x9, 0x3}, {0x2, 0x1}, {0x5, 0x5}], 0x5}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x0, 0x1, [{0x6, 0x3}], 0x7}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0xff, 0x59, 0x3, 0x8, 0xe}, 0x49, &(0x7f0000000380)={0x5, 0xf, 0x49, 0x5, [@generic={0x10, 0x10, 0x1, "8d3fbf4f95ff1f04bea6465aff"}, @wireless={0xb, 0x10, 0x1, 0xe, 0x0, 0x0, 0x7, 0x1, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x74, 0xc0}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x4, 0x3, 0x7, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "cce2dffa19cda474c58e8b8ecf0d4622"}]}, 0x1, [{0x14, &(0x7f0000000400)=@string={0x14, 0x3, "dd68ac8b749e573f2ff49fd9be43cea2fd01"}}]}) syz_usb_connect$uac1(0x0, 0xe0, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x86a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0x5, 0x0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x3f}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x1, 0x2, [0x6, 0xa], 0xc}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x1, 0x6, "51a40f4a09"}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x1, "56b84563"}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x93, "b2eb"}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x7, "7493"}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0xdc, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0x2, 0xc, "9cd7c7"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1ff, 0x5, 0x88, 0xf8}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x80, 0x1, "8d34"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x8, 0x5, {0x7, 0x25, 0x1, 0x77340e789e3eed70, 0xd, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x40, 0x8, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x8000, 0x0, "408db9cdedf5b1155e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x5, 0x5, {0x7, 0x25, 0x1, 0x8, 0x9, 0x6}}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x310, 0xf, 0x3, 0x0, 0xff, 0x2}, 0x7e, &(0x7f00000005c0)={0x5, 0xf, 0x7e, 0x4, [@generic={0x4f, 0x10, 0x1, "691ac2d443ae47f01e162602573314789e562114165d0ca118627c506bb1109cbc09693270bfa0fa2f0475c683ade60754d2d1cd3c2bf22ca97768a135b43628062f03c3b1a18df0e54632fb"}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x2, 0x0, 0x6, [0x0, 0x101c0cf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x9, 0x7, 0x9, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x8, 0x7}]}, 0x4, [{0xd9, &(0x7f0000000640)=@string={0xd9, 0x3, "a7e859e3eec3c3033d127bf6812dd5a3ae06c48721820d082deaf6f4367fe847d53073ed397cb98954f809c9f73bdc67bd551eef20f56d7424040e02bde9181404524d540f82d3e325e8bd92f9e7087b870bb93eaee293bcbcf1e363595dc6b09e8488c5f95be7d3cb38b028d9248fc30b9afe98c106bed1a101e64b11f07a376709af0c64ccc3775617ca9ad62f3a9b5d996011c2e7b6574d8c071477ec20fcb40982d69bf623642d4ce99b509824ad9835c6d0a11639c46e45796f9183b07a021be10e0a6feea0f2820ffd3fd7e1a88be09f5ea6a04c"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3c67}}, {0xf, &(0x7f0000000780)=@string={0xf, 0x3, "eac6c3df15495d2e750d54131f"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x44d}}]}) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000008) (async) r2 = dup(r0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000840)) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000880)) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) (rerun: 32) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r3, 0xb10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000a00)=r2) timer_create(0x0, &(0x7f0000000c00)={0x0, 0x28, 0x0, @thr={&(0x7f0000000a40)="8b9ef473817f6fdb3d0868db1856f2d88e27ceeabc4fd00b6ec697a5954f1638f58602da8df92d8eb1e04616b805913a626dd534cea38db4c0e1f73cf4c34894cf1cd687e6fbaa00e3429db669f8568450d41f49356cecc7f29948263977b453204f90f8194afa8842f6c0b0d7825617c50696c7d2bc7cc60704e3d88dcc3864f5414bebade3f443acc61881ac48c5d7b0276ac3cf801acbe803202876d314ccca8810f8d1ce6361", &(0x7f0000000b00)="45c9f453bb9b0ce39bfa0ac6efe33001d0ba78b99d87b1c0e2fba0b8be98be877c3da3db10358aa099c7d8f4ccd5f51f3e2e896a425918fe2261448477d5ab831361308cefdd45a9b4018489b70c1a49247e0c311ef31ba6b046aac1d9759936818935b5895e7f269517d8afcc59778da08c88b18bb9a92f3d07ae2a94497aff494720986bf846fff6f17a807b3d8bf1b828bf43e63198090d22053373fa28eeee7453b018642f57b60462a60283f99c1e61aea931890cdb814de1c442971cf7149411ff"}}, &(0x7f0000000c40)=0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000c80)={0x0, 0x0}) (rerun: 64) timer_settime(r4, 0x0, &(0x7f0000000cc0)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000d00)) (async) read$FUSE(r2, &(0x7f0000000d40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r1, &(0x7f0000002d80)={0x20, 0x0, r7, {0x80000000, 0x0, 0x1, 0x8}}, 0x20) (async) ustat(0x8, &(0x7f0000002dc0)) (async) bind$inet6(r2, &(0x7f0000002e00)={0xa, 0x4e20, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x810, r2, 0xfad2d000) (async) pipe2$9p(&(0x7f0000002e40), 0x90000) (async, rerun: 64) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000002e80)={0x2, 0x5, 0x3ff}) (rerun: 64) splice(r2, &(0x7f0000002ec0)=0x100000000, r0, &(0x7f0000002f00)=0x4, 0x23, 0x7) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) openat$sysctl(0xffffff9c, &(0x7f0000002f40)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) (async) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000002f80)=""/33, 0x21, 0x73b, 0x7fff, 0xc, 0x6, 0x401}}, 0x11c) 13.04091491s ago: executing program 0 (id=312): recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r0) syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') readahead(r0, 0x3ff, 0xfffffff7) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) close_range(r1, r1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x406, r2) r4 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000804) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x800) timer_create(0x0, &(0x7f0000000100)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 6.767479213s ago: executing program 1 (id=313): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040), 0x284801, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x118, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x22}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x66}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6f8d97bc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x187}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "22ab874dff88a9966f8097143a47b0"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "89b822b4e74ad6"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "21d114f5e3f58895"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x118}, 0x1, 0x0, 0x0, 0x4040000}, 0x84) r5 = dup2(r0, r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, 0x0, 0x0) 6.037573882s ago: executing program 0 (id=314): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x63, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6e2002, 0x0) r3 = getpid() socketpair(0x1, 0x805, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) dup2(r6, r5) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1408000000060103004c21174017cf381509ae21adb7e0d484e8000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c810}, 0x10) write$fb(r4, 0x0, 0x0) r7 = inotify_init() close(r7) r8 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_pressure(r8, &(0x7f00000001c0)={'some'}, 0x4cdad095) setxattr$trusted_overlay_upper(&(0x7f0000001e40)='./file0\x00', &(0x7f0000001e80), 0x0, 0x0, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000200)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$P9_RWRITE(r10, &(0x7f0000000180)={0x2d, 0x77, 0x1, 0x6c35}, 0xb) sendmmsg$inet6(r7, 0x0, 0x0, 0xc004) fcntl$getownex(r7, 0x10, &(0x7f0000000000)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r11, r3, 0x2, r2, 0x0) 4.140991579s ago: executing program 1 (id=315): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r1, r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$9p(r1, &(0x7f00000003c0)="98", 0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup2(r5, r4) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) cachestat(r6, &(0x7f0000000040), &(0x7f0000000080), 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 2.469798051s ago: executing program 0 (id=316): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x1ff) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) dup2(r1, r2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x5450, 0x0) r3 = openat$selinux_checkreqprot(0xffffff9c, &(0x7f0000000100), 0x3c3240, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1081}, 0x800) timer_create(0x3, &(0x7f0000000200)={0x0, 0x1e, 0x2, @thr={&(0x7f0000000140)="8a84617a93710e79a91f27ed0dde0f7c1c3ec51df91bef5436ed07c8f24b940c23be30768f4c36476828be0cb3b38e498fb5019c7e0acce18492067ae0a02b786a17949abd313fb416ecd98d2249fe1230f36a6216a910b36c044ddd43969ebb7d9ebd8c16859903c91e20675a65835d743e136484d526", &(0x7f00000001c0)="63e6997d897dfa73630e4d60627bb531e7c98cf5262379d180f29e5738435dabd2401d9a9dc12ed14a7c5ac701de47ff"}}, &(0x7f0000000240)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f00000002c0)) 1.720494833s ago: executing program 0 (id=317): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r0, 0xffffffffffffffff, 0x2) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) bind$unix(r2, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (async) listen(r2, 0x0) (async) connect$unix(r1, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r2, r1, 0x0) (async) r3 = accept(r1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x5421, &(0x7f0000000000)) sendto$unix(r1, &(0x7f00000001c0)="3a8e258885e0317fe41daa0229d88d81c1f92ebd00c2fc94ecf8e8d2cfd768e3ffd1f6b31605e5f98e0e3d03f633ab00e9101051522ad6226df8347f617a2b422f81812a9637a3007931db79ae0782bff5e178bd76e4fd41aea6cfe81d8cc0c67cddc7f391d168cafd0b13312fd24532e68f3af0fc0bb998b83d561ca474bd789173254e0442fc80ae3cfcfcd1c7495dba3964ea3f3cd8fcba3449a34085f8fbd1f169efb1d5c04cf906ce45a938fcdf3db4", 0xb2, 0x20000080, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffffc, 0x6f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008840) 1.64980417s ago: executing program 1 (id=318): recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r0) syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') readahead(r0, 0x3ff, 0xfffffff7) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) close_range(r1, r1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000804) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x800) timer_create(0x0, &(0x7f0000000100)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 690.754825ms ago: executing program 0 (id=319): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0xffffcd63, 0x7ff, 0x0, 0x0, 0x3, 0x8000]}, &(0x7f0000000080)=0x50) (async) r0 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x800) getpeername$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x10) (async, rerun: 64) timer_create(0x5, &(0x7f0000000280)={0x0, 0x28, 0x4, @thr={&(0x7f00000001c0)="ab149803ed4713847c5b6248104eab0a91e986f36483fc76cec5a1e27298eee573e11d6394feecbd9e0c94788fcf93f3917f7825111784e691135d53cd8a0f6aaffa3820779d8946056a8f45678a556392aab77aad424887a3398ffa6250f877e34519cbe51d9bf4ce539634d24ef4dbb24f491c229709468892337bd675", &(0x7f0000000240)="7302887650007c1472829bc74734816fd5886fc6a15ec1a76c1e73fc971298890422b4485f617c70d392d7d2f9645779ee0da7"}}, &(0x7f00000002c0)=0x0) (rerun: 64) timer_settime(r1, 0x0, &(0x7f0000000300), &(0x7f0000000340)) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000380)) (async, rerun: 32) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4) (async, rerun: 32) r4 = openat$selinux_attr(0xffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r5 = dup2(r3, r4) close(r2) (async, rerun: 32) timer_delete(r1) (async, rerun: 32) timer_create(0x1, &(0x7f0000000440)={0x0, 0x23, 0x4}, &(0x7f0000000480)=0x0) timer_getoverrun(r6) fstat(r0, &(0x7f00000004c0)) (async) timer_settime(r1, 0x1, &(0x7f0000000540)={{0x77359400}, {0x77359400}}, &(0x7f0000000580)) (async) fstatfs(r2, &(0x7f00000005c0)=""/153) (async, rerun: 32) openat$sysctl(0xffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) (rerun: 32) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f00000006c0)={0x80}) (async) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r5, 0x4004e502, &(0x7f0000000780)=0x6) ioctl$TCFLSH(r5, 0x540b, 0x2) (async) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) timer_settime(r6, 0x0, &(0x7f0000000800)={{}, {r7, r8+10000000}}, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r5, 0xc0106441, &(0x7f0000000840)={0x0, 0x0, 0x80}) (async, rerun: 32) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000880)={0x101, 0x2}) (async) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f00000008c0)=0x3, 0x4) (async, rerun: 32) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes256, 0x1, @desc1}) (rerun: 32) r9 = openat$vcsu(0xffffff9c, &(0x7f0000000940), 0xc0500, 0x0) connect$unix(r9, &(0x7f0000000980)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_STATUS64(r9, 0x80804120, &(0x7f0000000a00)) (rerun: 32) 490.981426ms ago: executing program 1 (id=320): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x0, 0xfffffffa, 0x7fffffff, 0x20, 0xfffffff8, 0xfffffffa, 0x8, 0x8, 0x80ffa, 0xffffffff, 0x500, 0x8500, 0xfff, 0x1000004, 0x200c437, 0x9, 0xfb, 0x7ffffffd, 0x10002, 0x9ea, 0x0, 0xb, 0x10001, 0x8, 0x1, 0x0, 0x2, 0x8, 0x40000008, 0xff, 0x4007ffd]}) 270.47299ms ago: executing program 1 (id=321): r0 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup2(r2, r1) r4 = accept$packet(r3, 0x0, 0x0) readv(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_clone(0x801c0480, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180)="6c86609957887c7571213a12bf8fd19295b85a9883aa1acda155873749812a42bc45e0a9aa96addd6c037b2a914521404d8304589b754748a4f9a8df20f07145aeb6171d4cbe70c35ba399c6e48ecdd566798b220b12") 0s ago: executing program 0 (id=322): r0 = openat$mice(0xffffff9c, &(0x7f0000000040), 0xa2200) close(r0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(0xffffffffffffffff, 0xaf01, 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000810) kernel console output (not intermixed with test programs): [ 54.347292][ T28] audit: type=1400 audit(54.090:88): avc: denied { write } for pid=3076 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.859617][ T28] audit: type=1400 audit(55.600:89): avc: denied { write } for pid=3080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.451599][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 59.452276][ T28] audit: type=1400 audit(59.210:91): avc: denied { read write } for pid=3088 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.452732][ T28] audit: type=1400 audit(59.210:92): avc: denied { open } for pid=3088 comm="scp" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:18369' (ED25519) to the list of known hosts. [ 77.815915][ T28] audit: type=1400 audit(77.570:93): avc: denied { name_bind } for pid=3091 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 78.948527][ T28] audit: type=1400 audit(78.710:94): avc: denied { execute } for pid=3092 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 78.966914][ T28] audit: type=1400 audit(78.720:95): avc: denied { execute_no_trans } for pid=3092 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 82.842929][ T28] audit: type=1400 audit(82.600:96): avc: denied { mounton } for pid=3092 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 82.847645][ T28] audit: type=1400 audit(82.610:97): avc: denied { mount } for pid=3092 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 82.861683][ T3092] cgroup: Unknown subsys name 'net' [ 82.879228][ T28] audit: type=1400 audit(82.640:98): avc: denied { unmount } for pid=3092 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 83.024065][ T3092] cgroup: Unknown subsys name 'cpuset' [ 83.030625][ T3092] cgroup: Unknown subsys name 'hugetlb' [ 83.031532][ T3092] cgroup: Unknown subsys name 'rlimit' [ 83.314038][ T28] audit: type=1400 audit(83.070:99): avc: denied { setattr } for pid=3092 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.319536][ T28] audit: type=1400 audit(83.080:100): avc: denied { mounton } for pid=3092 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 83.319707][ T28] audit: type=1400 audit(83.080:101): avc: denied { mount } for pid=3092 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 83.560644][ T3094] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 83.565013][ T28] audit: type=1400 audit(83.320:102): avc: denied { relabelto } for pid=3094 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 83.570848][ T28] audit: type=1400 audit(83.330:103): avc: denied { write } for pid=3094 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 83.604868][ T28] audit: type=1400 audit(83.360:104): avc: denied { read } for pid=3092 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 83.606356][ T28] audit: type=1400 audit(83.360:105): avc: denied { open } for pid=3092 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 91.328662][ T3092] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.800876][ T28] audit: type=1400 audit(93.560:106): avc: denied { execmem } for pid=3095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 93.854873][ T28] audit: type=1400 audit(93.610:107): avc: denied { read } for pid=3097 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.857393][ T28] audit: type=1400 audit(93.610:108): avc: denied { open } for pid=3097 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.872374][ T28] audit: type=1400 audit(93.630:109): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 93.905023][ T28] audit: type=1400 audit(93.660:110): avc: denied { module_request } for pid=3098 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 93.905837][ T28] audit: type=1400 audit(93.660:111): avc: denied { module_request } for pid=3097 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 93.991287][ T28] audit: type=1400 audit(93.750:112): avc: denied { sys_module } for pid=3098 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 94.787906][ T28] audit: type=1400 audit(94.550:113): avc: denied { ioctl } for pid=3098 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.969779][ T3098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.978914][ T3098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.110229][ T3097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.124031][ T3097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.855977][ T3098] hsr_slave_0: entered promiscuous mode [ 96.861364][ T3098] hsr_slave_1: entered promiscuous mode [ 97.201205][ T3097] hsr_slave_0: entered promiscuous mode [ 97.208489][ T3097] hsr_slave_1: entered promiscuous mode [ 97.210093][ T3097] debugfs: 'hsr0' already exists in 'hsr' [ 97.212335][ T3097] Cannot create hsr debugfs directory [ 97.349076][ T28] audit: type=1400 audit(97.110:114): avc: denied { create } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.359411][ T28] audit: type=1400 audit(97.120:115): avc: denied { write } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.384489][ T3098] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.397529][ T3098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.406753][ T3098] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.415113][ T3098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.428862][ T3098] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.435238][ T3098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.451756][ T3098] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.460051][ T3098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.765259][ T3097] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.772775][ T3097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.777020][ T3097] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.787420][ T3097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.790511][ T3097] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.799229][ T3097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.802283][ T3097] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.809290][ T3097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.409589][ T3098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.665173][ T3097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.617864][ T3098] veth0_vlan: entered promiscuous mode [ 101.640025][ T3098] veth1_vlan: entered promiscuous mode [ 101.717533][ T3098] veth0_macvtap: entered promiscuous mode [ 101.734211][ T3098] veth1_macvtap: entered promiscuous mode [ 101.844245][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.857013][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.857541][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.861773][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.029767][ T3097] veth0_vlan: entered promiscuous mode [ 102.063995][ T3097] veth1_vlan: entered promiscuous mode [ 102.074769][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 102.075128][ T28] audit: type=1400 audit(101.830:117): avc: denied { mount } for pid=3098 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.100036][ T28] audit: type=1400 audit(101.860:118): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/syzkaller.J8n0bQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 102.104430][ T28] audit: type=1400 audit(101.860:119): avc: denied { mount } for pid=3098 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 102.142243][ T28] audit: type=1400 audit(101.900:120): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/syzkaller.J8n0bQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 102.149337][ T28] audit: type=1400 audit(101.910:121): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/syzkaller.J8n0bQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 102.177074][ T28] audit: type=1400 audit(101.930:122): avc: denied { unmount } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 102.183954][ T28] audit: type=1400 audit(101.940:123): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 102.196256][ T28] audit: type=1400 audit(101.950:124): avc: denied { mount } for pid=3098 comm="syz-executor" name="/" dev="gadgetfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 102.203208][ T28] audit: type=1400 audit(101.960:125): avc: denied { mount } for pid=3098 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 102.204848][ T28] audit: type=1400 audit(101.960:126): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 102.219906][ T3097] veth0_macvtap: entered promiscuous mode [ 102.235967][ T3097] veth1_macvtap: entered promiscuous mode [ 102.283346][ T3098] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.342918][ T1377] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.345237][ T1377] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.368173][ T1377] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.369691][ T1377] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.927363][ T3052] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 105.129946][ T3052] usb 2-1: not running at top speed; connect to a high speed hub [ 105.158232][ T3052] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 105.158632][ T3052] usb 2-1: config 1 interface 0 has no altsetting 0 [ 105.262938][ T3052] usb 2-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 105.263148][ T3052] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.263310][ T3052] usb 2-1: Product: syz [ 105.263335][ T3052] usb 2-1: Manufacturer: syz [ 105.263348][ T3052] usb 2-1: SerialNumber: syz [ 105.305770][ T3717] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 105.552554][ T3052] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input3 [ 105.567320][ T3052] usb 2-1: USB disconnect, device number 2 [ 107.096867][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 107.097913][ T28] audit: type=1400 audit(106.850:140): avc: denied { setopt } for pid=3754 comm="syz.0.15" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.112164][ T28] audit: type=1400 audit(106.870:141): avc: denied { connect } for pid=3754 comm="syz.0.15" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.123296][ T28] audit: type=1400 audit(106.880:142): avc: denied { write } for pid=3754 comm="syz.0.15" laddr=fe80::12 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.146843][ T28] audit: type=1400 audit(106.910:143): avc: denied { perfmon } for pid=3756 comm="syz.1.16" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.154108][ T28] audit: type=1400 audit(106.910:144): avc: denied { bpf } for pid=3756 comm="syz.1.16" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.267637][ T28] audit: type=1400 audit(107.020:145): avc: denied { prog_run } for pid=3756 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.956905][ T28] audit: type=1400 audit(108.720:146): avc: denied { create } for pid=3768 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.041296][ T28] audit: type=1400 audit(108.800:147): avc: denied { write } for pid=3767 comm="syz.0.22" name="netstat" dev="proc" ino=4026532716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 109.238459][ T3703] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.396541][ T3703] usb 2-1: Using ep0 maxpacket: 8 [ 109.448569][ T28] audit: type=1400 audit(109.210:148): avc: denied { write } for pid=3774 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 109.460940][ T3703] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.461466][ T3703] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.462797][ T3703] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.463127][ T3703] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 109.463424][ T3703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.478349][ T3703] usb 2-1: config 0 descriptor?? [ 109.856191][ T3703] usbhid 2-1:0.0: can't add hid device: -71 [ 109.857003][ T3703] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 109.861864][ T3703] usb 2-1: USB disconnect, device number 3 [ 110.288544][ T28] audit: type=1400 audit(110.050:149): avc: denied { create } for pid=3790 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.382224][ T3791] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 110.382224][ T3791] Please contact the netfilter-devel mailing list or update your nftables rules. [ 111.709638][ T3802] fuse: Unknown parameter 'group_id00000000000000000000' [ 114.427712][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 114.428211][ T28] audit: type=1400 audit(114.190:151): avc: denied { create } for pid=3810 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.496044][ T28] audit: type=1400 audit(114.250:152): avc: denied { setopt } for pid=3810 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.152056][ T3817] fuse: Unknown parameter 'group_id00000000000000000000' [ 115.636628][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.803372][ T9] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 115.804081][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.845142][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.846443][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 115.847375][ T9] usb 2-1: Product: syz [ 115.848008][ T9] usb 2-1: Manufacturer: syz [ 115.848663][ T9] usb 2-1: SerialNumber: syz [ 115.852820][ T9] usb 2-1: config 0 descriptor?? [ 115.871384][ T3819] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.888695][ T9] usb 2-1: selecting invalid altsetting 0 ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory audio: Could not create a backend for voice `lm4549.out' [ 116.348405][ T9] usb 2-1: USB disconnect, device number 4 [ 117.417440][ T1552] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.631314][ T1552] usb 2-1: Using ep0 maxpacket: 8 [ 117.731605][ T1552] usb 2-1: config 7 has an invalid interface number: 172 but max is 0 [ 117.732490][ T1552] usb 2-1: config 7 has no interface number 0 [ 117.732881][ T1552] usb 2-1: config 7 interface 172 has no altsetting 0 [ 117.752159][ T1552] usb 2-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=f5.e7 [ 117.752559][ T1552] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.757517][ T1552] usb 2-1: Product: syz [ 117.758032][ T1552] usb 2-1: Manufacturer: syz [ 117.758235][ T1552] usb 2-1: SerialNumber: syz [ 118.011098][ T1552] usb 2-1: USB disconnect, device number 5 [ 118.176341][ T91] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.346484][ T91] usb 1-1: Using ep0 maxpacket: 8 [ 118.374633][ T91] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 118.377040][ T91] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.379665][ T91] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 118.380849][ T91] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 118.431429][ T91] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 118.432814][ T91] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.436514][ T91] usb 1-1: Product: syz [ 118.438520][ T91] usb 1-1: Manufacturer: syz [ 118.440983][ T91] usb 1-1: SerialNumber: syz [ 118.449211][ T91] usb 1-1: config 0 descriptor?? [ 118.469138][ T3858] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 118.562916][ T28] audit: type=1400 audit(118.320:153): avc: denied { ioctl } for pid=3873 comm="syz.1.42" path="socket:[2597]" dev="sockfs" ino=2597 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.816976][ T91] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 118.866771][ T91] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input4 [ 119.131448][ C0] powermate: config urb returned -71 [ 119.132811][ C0] powermate: config urb returned -71 [ 119.133341][ C0] powermate: config urb returned -71 [ 119.133875][ C0] powermate: config urb returned -71 [ 119.151884][ T43] usb 1-1: USB disconnect, device number 2 [ 119.152605][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 119.330243][ T28] audit: type=1400 audit(119.090:154): avc: denied { append } for pid=3894 comm="syz.0.43" name="card1" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.458405][ T3897] fuse: Bad value for 'user_id' [ 119.458862][ T3897] fuse: Bad value for 'user_id' [ 119.915887][ T91] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 120.089987][ T91] usb 1-1: config index 0 descriptor too short (expected 63186, got 210) [ 120.090439][ T91] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 120.092591][ T91] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.093090][ T91] usb 1-1: config 0 has no interface number 0 [ 120.093244][ T91] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 120.093474][ T91] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 120.093580][ T91] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 120.093629][ T91] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.121493][ T91] usb 1-1: config 0 descriptor?? [ 120.404729][ T91] usb 1-1: USB disconnect, device number 3 [ 120.662944][ T3917] Zero length message leads to an empty skb [ 120.996699][ T3923] block nbd0: server does not support multiple connections per device. [ 121.000961][ T3923] block nbd0: shutting down sockets [ 121.356178][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.506687][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 121.540341][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.540867][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 121.540933][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.546673][ T43] usb 1-1: config 0 descriptor?? [ 121.996484][ T43] logitech 0003:046D:C24F.0001: unknown main item tag 0x4 [ 122.006522][ T43] logitech 0003:046D:C24F.0001: unknown main item tag 0x4 [ 122.029529][ T43] logitech 0003:046D:C24F.0001: item fetching failed at offset 42/44 [ 122.030408][ T43] logitech 0003:046D:C24F.0001: parse failed [ 122.030775][ T43] logitech 0003:046D:C24F.0001: probe with driver logitech failed with error -22 [ 122.161396][ T3937] fuse: Bad value for 'user_id' [ 122.161808][ T3937] fuse: Bad value for 'user_id' [ 122.187798][ T1552] usb 1-1: USB disconnect, device number 4 [ 122.716060][ T1552] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.902975][ T1552] usb 1-1: config 255 has an invalid interface number: 97 but max is 0 [ 122.903378][ T1552] usb 1-1: config 255 has no interface number 0 [ 122.905165][ T1552] usb 1-1: config 255 interface 97 has no altsetting 0 [ 122.932736][ T1552] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 122.933006][ T1552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.933057][ T1552] usb 1-1: Product: syz [ 122.933082][ T1552] usb 1-1: Manufacturer: syz [ 122.933533][ T1552] usb 1-1: SerialNumber: syz [ 123.179979][ T1552] rndis_host 1-1:255.97: rndis: master #0/00000000 slave #1/00000000 [ 123.207733][ T1552] usb 1-1: USB disconnect, device number 5 [ 125.166278][ T1552] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.325698][ T1552] usb 2-1: Using ep0 maxpacket: 8 [ 125.335177][ T1552] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 125.335660][ T1552] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.335853][ T1552] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 125.336058][ T1552] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.336211][ T1552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.359660][ T1552] usbtmc 2-1:16.0: bulk endpoints not found [ 125.561021][ T1552] usb 2-1: USB disconnect, device number 6 [ 125.724319][ T3989] fuse: Bad value for 'user_id' [ 125.724676][ T3989] fuse: Bad value for 'user_id' [ 127.047254][ T28] audit: type=1400 audit(126.800:155): avc: denied { create } for pid=3994 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.065196][ T28] audit: type=1400 audit(126.800:156): avc: denied { write } for pid=3994 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.626212][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.786350][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 127.803437][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 127.803785][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 127.804289][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.804363][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.804475][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.804535][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.053135][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 128.053517][ T9] usbtmc 1-1:16.0: can't read capabilities [ 128.268673][ T9] usb 1-1: USB disconnect, device number 6 [ 128.395203][ T4015] fuse: Bad value for 'user_id' [ 128.406385][ T4015] fuse: Bad value for 'user_id' [ 131.546419][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.739549][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.779837][ T9] usb 2-1: config 2 has an invalid interface number: 239 but max is 0 [ 131.780201][ T9] usb 2-1: config 2 has no interface number 0 [ 131.780661][ T9] usb 2-1: config 2 interface 239 has no altsetting 0 [ 131.867063][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=5e.ef [ 131.867422][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.870453][ T9] usb 2-1: Product: syz [ 131.870526][ T9] usb 2-1: Manufacturer: syz [ 131.870611][ T9] usb 2-1: SerialNumber: syz [ 132.147639][ T9] usbtest 2-1:2.239: couldn't get endpoints, -22 [ 132.148170][ T9] usbtest 2-1:2.239: probe with driver usbtest failed with error -22 [ 132.351423][ T9] usb 2-1: USB disconnect, device number 7 [ 132.489122][ T4046] fuse: Bad value for 'user_id' [ 132.492426][ T4046] fuse: Bad value for 'user_id' [ 135.677365][ T4052] fuse: Bad value for 'fd' [ 138.738273][ T4062] fuse: Bad value for 'fd' [ 141.468175][ T4069] fuse: Bad value for 'fd' [ 145.393149][ T4088] fuse: Bad value for 'fd' [ 148.736642][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 148.930512][ T23] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 148.930852][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.931136][ T23] usb 2-1: Product: syz [ 148.931185][ T23] usb 2-1: Manufacturer: syz [ 148.931212][ T23] usb 2-1: SerialNumber: syz [ 149.248640][ T23] rtl8150 2-1:1.0: couldn't reset the device [ 149.249245][ T23] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 149.269093][ T23] usb 2-1: USB disconnect, device number 8 [ 149.346674][ T4076] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 149.351541][ T28] audit: type=1400 audit(149.110:157): avc: denied { sqpoll } for pid=4103 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 149.380809][ T28] audit: type=1400 audit(149.140:158): avc: denied { create } for pid=4103 comm="syz.1.75" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 149.381172][ T28] audit: type=1400 audit(149.140:159): avc: denied { map } for pid=4103 comm="syz.1.75" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 149.381255][ T28] audit: type=1400 audit(149.140:160): avc: denied { read write } for pid=4103 comm="syz.1.75" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 149.662768][ T4117] fuse: Bad value for 'fd' [ 149.714327][ T28] audit: type=1400 audit(149.470:161): avc: denied { create } for pid=4118 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.730142][ T28] audit: type=1400 audit(149.490:162): avc: denied { bind } for pid=4118 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.739324][ T28] audit: type=1400 audit(149.500:163): avc: denied { accept } for pid=4118 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.758300][ T28] audit: type=1400 audit(149.520:164): avc: denied { read } for pid=4118 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.959649][ T4121] fuse: Bad value for 'fd' [ 152.809365][ T28] audit: type=1400 audit(152.570:165): avc: denied { create } for pid=4132 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.859038][ T28] audit: type=1400 audit(152.620:166): avc: denied { ioctl } for pid=4132 comm="syz.1.81" path="socket:[3291]" dev="sockfs" ino=3291 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.927772][ T4130] SELinux: Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped). [ 154.217357][ T4141] fuse: Bad value for 'fd' [ 157.423664][ T4149] fuse: Bad value for 'fd' [ 157.540080][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 157.540488][ T28] audit: type=1400 audit(157.300:174): avc: denied { read write } for pid=4148 comm="syz.0.86" name="vhost-net" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:logrotate_exec_t:s0" [ 157.546037][ T28] audit: type=1400 audit(157.300:175): avc: denied { open } for pid=4148 comm="syz.0.86" path="/dev/vhost-net" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:logrotate_exec_t:s0" [ 159.262685][ T4160] fuse: Bad value for 'fd' [ 163.567251][ T4173] fuse: Bad value for 'fd' [ 164.703515][ T4179] fuse: Bad value for 'fd' [ 168.778174][ T4192] fuse: Bad value for 'fd' [ 170.337148][ T4196] fuse: Invalid rootmode [ 173.267649][ T4209] fuse: Invalid rootmode [ 176.896107][ T28] audit: type=1400 audit(176.650:176): avc: denied { mounton } for pid=4220 comm="syz.0.111" path="/54/file0" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 177.102855][ T28] audit: type=1400 audit(176.860:177): avc: denied { unmount } for pid=3097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 177.508858][ T4228] fuse: Invalid rootmode [ 181.802606][ T4243] fuse: Invalid rootmode [ 187.097075][ T4260] fuse: Bad value for 'rootmode' [ 191.479363][ T28] audit: type=1400 audit(191.240:178): avc: denied { write } for pid=4277 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.776802][ T28] audit: type=1400 audit(192.540:179): avc: denied { read } for pid=4279 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.831571][ T4284] fuse: Bad value for 'rootmode' [ 198.873638][ T4308] fuse: Bad value for 'rootmode' [ 199.555094][ T4315] FAULT_INJECTION: forcing a failure. [ 199.555094][ T4315] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 199.568234][ T4315] CPU: 1 UID: 0 PID: 4315 Comm: syz.1.140 Not tainted syzkaller #0 PREEMPT [ 199.568521][ T4315] Hardware name: ARM-Versatile Express [ 199.568766][ T4315] Call trace: [ 199.569045][ T4315] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 199.570008][ T4315] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 199.570099][ T4315] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 199.570173][ T4315] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 199.570243][ T4315] r7:831c7c00 r6:00000000 r5:83bbe400 r4:82b4f348 [ 199.570266][ T4315] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 199.570324][ T4315] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 199.570388][ T4315] r8:81d3d5cc r7:831c7c00 r6:c06864a1 r5:fffffff3 r4:83bbec28 [ 199.570408][ T4315] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 199.570458][ T4315] [<809d8888>] (should_fail_usercopy) from [<80b405ac>] (drm_ioctl+0x26c/0x580) [ 199.570514][ T4315] [<80b40340>] (drm_ioctl) from [<805a1cfc>] (sys_ioctl+0x244/0xb5c) [ 199.570633][ T4315] r10:83bbe400 r9:00000003 r8:83343b00 r7:200005c0 r6:c06864a1 r5:83343b01 [ 199.570664][ T4315] r4:00000000 [ 199.570679][ T4315] [<805a1ab8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 199.570801][ T4315] Exception stack(0xea709fa8 to 0xea709ff0) [ 199.570981][ T4315] 9fa0: 00000000 00000000 00000003 c06864a1 200005c0 00000000 [ 199.571034][ T4315] 9fc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f960dc [ 199.571065][ T4315] 9fe0: 76f95e88 76f95e78 00018ebc 00130810 [ 199.571143][ T4315] r10:00000036 r9:83bbe400 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 199.571169][ T4315] r4:00000000 [ 202.389103][ T28] audit: type=1400 audit(202.150:180): avc: denied { accept } for pid=4335 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 202.412394][ T28] audit: type=1400 audit(202.170:181): avc: denied { create } for pid=4335 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 202.427332][ T28] audit: type=1400 audit(202.190:182): avc: denied { ioctl } for pid=4335 comm="syz.0.148" path="socket:[4098]" dev="sockfs" ino=4098 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 203.240031][ T4341] fuse: Unknown parameter 'use00000000000000000000' [ 205.948658][ T28] audit: type=1400 audit(205.710:183): avc: denied { setattr } for pid=4356 comm="syz.0.156" name="" dev="pipefs" ino=4149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 206.746158][ T28] audit: type=1400 audit(206.500:184): avc: denied { write } for pid=4361 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 206.770232][ T28] audit: type=1400 audit(206.530:185): avc: denied { ioctl } for pid=4361 comm="syz.1.158" path="socket:[3556]" dev="sockfs" ino=3556 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.335143][ T4366] fuse: Unknown parameter 'use00000000000000000000' [ 210.904829][ T4382] fuse: Unknown parameter 'use00000000000000000000' [ 213.656542][ T28] audit: type=1400 audit(213.420:186): avc: denied { setopt } for pid=4389 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 213.674944][ T28] audit: type=1400 audit(213.430:187): avc: denied { connect } for pid=4389 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.211380][ T4393] FAULT_INJECTION: forcing a failure. [ 214.211380][ T4393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.212829][ T4393] CPU: 1 UID: 0 PID: 4393 Comm: syz.0.168 Not tainted syzkaller #0 PREEMPT [ 214.212930][ T4393] Hardware name: ARM-Versatile Express [ 214.212957][ T4393] Call trace: [ 214.212997][ T4393] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 214.213091][ T4393] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 214.213107][ T4393] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 214.213154][ T4393] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 214.213208][ T4393] r7:85b487c0 r6:00000000 r5:8406f080 r4:82b4f348 [ 214.213223][ T4393] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 214.213267][ T4393] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 214.213316][ T4393] r8:85f5a000 r7:85b487c0 r6:eaa4dde4 r5:200000c0 r4:00000004 [ 214.213330][ T4393] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 214.213368][ T4393] [<809d8888>] (should_fail_usercopy) from [<817faf88>] (copy_from_sockptr_offset+0x60/0x128) [ 214.213412][ T4393] [<817faf28>] (copy_from_sockptr_offset) from [<81802544>] (do_tcp_setsockopt+0x1e4/0xbbc) [ 214.213462][ T4393] r7:85b487c0 r6:8406f080 r5:00000004 r4:00000014 [ 214.213476][ T4393] [<81802364>] (do_tcp_setsockopt) from [<81802f6c>] (tcp_setsockopt+0x50/0x58) [ 214.213539][ T4393] r10:00000126 r9:815ef528 r8:00000004 r7:85da4a68 r6:85da4540 r5:00000006 [ 214.213560][ T4393] r4:81802f1c [ 214.213573][ T4393] [<81802f20>] (tcp_setsockopt) from [<815ef560>] (sock_common_setsockopt+0x38/0x40) [ 214.213625][ T4393] r4:81802f1c [ 214.213646][ T4393] [<815ef52c>] (sock_common_setsockopt) from [<81a0ada0>] (smc_setsockopt+0xac/0x358) [ 214.213694][ T4393] r4:00000014 [ 214.213707][ T4393] [<81a0acf8>] (smc_setsockopt) from [<815ea960>] (do_sock_setsockopt+0x70/0xc8) [ 214.213767][ T4393] r9:8406f080 r8:00000004 r7:8551ea40 r6:00000014 r5:00000006 r4:81a0acf4 [ 214.213781][ T4393] [<815ea8f0>] (do_sock_setsockopt) from [<815ee814>] (__sys_setsockopt+0x7c/0xc4) [ 214.213838][ T4393] r8:00000000 r7:853c1b80 r6:853c1b81 r5:00000014 r4:00000006 [ 214.213852][ T4393] [<815ee798>] (__sys_setsockopt) from [<815ee878>] (sys_setsockopt+0x1c/0x24) [ 214.213904][ T4393] r8:8020029c r7:00000126 r6:0012f214 r5:00000000 r4:00000004 [ 214.213918][ T4393] [<815ee85c>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 214.213957][ T4393] Exception stack(0xeaa4dfa8 to 0xeaa4dff0) [ 214.213992][ T4393] dfa0: 00000004 00000000 00000003 00000006 00000014 200000c0 [ 214.214022][ T4393] dfc0: 00000004 00000000 0012f214 00000126 00346378 00000000 003d0f00 76f2a0dc [ 214.214046][ T4393] dfe0: 76f29e88 76f29e78 00018ebc 00130810 [ 216.342173][ T4402] fuse: Unknown parameter 'user_i00000000000000000000' [ 217.627541][ T28] audit: type=1400 audit(217.390:188): avc: denied { create } for pid=4408 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 217.632623][ T28] audit: type=1400 audit(217.390:189): avc: denied { ioctl } for pid=4408 comm="syz.1.174" path="socket:[3636]" dev="sockfs" ino=3636 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 217.636559][ T28] audit: type=1400 audit(217.390:190): avc: denied { read } for pid=4408 comm="syz.1.174" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.646598][ T28] audit: type=1400 audit(217.410:191): avc: denied { open } for pid=4408 comm="syz.1.174" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.649969][ T28] audit: type=1400 audit(217.410:192): avc: denied { ioctl } for pid=4408 comm="syz.1.174" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 218.482066][ T4412] fuse: Unknown parameter 'gu@טw*0!uj' [ 219.435795][ T28] audit: type=1400 audit(219.190:193): avc: denied { create } for pid=4420 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 224.547824][ T4449] FAULT_INJECTION: forcing a failure. [ 224.547824][ T4449] name failslab, interval 1, probability 0, space 0, times 0 [ 224.549490][ T4449] CPU: 1 UID: 0 PID: 4449 Comm: syz.0.190 Not tainted syzkaller #0 PREEMPT [ 224.549604][ T4449] Hardware name: ARM-Versatile Express [ 224.549665][ T4449] Call trace: [ 224.549717][ T4449] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 224.549854][ T4449] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 224.549875][ T4449] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 224.549933][ T4449] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 224.550002][ T4449] r7:00000cc0 r6:00000000 r5:83bbe400 r4:82b18108 [ 224.550022][ T4449] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 224.550079][ T4449] [<809d864c>] (should_fail_ex) from [<80554524>] (should_failslab+0x6c/0x94) [ 224.550151][ T4449] r8:00000001 r7:00000cc0 r6:00000000 r5:00000000 r4:830c4a80 [ 224.550193][ T4449] [<805544b8>] (should_failslab) from [<805317fc>] (kmem_cache_alloc_noprof+0x54/0x3b8) [ 224.550253][ T4449] [<805317a8>] (kmem_cache_alloc_noprof) from [<80595b78>] (do_getname+0x2c/0x14c) [ 224.550327][ T4449] r10:00000015 r9:83bbe400 r8:00000001 r7:00000000 r6:20000240 r5:825268b8 [ 224.550348][ T4449] r4:00000000 [ 224.550365][ T4449] [<80595b4c>] (do_getname) from [<8059bd84>] (user_path_at+0x30/0x6c) [ 224.550433][ T4449] r10:00000015 r9:83bbe400 r8:00000000 r7:eacc5f6c r6:ffffff9c r5:00000001 [ 224.550458][ T4449] r4:00000000 r3:eacc5f6c [ 224.550475][ T4449] [<8059bd54>] (user_path_at) from [<805bc958>] (sys_mount+0x1bc/0x260) [ 224.550543][ T4449] r7:86116340 r6:00000000 r5:00000000 r4:00000000 [ 224.550562][ T4449] [<805bc79c>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 224.550619][ T4449] Exception stack(0xeacc5fa8 to 0xeacc5ff0) [ 224.550662][ T4449] 5fa0: 00000000 00000000 200001c0 20000240 00000000 00200020 [ 224.550729][ T4449] 5fc0: 00000000 00000000 0012f214 00000015 003462d8 00000000 00000001 76f4b0dc [ 224.550764][ T4449] 5fe0: 76f4ae88 76f4ae78 00018ebc 00130810 [ 224.550805][ T4449] r10:00000015 r9:83bbe400 r8:8020029c r7:00000015 r6:0012f214 r5:00000000 [ 224.550827][ T4449] r4:00000000 [ 227.047274][ T4468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=4468 comm=syz.0.196 [ 228.770602][ T28] audit: type=1400 audit(228.530:194): avc: denied { connect } for pid=4485 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 231.805827][ T28] audit: type=1400 audit(231.560:195): avc: denied { setopt } for pid=4505 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.706425][ T4490] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 235.276974][ T4517] fuse: Unknown parameter 'user_id00000000000000000000' [ 235.431245][ T28] audit: type=1400 audit(235.190:196): avc: denied { create } for pid=4518 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 235.667398][ T28] audit: type=1400 audit(235.420:197): avc: denied { ioctl } for pid=4518 comm="syz.1.213" path="socket:[3821]" dev="sockfs" ino=3821 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.804884][ T28] audit: type=1400 audit(238.560:198): avc: denied { write } for pid=4525 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 238.963690][ T4526] SELinux: Context system_u:object_r:dhcpc_var_run_t:s0 is not valid (left unmapped). [ 238.969994][ T28] audit: type=1400 audit(238.730:199): avc: denied { relabelto } for pid=4525 comm="syz.0.215" name="renderD128" dev="devtmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcpc_var_run_t:s0" [ 238.972014][ T28] audit: type=1400 audit(238.730:200): avc: denied { associate } for pid=4525 comm="syz.0.215" name="renderD128" dev="devtmpfs" ino=613 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpc_var_run_t:s0" [ 239.418759][ T4534] fuse: Unknown parameter 'user_id00000000000000000000' [ 240.392576][ T28] audit: type=1400 audit(240.150:201): avc: denied { read write } for pid=4540 comm="syz.1.222" name="renderD128" dev="devtmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcpc_var_run_t:s0" [ 240.394590][ T28] audit: type=1400 audit(240.150:202): avc: denied { open } for pid=4540 comm="syz.1.222" path="/dev/dri/renderD128" dev="devtmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcpc_var_run_t:s0" [ 240.408572][ T28] audit: type=1400 audit(240.170:203): avc: denied { ioctl } for pid=4540 comm="syz.1.222" path="/dev/dri/renderD128" dev="devtmpfs" ino=613 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcpc_var_run_t:s0" [ 240.489057][ T28] audit: type=1400 audit(240.250:204): avc: denied { setattr } for pid=4540 comm="syz.1.222" name="renderD128" dev="devtmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcpc_var_run_t:s0" [ 241.251578][ T28] audit: type=1400 audit(241.010:205): avc: denied { getopt } for pid=4545 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.618291][ T28] audit: type=1400 audit(241.380:206): avc: denied { ioctl } for pid=4547 comm="syz.1.224" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4487 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 241.654880][ T4548] fuse: Unknown parameter 'fd%@@' [ 242.987173][ T4560] fuse: Unknown parameter 'user_id00000000000000000000' [ 245.113178][ T4568] FAULT_INJECTION: forcing a failure. [ 245.113178][ T4568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.114616][ T4568] CPU: 1 UID: 0 PID: 4568 Comm: syz.0.233 Not tainted syzkaller #0 PREEMPT [ 245.114717][ T4568] Hardware name: ARM-Versatile Express [ 245.114739][ T4568] Call trace: [ 245.114774][ T4568] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 245.114870][ T4568] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 245.114886][ T4568] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 245.114930][ T4568] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 245.114984][ T4568] r7:00000000 r6:00000000 r5:83bb3e80 r4:82b4f348 [ 245.114997][ T4568] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 245.115042][ T4568] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 245.115093][ T4568] r8:76f4af08 r7:00000000 r6:00000000 r5:eb509f68 r4:00000002 [ 245.115108][ T4568] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 245.115150][ T4568] [<809d8888>] (should_fail_usercopy) from [<805c59c0>] (simple_read_from_buffer+0x80/0x140) [ 245.115192][ T4568] [<805c5940>] (simple_read_from_buffer) from [<8064ca04>] (proc_fail_nth_read+0xb8/0x10c) [ 245.115253][ T4568] r10:8064c94c r9:00000001 r8:00000002 r7:eb509f68 r6:0000000f r5:76f4af08 [ 245.115272][ T4568] r4:83bb3e80 r3:eb509e9f [ 245.115322][ T4568] [<8064c94c>] (proc_fail_nth_read) from [<80585ff8>] (vfs_read+0xc0/0x328) [ 245.115390][ T4568] r8:83bb3e80 r7:eb509f68 r6:76f4af08 r5:853c1200 r4:0000000f [ 245.115405][ T4568] [<80585f38>] (vfs_read) from [<80586c8c>] (ksys_read+0x74/0xec) [ 245.115466][ T4568] r10:00000003 r9:83bb3e80 r8:8020029c r7:00000000 r6:00000000 r5:853c1200 [ 245.115483][ T4568] r4:853c1203 [ 245.115496][ T4568] [<80586c18>] (ksys_read) from [<80586d14>] (sys_read+0x10/0x14) [ 245.115551][ T4568] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 245.115565][ T4568] [<80586d04>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 245.115605][ T4568] Exception stack(0xeb509fa8 to 0xeb509ff0) [ 245.115639][ T4568] 9fa0: 00000000 00000000 00000005 76f4af08 0000000f 00000000 [ 245.115668][ T4568] 9fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f4b0dc [ 245.115691][ T4568] 9fe0: 76f4ae58 76f4ae44 0010ba34 00112618 [ 246.040153][ T28] audit: type=1400 audit(245.800:207): avc: denied { create } for pid=4573 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 247.305964][ T40] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 247.496391][ T40] usb 1-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 247.497234][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.498098][ T40] usb 1-1: Product: ఊ [ 247.498614][ T40] usb 1-1: Manufacturer: ⃇ㆎ䱣鰄嫱ࣙ愈ꀑ撧㯙枤쒚쎐⣸푹ᝀ蛜顐啌㚜혹뤓뵍⹜튮阡⊍禘ᆍꧪퟶ옢ش촜罠䲊㷣㿂瓁待옿看솎⏍盩絰橁퐨춯粡쥞营蚨剿ꒌ㩰⩔異謂쪃⊗㼰䚼恏壹錎렧鑞ី訆觓જ櫾౬ [ 247.499601][ T40] usb 1-1: SerialNumber: 檋ꇿ濕ࣿﳟ䮆玒邅南쩀绵䴎졟飇㭔ẫ㶁蛫৖䑷閺ꙟ幼묄谥Ɏ䖽ዤ体庒蚍ረ瞥将䚦먰府㏎睵ᷝச璦추錺䒗꭯첕﮸缆뒋죚損浿뛝ᒄ눓쮦⊀袙ꇩԹظČ㹓㸞☤虢એⲯ顬婱㬠磺ᐻ妉ᣛ摧栠ᛮ飖麻緃ဦ䑘댐Ḷಂ뼴妏矾ﮟ繇쩅텥溲⊼ᔚ嚏ꗣⷥ癀菆뺕俿 [ 249.751679][ T40] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 249.758845][ T40] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 249.767117][ T40] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 249.797052][ T40] usb 1-1: USB disconnect, device number 7 [ 250.266151][ T28] audit: type=1400 audit(250.020:208): avc: denied { create } for pid=4598 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 252.625992][ T3703] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 252.776275][ T3703] usb 2-1: Using ep0 maxpacket: 8 [ 252.811368][ T3703] usb 2-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 0.40 [ 252.812438][ T3703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.816082][ T3703] usb 2-1: Product: syz [ 252.819013][ T3703] usb 2-1: Manufacturer: syz [ 252.821470][ T3703] usb 2-1: SerialNumber: syz [ 253.059467][ T3703] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 253.066117][ T3703] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 253.098521][ T3703] usb 2-1: USB disconnect, device number 9 [ 254.299881][ T4680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4680 comm=syz.1.251 [ 255.777393][ T28] audit: type=1400 audit(255.540:209): avc: denied { ioctl } for pid=4686 comm="syz.0.255" path="socket:[4054]" dev="sockfs" ino=4054 ioctlcmd=0x8993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 256.450733][ T4691] fuse: Bad value for 'fd' [ 263.843094][ T4708] fuse: Bad value for 'fd' [ 269.929593][ T28] audit: type=1400 audit(269.690:210): avc: denied { ioctl } for pid=4722 comm="syz.1.266" path="/dev/vhost-net" dev="devtmpfs" ino=711 ioctlcmd=0x4dfb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:logrotate_exec_t:s0" [ 273.777673][ T4749] FAULT_INJECTION: forcing a failure. [ 273.777673][ T4749] name failslab, interval 1, probability 0, space 0, times 0 [ 273.778915][ T4749] CPU: 1 UID: 0 PID: 4749 Comm: syz.0.273 Not tainted syzkaller #0 PREEMPT [ 273.779127][ T4749] Hardware name: ARM-Versatile Express [ 273.779363][ T4749] Call trace: [ 273.780283][ T4749] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 273.781734][ T4749] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 273.781830][ T4749] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 273.781895][ T4749] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 273.781961][ T4749] r7:00000000 r6:00000000 r5:8476be80 r4:82b18108 [ 273.781980][ T4749] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 273.782034][ T4749] [<809d864c>] (should_fail_ex) from [<80554524>] (should_failslab+0x6c/0x94) [ 273.782099][ T4749] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 273.782119][ T4749] [<805544b8>] (should_failslab) from [<8053274c>] (__kmalloc_noprof+0xa4/0x39c) [ 273.782299][ T4749] [<805326a8>] (__kmalloc_noprof) from [<80816124>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 273.782399][ T4749] r10:00000000 r9:83810c00 r8:00000000 r7:837a4bb0 r6:853c1428 r5:00001000 [ 273.782436][ T4749] r4:00000000 [ 273.782458][ T4749] [<808160e8>] (tomoyo_realpath_from_path) from [<808121ec>] (tomoyo_path_number_perm+0xcc/0x22c) [ 273.782537][ T4749] r10:00000000 r9:00000003 r8:853c1400 r7:00008983 r6:81cda164 r5:00000004 [ 273.782578][ T4749] r4:853c1428 r3:828d1400 [ 273.782635][ T4749] [<80812120>] (tomoyo_path_number_perm) from [<80816b40>] (tomoyo_file_ioctl+0x1c/0x20) [ 273.782795][ T4749] r10:8476be80 r9:00000003 r8:853c1400 r7:20000080 r6:20000080 r5:00008983 [ 273.782818][ T4749] r4:853c1400 [ 273.782835][ T4749] [<80816b24>] (tomoyo_file_ioctl) from [<807c2438>] (security_file_ioctl+0x80/0x1d4) [ 273.782893][ T4749] [<807c23b8>] (security_file_ioctl) from [<805a1b04>] (sys_ioctl+0x4c/0xb5c) [ 273.782989][ T4749] r7:20000080 r6:00008983 r5:853c1401 r4:00000000 [ 273.783008][ T4749] [<805a1ab8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 273.783130][ T4749] Exception stack(0xec6c9fa8 to 0xec6c9ff0) [ 273.783298][ T4749] 9fa0: 00000000 00000000 00000003 00008983 20000080 00000000 [ 273.783351][ T4749] 9fc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f4b0dc [ 273.783380][ T4749] 9fe0: 76f4ae88 76f4ae78 00018ebc 00130810 [ 273.783492][ T4749] r10:00000036 r9:8476be80 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 273.783518][ T4749] r4:00000000 [ 273.846153][ T4749] ERROR: Out of memory at tomoyo_realpath_from_path. [ 273.847216][ T28] audit: type=1400 audit(273.610:211): avc: denied { ioctl } for pid=4748 comm="syz.0.273" path="socket:[4766]" dev="sockfs" ino=4766 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 274.498311][ T28] audit: type=1400 audit(274.260:212): avc: denied { create } for pid=4750 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 275.522027][ T28] audit: type=1400 audit(275.280:213): avc: denied { ioctl } for pid=4767 comm="syz.0.276" path="socket:[5185]" dev="sockfs" ino=5185 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 275.567959][ T28] audit: type=1400 audit(275.320:214): avc: denied { write } for pid=4767 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 278.412036][ T28] audit: type=1400 audit(278.170:215): avc: denied { getopt } for pid=4788 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 280.201094][ T28] audit: type=1400 audit(279.960:216): avc: denied { create } for pid=4810 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 280.212087][ T28] audit: type=1400 audit(279.970:217): avc: denied { setopt } for pid=4810 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 282.614713][ T4827] syzkaller0: entered promiscuous mode [ 282.615121][ T4827] syzkaller0: entered allmulticast mode [ 283.403336][ T28] audit: type=1400 audit(283.160:218): avc: denied { audit_write } for pid=4833 comm="syz.0.293" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 284.826507][ T3703] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 284.986079][ T3703] usb 2-1: device descriptor read/64, error -71 [ 285.228662][ T3703] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 285.355974][ T3703] usb 2-1: device descriptor read/64, error -71 [ 285.466755][ T3703] usb usb2-port1: attempt power cycle [ 285.816061][ T3703] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 285.838519][ T3703] usb 2-1: device descriptor read/8, error -71 [ 286.086750][ T3703] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 286.129462][ T3703] usb 2-1: device descriptor read/8, error -71 [ 286.256777][ T3703] usb usb2-port1: unable to enumerate USB device [ 289.259775][ T28] audit: type=1400 audit(289.020:219): avc: denied { write } for pid=4862 comm="syz.0.301" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 289.295841][ T4863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4863 comm=syz.0.301 [ 295.386401][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 295.526147][ T43] usb 2-1: device descriptor read/64, error -71 [ 295.766282][ T43] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 295.906416][ T43] usb 2-1: device descriptor read/64, error -71 [ 296.016888][ T43] usb usb2-port1: attempt power cycle [ 296.355915][ T43] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 296.377318][ T43] usb 2-1: device descriptor read/8, error -71 [ 296.616611][ T43] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 296.658160][ T43] usb 2-1: device descriptor read/8, error -71 [ 296.766425][ T43] usb usb2-port1: unable to enumerate USB device [ 297.799758][ T28] audit: type=1400 audit(297.560:220): avc: denied { create } for pid=4897 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 297.816484][ T28] audit: type=1400 audit(297.580:221): avc: denied { getopt } for pid=4897 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 308.090424][ T28] audit: type=1400 audit(307.850:222): avc: denied { getopt } for pid=4914 comm="syz.0.314" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 308.159230][ T28] audit: type=1400 audit(307.920:223): avc: denied { create } for pid=4920 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 308.161789][ T28] audit: type=1400 audit(307.920:224): avc: denied { connect } for pid=4920 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 311.617078][ T4937] comedi comedi0: no devices specified [ 311.999982][ T4945] ------------[ cut here ]------------ [ 312.000379][ T4945] WARNING: kernel/signal.c:2174 at do_notify_parent+0x37c/0x384, CPU#1: syz.1.321/4945 [ 312.002321][ T4945] Modules linked in: [ 312.003118][ T4945] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 312.003542][ T4945] CPU: 1 UID: 0 PID: 4945 Comm: syz.1.321 Not tainted syzkaller #0 PREEMPT [ 312.003862][ T4945] Hardware name: ARM-Versatile Express [ 312.004063][ T4945] Call trace: [ 312.004277][ T4945] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 312.004613][ T4945] r7:82a1eab8 r6:00000000 r5:8231eaf8 r4:00000001 [ 312.004843][ T4945] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 312.005442][ T4945] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 312.005843][ T4945] r7:82a1eab8 r6:00000000 r5:84778c80 r4:82c7cd3c [ 312.006067][ T4945] [<8021e398>] (dump_stack) from [<8020260c>] (vpanic+0x114/0x320) [ 312.006374][ T4945] [<802024f8>] (vpanic) from [<8020284c>] (trace_suspend_resume+0x0/0x104) [ 312.006689][ T4945] r7:80266184 [ 312.006832][ T4945] [<80202818>] (panic) from [<80250854>] (get_taint+0x0/0x1c) [ 312.007105][ T4945] r3:82a0b544 r2:00000001 r1:823055c0 r0:8230cebc [ 312.007349][ T4945] [<802507dc>] (check_panic_on_warn) from [<802509d0>] (__warn+0x98/0x1ac) [ 312.007681][ T4945] [<80250938>] (__warn) from [<80250c5c>] (warn_slowpath_fmt+0x178/0x1f4) [ 312.008021][ T4945] r8:00000009 r7:8230e0b8 r6:ed009ea4 r5:84778c80 r4:00000000 [ 312.008282][ T4945] [<80250ae8>] (warn_slowpath_fmt) from [<80266184>] (do_notify_parent+0x37c/0x384) [ 312.008626][ T4945] r10:84779374 r9:00000000 r8:ed009f50 r7:84779550 r6:00000080 r5:8508a580 [ 312.009114][ T4945] r4:84778c80 [ 312.009450][ T4945] [<80265e08>] (do_notify_parent) from [<80257c6c>] (do_exit+0x7b8/0xb04) [ 312.009823][ T4945] r8:ed009f50 r7:84779550 r6:85aace00 r5:8508a580 r4:84778c80 [ 312.010084][ T4945] [<802574b4>] (do_exit) from [<80258188>] (do_group_exit+0x40/0x8c) [ 312.010371][ T4945] r7:860d0540 [ 312.010525][ T4945] [<80258148>] (do_group_exit) from [<802581ec>] (pid_child_should_wake+0x0/0x6c) [ 312.010889][ T4945] r7:000000f8 r4:1ffffc20 [ 312.011061][ T4945] [<802581d4>] (sys_exit_group) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 312.011398][ T4945] Exception stack(0xed009fa8 to 0xed009ff0) [ 312.011651][ T4945] 9fa0: 1ffffc20 1feffc20 0000000b 1feffc20 00000000 0018b41c [ 312.012039][ T4945] 9fc0: 1ffffc20 1feffc20 00015800 000000f8 003462d8 00000000 00000001 76f960dc [ 312.012414][ T4945] 9fe0: 76f95a18 76f95a08 00014998 00130810 [ 312.014628][ T4945] Rebooting in 86400 seconds..