last executing test programs: 26.771122123s ago: executing program 0 (id=322): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x4040000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x140b, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40) 26.061102702s ago: executing program 0 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@random="e5ac47edc16f", @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "00c222", 0x18, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x4, 0x0, 0x4, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) 25.649439168s ago: executing program 0 (id=324): socket(0x26, 0x3, 0x8) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) ustat(0x6, &(0x7f0000000080)) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x800, 0xff, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x100080f, 0x0) r4 = io_uring_setup(0x6001, &(0x7f0000000480)={0x0, 0xf6f7, 0x800, 0x2, 0x116}) r5 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r5, 0x29, 0x4b, 0x0, 0x4) close_range(r4, r4, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 13.461652114s ago: executing program 0 (id=333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x4004850) 12.089573389s ago: executing program 0 (id=334): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) syz_clone3(&(0x7f00000014c0)={0xa1860000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000300), {0x33}, &(0x7f00000004c0)=""/4096, 0x1000, &(0x7f0000000340)=""/69, &(0x7f00000003c0)=[r0], 0x1, {r3}}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}}, 0x0) 9.740936534s ago: executing program 1 (id=337): syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001"], 0x0) 8.917987457s ago: executing program 1 (id=338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001e000126bd"], 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) read(r0, &(0x7f0000000480)=""/154, 0x9a) 8.719690356s ago: executing program 1 (id=339): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x800248a0, 0x0) 3.241534368s ago: executing program 1 (id=340): r0 = syz_open_dev$loop(&(0x7f0000000340), 0x7, 0x240) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9aa7, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 3.18441642s ago: executing program 1 (id=341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x1c}, @void, @mpls}, 0x4) 125.600874ms ago: executing program 1 (id=342): syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) 0s ago: executing program 0 (id=343): r0 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 82.181033][ T3818] r7:dfdc1e20 r6:00000000 r5:60010013 r4:82264f9c [ 82.181118][ T3818] [<80201b08>] (show_stack) from [<8021f904>] (dump_stack_lvl+0x70/0x7c) [ 82.181152][ T3818] [<8021f894>] (dump_stack_lvl) from [<8021f928>] (dump_stack+0x18/0x1c) [ 82.181180][ T3818] r5:841b3000 r4:8294f050 [ 82.181187][ T3818] [<8021f910>] (dump_stack) from [<8097e838>] (should_fail_ex+0x1c4/0x228) [ 82.181215][ T3818] [<8097e674>] (should_fail_ex) from [<8097e8b0>] (should_fail+0x14/0x18) [ 82.181243][ T3818] r8:0000c800 r7:dfdc1e20 r6:20000300 r5:00000000 r4:dfdc1f20 [ 82.181250][ T3818] [<8097e89c>] (should_fail) from [<8097e8d0>] (should_fail_usercopy+0x1c/0x20) [ 82.181273][ T3818] [<8097e8b4>] (should_fail_usercopy) from [<815591c8>] (copy_msghdr_from_user+0x50/0x130) [ 82.181302][ T3818] [<81559178>] (copy_msghdr_from_user) from [<81559320>] (___sys_sendmsg+0x78/0xd0) [ 82.181334][ T3818] r8:0000c800 r7:00000000 r6:8507a000 r5:dfdc1f20 r4:dfdc1e64 [ 82.181351][ T3818] [<815592a8>] (___sys_sendmsg) from [<815597dc>] (__sys_sendmsg+0x8c/0xe0) [ 82.181396][ T3818] r10:00000128 r9:841b3000 r8:84cc6600 r7:0000c800 r6:20000300 r5:84cc6601 [ 82.181409][ T3818] r4:00000003 [ 82.181417][ T3818] [<81559750>] (__sys_sendmsg) from [<81559844>] (sys_sendmsg+0x14/0x18) [ 82.181480][ T3818] r8:8020029c r7:00000128 r6:001304b8 r5:00000000 r4:00000000 [ 82.181496][ T3818] [<81559830>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 82.181615][ T3818] Exception stack(0xdfdc1fa8 to 0xdfdc1ff0) [ 82.181733][ T3818] 1fa0: 00000000 00000000 00000003 20000300 0000c800 00000000 [ 82.181760][ T3818] 1fc0: 00000000 00000000 001304b8 00000128 00300000 00000000 00006364 76feb0bc [ 82.181774][ T3818] 1fe0: 76feaec0 76feaeb0 000195a4 00132510 [ 86.546036][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 86.546333][ T31] audit: type=1400 audit(86.470:112): avc: denied { create } for pid=3842 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.566716][ T31] audit: type=1400 audit(86.490:113): avc: denied { write } for pid=3842 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.666798][ T31] audit: type=1400 audit(86.590:114): avc: denied { create } for pid=3840 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.686825][ T31] audit: type=1400 audit(86.610:115): avc: denied { setopt } for pid=3840 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.149013][ T31] audit: type=1400 audit(87.070:116): avc: denied { create } for pid=3851 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.166003][ T31] audit: type=1400 audit(87.090:117): avc: denied { write } for pid=3851 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.691970][ T31] audit: type=1400 audit(88.620:118): avc: denied { write } for pid=3871 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.862264][ T3874] netlink: 56 bytes leftover after parsing attributes in process `syz.0.21'. [ 90.874258][ T31] audit: type=1400 audit(90.800:119): avc: denied { create } for pid=3892 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.980424][ T31] audit: type=1400 audit(90.900:120): avc: denied { create } for pid=3894 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.992265][ T31] audit: type=1400 audit(90.920:121): avc: denied { write } for pid=3894 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.016075][ T31] audit: type=1400 audit(91.940:122): avc: denied { create } for pid=3904 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.023954][ T31] audit: type=1400 audit(91.950:123): avc: denied { write } for pid=3904 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.102124][ T3905] netlink: 'syz.0.31': attribute type 32 has an invalid length. [ 92.102485][ T3905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.31'. [ 92.105693][ T31] audit: type=1400 audit(92.030:124): avc: denied { nlmsg_write } for pid=3904 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.622977][ T31] audit: type=1400 audit(92.550:125): avc: denied { create } for pid=3911 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.855096][ T31] audit: type=1400 audit(92.780:126): avc: denied { create } for pid=3915 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.982805][ T3925] netlink: 830 bytes leftover after parsing attributes in process `syz.0.39'. [ 95.080857][ T3930] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.40'. [ 95.131992][ T3927] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.40'. [ 95.162984][ T3927] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.40'. [ 96.280828][ T3942] syz.0.46 uses obsolete (PF_INET,SOCK_PACKET) [ 96.306517][ T31] audit: type=1400 audit(96.230:127): avc: denied { ioctl } for pid=3940 comm="syz.0.46" path="socket:[2717]" dev="sockfs" ino=2717 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.372886][ T3941] netlink: 64 bytes leftover after parsing attributes in process `syz.1.45'. [ 108.963916][ T31] audit: type=1400 audit(108.890:128): avc: denied { create } for pid=3949 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 110.339195][ T31] audit: type=1400 audit(110.260:129): avc: denied { ioctl } for pid=3959 comm="syz.1.50" path="socket:[3085]" dev="sockfs" ino=3085 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.808891][ T31] audit: type=1400 audit(113.730:130): avc: denied { create } for pid=3995 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.880151][ T31] audit: type=1400 audit(113.800:131): avc: denied { bind } for pid=3995 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.897499][ T31] audit: type=1400 audit(113.820:132): avc: denied { listen } for pid=3995 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.960943][ T3996] capability: warning: `syz.1.59' uses deprecated v2 capabilities in a way that may be insecure [ 113.994554][ T31] audit: type=1400 audit(113.920:133): avc: denied { connect } for pid=3995 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.067037][ T31] audit: type=1400 audit(113.990:134): avc: denied { write } for pid=3995 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.077598][ T31] audit: type=1400 audit(114.000:135): avc: denied { setopt } for pid=3995 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.570357][ T31] audit: type=1400 audit(114.490:136): avc: denied { create } for pid=3997 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.591557][ T31] audit: type=1400 audit(114.510:137): avc: denied { setopt } for pid=3997 comm="syz.1.60" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.305314][ T31] audit: type=1400 audit(115.230:138): avc: denied { append } for pid=4007 comm="syz.1.64" name="ttyprintk" dev="devtmpfs" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.311000][ T3928] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 118.477845][ T3928] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.479013][ T3928] usb 1-1: config 0 has no interface number 0 [ 118.480823][ T3928] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 118.481917][ T3928] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 118.483241][ T3928] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.484274][ T3928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.490473][ T3928] usb 1-1: config 0 descriptor?? [ 118.502987][ T4023] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 118.507105][ T31] audit: type=1400 audit(118.430:139): avc: denied { mounton } for pid=4027 comm="syz.1.69" path="/29/file0" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.515385][ T3928] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 118.728047][ T3928] usb 1-1: USB disconnect, device number 2 [ 119.417907][ T31] audit: type=1400 audit(119.330:140): avc: denied { name_bind } for pid=4046 comm="syz.0.70" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 119.440434][ T31] audit: type=1400 audit(119.340:141): avc: denied { node_bind } for pid=4046 comm="syz.0.70" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 121.951834][ T3928] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.179012][ T3928] usb 1-1: Using ep0 maxpacket: 16 [ 122.241181][ T3928] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 122.243027][ T3928] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 122.253349][ T3928] usb 1-1: config 0 interface 0 has no altsetting 0 [ 122.282975][ T3928] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 122.285179][ T3928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.286213][ T3928] usb 1-1: Product: syz [ 122.286862][ T3928] usb 1-1: Manufacturer: syz [ 122.287533][ T3928] usb 1-1: SerialNumber: syz [ 122.327374][ T3928] usb 1-1: config 0 descriptor?? [ 122.589885][ T3928] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input3 [ 122.861106][ T3928] usb 1-1: USB disconnect, device number 3 [ 124.981117][ T31] audit: type=1400 audit(124.910:142): avc: denied { ioctl } for pid=4104 comm="syz.0.84" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=2856 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 125.079617][ T31] audit: type=1400 audit(125.000:143): avc: denied { bind } for pid=4107 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.173735][ T4110] tmpfs: Unsupported parameter 'huge' [ 127.695809][ T11] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 127.710007][ T11] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.800401][ T4135] comedi: valid board names for 8255 driver are: [ 128.803452][ T4135] 8255 [ 128.803617][ T4135] comedi: valid board names for vmk80xx driver are: [ 128.803642][ T4135] vmk80xx [ 128.803657][ T4135] comedi: valid board names for usbduxsigma driver are: [ 128.803671][ T4135] usbduxsigma [ 128.803686][ T4135] comedi: valid board names for usbduxfast driver are: [ 128.803699][ T4135] usbduxfast [ 128.803713][ T4135] comedi: valid board names for usbdux driver are: [ 128.803737][ T4135] usbdux [ 128.803752][ T4135] comedi: valid board names for ni6501 driver are: [ 128.803797][ T4135] ni6501 [ 128.803852][ T4135] comedi: valid board names for dt9812 driver are: [ 128.803870][ T4135] dt9812 [ 128.803962][ T4135] comedi: valid board names for ni_labpc_cs driver are: [ 128.803982][ T4135] ni_labpc_cs [ 128.803997][ T4135] comedi: valid board names for ni_daq_700 driver are: [ 128.804011][ T4135] ni_daq_700 [ 128.804026][ T4135] comedi: valid board names for labpc_pci driver are: [ 128.804084][ T4135] labpc_pci [ 128.804102][ T4135] comedi: valid board names for adl_pci9118 driver are: [ 128.804139][ T4135] pci9118dg [ 128.804219][ T4135] pci9118hg [ 128.804340][ T4135] pci9118hr [ 128.804401][ T4135] comedi: valid board names for 8255_pci driver are: [ 128.804422][ T4135] 8255_pci [ 128.804452][ T4135] comedi: valid board names for comedi_parport driver are: [ 128.804571][ T4135] comedi_parport [ 128.804590][ T4135] comedi: valid board names for comedi_test driver are: [ 128.804642][ T4135] comedi_test [ 128.804659][ T4135] comedi: valid board names for comedi_bond driver are: [ 128.804674][ T4135] comedi_bond [ 128.953674][ T31] audit: type=1400 audit(128.880:144): avc: denied { create } for pid=4139 comm="syz.0.95" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.964552][ T31] audit: type=1400 audit(128.890:145): avc: denied { mounton } for pid=4139 comm="syz.0.95" path="/64/file0" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 129.517029][ T31] audit: type=1400 audit(129.440:146): avc: denied { unmount } for pid=3119 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 129.529302][ T31] audit: type=1400 audit(129.450:147): avc: denied { unlink } for pid=3119 comm="syz-executor" name="file0" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 130.650652][ T31] audit: type=1400 audit(130.560:148): avc: denied { view } for pid=4157 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 130.849170][ T4160] can0: slcan on ptm0. [ 131.060932][ T4159] can0 (unregistered): slcan off ptm0. [ 132.680570][ T31] audit: type=1400 audit(132.600:149): avc: denied { create } for pid=4188 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.680946][ T31] audit: type=1400 audit(132.600:150): avc: denied { ioctl } for pid=4188 comm="syz.0.107" path="socket:[3353]" dev="sockfs" ino=3353 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.692319][ T31] audit: type=1400 audit(132.620:151): avc: denied { bind } for pid=4188 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.016983][ T31] audit: type=1400 audit(132.940:152): avc: denied { write } for pid=4188 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.372357][ T4223] Zero length message leads to an empty skb [ 135.563354][ T4239] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 135.961602][ T31] audit: type=1400 audit(135.890:153): avc: denied { execute } for pid=4244 comm="syz.1.120" path="/45/hugetlb.2MB.usage_in_bytes" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 136.731611][ T4258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.125'. [ 137.956604][ T3857] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 138.116535][ T3857] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 138.118299][ T3857] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 138.119519][ T3857] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.120428][ T3857] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 138.120623][ T3857] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 138.127298][ T3857] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 138.128961][ T3857] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 138.131545][ T3857] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.133222][ T3857] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 138.134621][ T3857] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 138.153361][ T3857] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 138.153631][ T3857] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 138.153852][ T3857] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.154015][ T3857] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 138.154174][ T3857] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 138.206270][ T3857] usb 1-1: string descriptor 0 read error: -22 [ 138.207435][ T3857] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 138.208324][ T3857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.333204][ T3857] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 138.492922][ T3900] usb 1-1: USB disconnect, device number 4 [ 140.800217][ T3857] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.982214][ T3857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.982523][ T3857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.982812][ T3857] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.983053][ T3857] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.983244][ T3857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.990261][ T3857] usb 1-1: config 0 descriptor?? [ 141.451244][ T3857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 141.460463][ T3857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 141.461731][ T3857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 141.463102][ T3857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 141.464139][ T3857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 141.465154][ T3857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 141.466199][ T3857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 141.467127][ T3857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 141.468120][ T3857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 141.469051][ T3857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 141.563568][ T3857] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 141.665127][ T3857] usb 1-1: USB disconnect, device number 5 [ 141.698822][ T4316] syzkaller0: entered promiscuous mode [ 141.699433][ T4316] syzkaller0: entered allmulticast mode [ 142.650827][ T11] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.820373][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 142.854534][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.854833][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 142.855142][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 142.855212][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 142.855313][ T11] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 142.855348][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.950487][ T11] hub 1-1:1.0: bad descriptor, ignoring hub [ 142.950864][ T11] hub 1-1:1.0: probe with driver hub failed with error -5 [ 142.952306][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 142.952559][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 142.965546][ T11] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 143.311079][ T11] usb 1-1: USB disconnect, device number 6 [ 143.763089][ T4374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.141'. [ 143.834602][ T31] audit: type=1400 audit(143.760:154): avc: denied { connect } for pid=4375 comm="syz.0.142" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.837779][ T31] audit: type=1400 audit(143.760:155): avc: denied { write } for pid=4375 comm="syz.0.142" path="socket:[3498]" dev="sockfs" ino=3498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.876696][ T4374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.141'. [ 143.877105][ T4374] nbd: device at index 64 is going down [ 144.370855][ T11] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 144.602735][ T11] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 144.602943][ T11] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 144.605771][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 144.606551][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 144.607544][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 144.725866][ T11] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 144.730541][ T11] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 144.730627][ T11] usb 1-1: Product: syz [ 144.730658][ T11] usb 1-1: Manufacturer: syz [ 144.785459][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 144.785754][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 144.800801][ T11] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 148.439842][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.456284][ T4420] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 152.920260][ T3846] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 153.083262][ T3846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.085120][ T3846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.086669][ T3846] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.088023][ T3846] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.089028][ T3846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.097133][ T3846] usb 2-1: config 0 descriptor?? [ 153.546289][ T3846] usbhid 2-1:0.0: can't add hid device: -71 [ 153.547497][ T3846] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 153.562731][ T3846] usb 2-1: USB disconnect, device number 2 [ 155.040543][ T43] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 155.344390][ T43] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.347358][ T43] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.354656][ T43] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.355077][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.678545][ T43] usb 2-1: usb_control_msg returned -32 [ 155.678810][ T43] usbtmc 2-1:16.0: can't read capabilities [ 158.616352][ T11] usb 1-1: USB disconnect, device number 7 [ 162.482183][ T4496] tap0: tun_chr_ioctl cmd 1074025677 [ 162.488901][ T4496] tap0: linktype set to 1 [ 167.484483][ T4524] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 167.760603][ T4524] usb 1-1: Using ep0 maxpacket: 16 [ 167.777302][ T4524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.777598][ T4524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.777834][ T4524] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 167.777891][ T4524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.784004][ T4524] usb 1-1: config 0 descriptor?? [ 168.332682][ T4524] apple 0003:05AC:024B.0003: unknown global tag 0xe [ 168.333749][ T4524] apple 0003:05AC:024B.0003: item 0 1 1 14 parsing failed [ 168.334229][ T4524] apple 0003:05AC:024B.0003: parse failed [ 168.334397][ T4524] apple 0003:05AC:024B.0003: probe with driver apple failed with error -22 [ 168.589637][ T4524] usb 1-1: USB disconnect, device number 8 [ 169.255611][ T4524] usb 2-1: USB disconnect, device number 3 [ 170.680372][ T4573] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 170.939134][ T4573] usb 2-1: unable to get BOS descriptor or descriptor too short [ 170.943764][ T4573] usb 2-1: no configurations [ 170.944060][ T4573] usb 2-1: can't read configurations, error -22 [ 171.687355][ T31] audit: type=1400 audit(171.610:156): avc: denied { read } for pid=4584 comm="syz.1.196" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 171.688523][ T31] audit: type=1400 audit(171.610:157): avc: denied { open } for pid=4584 comm="syz.1.196" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 171.694954][ T31] audit: type=1400 audit(171.620:158): avc: denied { ioctl } for pid=4584 comm="syz.1.196" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 171.698632][ T31] audit: type=1400 audit(171.620:159): avc: denied { set_context_mgr } for pid=4584 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 171.717820][ T4585] binder: 4584:4585 unknown command 0 [ 171.718367][ T4585] binder: 4584:4585 ioctl c0306201 20000080 returned -22 [ 171.736627][ T31] audit: type=1400 audit(171.660:160): avc: denied { write } for pid=4584 comm="syz.1.196" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 171.879163][ T31] audit: type=1400 audit(171.800:161): avc: denied { map } for pid=4584 comm="syz.1.196" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 171.907610][ T31] audit: type=1400 audit(171.830:162): avc: denied { call } for pid=4584 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 177.799911][ C0] hrtimer: interrupt took 9286784 ns [ 181.750315][ T3857] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 181.900687][ T3857] usb 2-1: Using ep0 maxpacket: 16 [ 181.928357][ T3857] usb 2-1: config 0 has no interfaces? [ 181.955053][ T3857] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 181.956759][ T3857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.959335][ T3857] usb 2-1: Product: syz [ 181.961786][ T3857] usb 2-1: Manufacturer: syz [ 181.963324][ T3857] usb 2-1: SerialNumber: syz [ 181.970615][ T3857] usb 2-1: config 0 descriptor?? [ 184.962137][ T31] audit: type=1400 audit(184.870:163): avc: denied { read } for pid=4602 comm="syz.0.201" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 184.980074][ T31] audit: type=1400 audit(184.890:164): avc: denied { open } for pid=4602 comm="syz.0.201" path="/113/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 189.460883][ T4626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.462856][ T4626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.971933][ T31] audit: type=1400 audit(191.900:165): avc: denied { mounton } for pid=4637 comm="syz.0.210" path="/122/file0" dev="tmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 194.934394][ T4643] binder: 4642:4643 ioctl c018620c 20000100 returned -1 [ 196.552930][ T3878] usb 2-1: USB disconnect, device number 6 [ 200.661440][ T3857] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 200.830366][ T3857] usb 2-1: Using ep0 maxpacket: 32 [ 200.863125][ T3857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.864975][ T3857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.866254][ T3857] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 200.867207][ T3857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.873578][ T3857] usb 2-1: config 0 descriptor?? [ 200.887511][ T3857] hub 2-1:0.0: USB hub found [ 201.149181][ T3857] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 201.411903][ T3857] usbhid 2-1:0.0: can't add hid device: -71 [ 201.412965][ T3857] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 201.452051][ T3857] usb 2-1: USB disconnect, device number 7 [ 202.007681][ T4563] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 202.204059][ T4563] usb 2-1: Using ep0 maxpacket: 8 [ 202.306384][ T4563] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.311961][ T4563] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.313131][ T4563] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.315899][ T4563] usb 2-1: config 0 interface 0 has no altsetting 0 [ 202.316857][ T4563] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 202.317773][ T4563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.331941][ T4563] usb 2-1: config 0 descriptor?? [ 202.809269][ T4563] hid_parser_main: 5 callbacks suppressed [ 202.810546][ T4563] uclogic 0003:5543:0042.0004: unknown main item tag 0x4 [ 202.810858][ T4563] uclogic 0003:5543:0042.0004: unknown main item tag 0x0 [ 202.822211][ T4563] uclogic 0003:5543:0042.0004: hidraw0: USB HID v0.07 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 202.986436][ T3857] usb 2-1: USB disconnect, device number 8 [ 203.911397][ T31] audit: type=1400 audit(203.800:166): avc: denied { write } for pid=4713 comm="syz.1.223" name="if_inet6" dev="proc" ino=4026532771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 220.966706][ T4724] netlink: 148 bytes leftover after parsing attributes in process `syz.1.226'. [ 220.969200][ T4724] netlink: 56 bytes leftover after parsing attributes in process `syz.1.226'. [ 220.970626][ T4724] netlink: 48 bytes leftover after parsing attributes in process `syz.1.226'. [ 223.685661][ T31] audit: type=1400 audit(223.610:167): avc: denied { name_bind } for pid=4732 comm="syz.1.230" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 227.780416][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 227.910908][ T9] usb 2-1: device descriptor read/64, error -71 [ 228.160482][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 228.290376][ T9] usb 2-1: device descriptor read/64, error -71 [ 228.411078][ T9] usb usb2-port1: attempt power cycle [ 228.750661][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 228.784647][ T9] usb 2-1: device descriptor read/8, error -71 [ 229.030282][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 229.066152][ T9] usb 2-1: device descriptor read/8, error -71 [ 229.170943][ T9] usb usb2-port1: unable to enumerate USB device [ 238.280535][ T3878] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 238.420273][ T3878] usb 2-1: device descriptor read/64, error -71 [ 238.660394][ T3878] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 238.800230][ T3878] usb 2-1: device descriptor read/64, error -71 [ 238.910735][ T3878] usb usb2-port1: attempt power cycle [ 239.250416][ T3878] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 239.280110][ T3878] usb 2-1: device descriptor read/8, error -71 [ 239.530571][ T3878] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 239.554591][ T3878] usb 2-1: device descriptor read/8, error -71 [ 239.668477][ T3878] usb usb2-port1: unable to enumerate USB device [ 246.211181][ T31] audit: type=1400 audit(246.130:168): avc: denied { append } for pid=4774 comm="syz.0.243" name="loop0" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 246.241384][ T31] audit: type=1400 audit(246.160:169): avc: denied { map } for pid=4774 comm="syz.0.243" path="/dev/loop0" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 246.950296][ T3878] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 247.100693][ T3878] usb 1-1: Using ep0 maxpacket: 8 [ 247.115096][ T3878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 247.115398][ T3878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.115731][ T3878] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.115855][ T3878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 247.116113][ T3878] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 247.116193][ T3878] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 247.116263][ T3878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.151653][ T3878] usb 1-1: config 0 descriptor?? [ 247.621189][ T9] usb 1-1: USB disconnect, device number 9 [ 248.305799][ T4563] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 248.611295][ T4520] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 248.636314][ T4563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.641716][ T4563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.671328][ T4563] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 248.685664][ T4563] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.711520][ T4563] usb 1-1: config 0 descriptor?? [ 248.914884][ T4520] usb 2-1: Using ep0 maxpacket: 32 [ 248.998058][ T4520] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 249.009262][ T4520] usb 2-1: config 0 has no interface number 0 [ 249.011310][ T4520] usb 2-1: config 0 interface 184 has no altsetting 0 [ 249.053061][ T4520] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 249.053844][ T4520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.054186][ T4520] usb 2-1: Product: syz [ 249.055372][ T4520] usb 2-1: Manufacturer: syz [ 249.055870][ T4520] usb 2-1: SerialNumber: syz [ 249.272010][ T4520] usb 2-1: config 0 descriptor?? [ 249.301985][ T4520] smsc75xx v1.0.0 [ 249.889239][ T4563] hid-led 0003:27B8:01ED.0005: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 249.955485][ T4563] hid-led 0003:27B8:01ED.0005: ThingM blink(1) initialized [ 249.985761][ T4563] usb 1-1: USB disconnect, device number 10 [ 250.584788][ T4520] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 250.585116][ T4520] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 250.586512][ T4520] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 250.586754][ T4520] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 250.586907][ T4520] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 250.587032][ T4520] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 250.587550][ T4520] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 250.604768][ T4520] usb 2-1: USB disconnect, device number 17 [ 250.731478][ T4563] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 250.880581][ T4563] usb 1-1: Using ep0 maxpacket: 16 [ 250.888328][ T4563] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.888581][ T4563] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 250.902173][ T4563] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 250.902379][ T4563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.902560][ T4563] usb 1-1: Product: syz [ 250.902686][ T4563] usb 1-1: Manufacturer: syz [ 250.902773][ T4563] usb 1-1: SerialNumber: syz [ 250.927096][ T4563] usb 1-1: config 0 descriptor?? [ 261.160777][ T3847] usb 1-1: USB disconnect, device number 11 [ 268.653111][ T3847] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 268.860479][ T3847] usb 2-1: Using ep0 maxpacket: 16 [ 268.880394][ T3847] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.880764][ T3847] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.904847][ T3847] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 268.910006][ T3847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.911001][ T3847] usb 2-1: Product: syz [ 268.911773][ T3847] usb 2-1: Manufacturer: syz [ 268.912508][ T3847] usb 2-1: SerialNumber: syz [ 268.951960][ T3847] usb 2-1: config 0 descriptor?? [ 273.440766][ T3944] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 273.590560][ T3944] usb 1-1: Using ep0 maxpacket: 32 [ 273.597107][ T3944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.597416][ T3944] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.597620][ T3944] usb 1-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.00 [ 273.597672][ T3944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.604593][ T3944] usb 1-1: config 0 descriptor?? [ 274.234766][ T3847] usb 1-1: USB disconnect, device number 12 [ 279.233330][ T3857] usb 2-1: USB disconnect, device number 18 [ 285.890671][ T3944] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 285.951148][ T31] audit: type=1400 audit(285.880:170): avc: denied { create } for pid=4958 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 286.061848][ T3944] usb 2-1: Using ep0 maxpacket: 16 [ 286.099870][ T3944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.100195][ T3944] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 286.115774][ T3944] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 286.116067][ T3944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.116257][ T3944] usb 2-1: Product: syz [ 286.116412][ T3944] usb 2-1: Manufacturer: syz [ 286.116553][ T3944] usb 2-1: SerialNumber: syz [ 286.124384][ T3944] usb 2-1: config 0 descriptor?? [ 286.313661][ T4971] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 291.605264][ T4997] syzkaller0: entered promiscuous mode [ 291.605582][ T4997] syzkaller0: entered allmulticast mode [ 296.362930][ T2906] usb 2-1: USB disconnect, device number 19 [ 296.573308][ T31] audit: type=1400 audit(296.500:171): avc: denied { name_bind } for pid=5046 comm="syz.0.296" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 296.600894][ T31] audit: type=1400 audit(296.530:172): avc: denied { bind } for pid=5047 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 296.784027][ T31] audit: type=1400 audit(296.710:173): avc: denied { write } for pid=5047 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 296.786835][ T31] audit: type=1400 audit(296.710:174): avc: denied { setopt } for pid=5047 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 296.789031][ T31] audit: type=1400 audit(296.710:175): avc: denied { accept } for pid=5047 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 297.790777][ T2906] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 297.940442][ T2906] usb 2-1: Using ep0 maxpacket: 16 [ 297.957413][ T2906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.957882][ T2906] usb 2-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 297.958060][ T2906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 298.004107][ T2906] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 298.004350][ T2906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.004563][ T2906] usb 2-1: Product: syz [ 298.004710][ T2906] usb 2-1: Manufacturer: syz [ 298.004847][ T2906] usb 2-1: SerialNumber: syz [ 298.021652][ T2906] usb 2-1: config 0 descriptor?? [ 298.485014][ T3944] usb 2-1: USB disconnect, device number 20 [ 299.850224][ T2906] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 300.015135][ T2906] usb 1-1: config 0 interface 0 has no altsetting 0 [ 300.033307][ T2906] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 300.033497][ T2906] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 300.033622][ T2906] usb 1-1: Product: syz [ 300.033711][ T2906] usb 1-1: Manufacturer: syz [ 300.033789][ T2906] usb 1-1: SerialNumber: syz [ 300.038461][ T2906] usb 1-1: config 0 descriptor?? [ 300.059501][ T2906] usb 1-1: selecting invalid altsetting 0 [ 300.277042][ T2906] usb 1-1: USB disconnect, device number 13 [ 300.570460][ T3944] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 300.760387][ T3944] usb 2-1: Using ep0 maxpacket: 16 [ 301.173721][ T31] audit: type=1400 audit(301.100:176): avc: denied { create } for pid=5143 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 302.940273][ T31] audit: type=1400 audit(302.860:177): avc: denied { create } for pid=5148 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 305.821238][ T3944] usb 2-1: unable to get BOS descriptor or descriptor too short [ 305.823724][ T3944] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 305.824045][ T3944] usb 2-1: chopping to 0 config(s) [ 305.824293][ T3944] usb 2-1: can't read configurations, error -32 [ 305.950602][ T3944] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 306.080753][ T3944] usb 2-1: device descriptor read/64, error -32 [ 306.097073][ T5165] comedi: valid board names for 8255 driver are: [ 306.100301][ T5165] 8255 [ 306.131991][ T5165] comedi: valid board names for vmk80xx driver are: [ 306.132339][ T5165] vmk80xx [ 306.132497][ T5165] comedi: valid board names for usbduxsigma driver are: [ 306.134738][ T5165] usbduxsigma [ 306.136591][ T5165] comedi: valid board names for usbduxfast driver are: [ 306.165680][ T5165] usbduxfast [ 306.177063][ T5165] comedi: valid board names for usbdux driver are: [ 306.180783][ T5165] usbdux [ 306.182542][ T5165] comedi: valid board names for ni6501 driver are: [ 306.187631][ T5165] ni6501 [ 306.188827][ T5165] comedi: valid board names for dt9812 driver are: [ 306.191143][ T3944] usb usb2-port1: attempt power cycle [ 306.191259][ T5165] dt9812 [ 306.192460][ T5165] comedi: valid board names for ni_labpc_cs driver are: [ 306.193551][ T5165] ni_labpc_cs [ 306.194204][ T5165] comedi: valid board names for ni_daq_700 driver are: [ 306.194977][ T5165] ni_daq_700 [ 306.198462][ T5165] comedi: valid board names for labpc_pci driver are: [ 306.200453][ T5165] labpc_pci [ 306.204571][ T5165] comedi: valid board names for adl_pci9118 driver are: [ 306.210307][ T5165] pci9118dg [ 306.211233][ T5165] pci9118hg [ 306.211865][ T5165] pci9118hr [ 306.212495][ T5165] comedi: valid board names for 8255_pci driver are: [ 306.215480][ T5165] 8255_pci [ 306.222091][ T5165] comedi: valid board names for comedi_parport driver are: [ 306.225499][ T5165] comedi_parport [ 306.232722][ T5165] comedi: valid board names for comedi_test driver are: [ 306.233798][ T5165] comedi_test [ 306.238745][ T5165] comedi: valid board names for comedi_bond driver are: [ 306.250585][ T5165] comedi_bond [ 306.532589][ T3944] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 306.560860][ T3944] usb 2-1: device descriptor read/8, error -32 [ 306.806886][ T3944] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 306.838938][ T3944] usb 2-1: device descriptor read/8, error -32 [ 306.941218][ T3944] usb usb2-port1: unable to enumerate USB device [ 307.340649][ T31] audit: type=1400 audit(307.270:178): avc: denied { create } for pid=5170 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 307.362685][ T31] audit: type=1400 audit(307.290:179): avc: denied { write } for pid=5170 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 308.717877][ T31] audit: type=1400 audit(308.640:180): avc: denied { getopt } for pid=5175 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 314.826027][ T5194] netlink: 'syz.1.327': attribute type 1 has an invalid length. [ 315.073969][ T5194] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 315.077565][ T5194] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 315.788358][ T5194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=5194 comm=syz.1.327 [ 315.835589][ T31] audit: type=1400 audit(315.720:181): avc: denied { create } for pid=5193 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 315.835949][ T31] audit: type=1400 audit(315.720:182): avc: denied { write } for pid=5193 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 315.855121][ T5194] bond1: (slave gretap1): making interface the new active one [ 315.863630][ T5194] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 315.911417][ T5194] macvlan2: entered promiscuous mode [ 315.912572][ T5194] macvlan2: entered allmulticast mode [ 315.918416][ T5194] bond1: entered promiscuous mode [ 315.922995][ T5194] gretap1: entered promiscuous mode [ 315.931570][ T5194] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 315.984167][ T5194] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 315.993483][ T5194] bond1: left promiscuous mode [ 315.993994][ T5194] gretap1: left promiscuous mode [ 316.351913][ T31] audit: type=1400 audit(316.280:183): avc: denied { transfer } for pid=5244 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 324.541260][ T4520] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 324.736453][ T4520] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.737526][ T4520] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 324.741311][ T4520] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.743450][ T4520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.755770][ T4520] usb 2-1: config 0 descriptor?? [ 324.985311][ T4520] usb 2-1: USB disconnect, device number 25 [ 325.106489][ T5291] netlink: 56 bytes leftover after parsing attributes in process `syz.1.338'. [ 325.570545][ T4520] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 326.687406][ T4520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.687691][ T4520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.687963][ T4520] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 326.688205][ T4520] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 326.688368][ T4520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.696106][ T4520] usb 2-1: config 0 descriptor?? [ 327.982529][ T4520] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.990205][ T4520] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.990483][ T4520] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.990652][ T4520] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.990810][ T4520] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.990968][ T4520] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.991135][ T4520] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.991350][ T4520] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.991599][ T4520] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.991845][ T4520] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 328.976357][ T4520] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 328.993715][ T4520] usb 2-1: USB disconnect, device number 26 [ 330.775375][ T31] audit: type=1400 audit(559.695:184): avc: denied { execute } for pid=5313 comm="syz.1.340" path="/dev/loop7" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 334.270681][ T3857] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 334.349985][ T5337] 8<--- cut here --- [ 334.350164][ T5337] Unable to handle kernel paging request at virtual address fee04f27 when write [ 334.350264][ T5337] [fee04f27] *pgd=80000080007003, *pmd=00000000 [ 334.351239][ T5337] Internal error: Oops: a06 [#1] SMP ARM [ 334.355140][ T5337] Modules linked in: [ 334.357189][ T5337] CPU: 1 UID: 0 PID: 5337 Comm: syz.0.344 Not tainted syzkaller #0 PREEMPT [ 334.358924][ T5337] Hardware name: ARM-Versatile Express [ 334.360079][ T5337] PC is at parport_attach+0x174/0x1d0 [ 334.362614][ T5337] LR is at parport_attach+0x164/0x1d0 [ 334.362855][ T5337] pc : [<813bbc28>] lr : [<813bbc18>] psr: 60000013 [ 334.363137][ T5337] sp : df9f5d30 ip : df9f5d30 fp : df9f5d54 [ 334.363415][ T5337] r10: 82b16f28 r9 : 00000003 r8 : 84160240 [ 334.363714][ T5337] r7 : df9f5d90 r6 : 84160240 r5 : 00000000 r4 : 00000000 [ 334.363984][ T5337] r3 : fee04f27 r2 : 81e16b04 r1 : 00000001 r0 : 813bb898 [ 334.364386][ T5337] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 334.364855][ T5337] Control: 30c5387d Table: 8593a800 DAC: 00000000 [ 334.365286][ T5337] Register r0 information: non-slab/vmalloc memory [ 334.366227][ T5337] Register r1 information: non-paged memory [ 334.366605][ T5337] Register r2 information: non-slab/vmalloc memory [ 334.366871][ T5337] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 334.367920][ T5337] Register r4 information: NULL pointer [ 334.368152][ T5337] Register r5 information: NULL pointer [ 334.368411][ T5337] Register r6 information: slab kmalloc-192 start 84160240 pointer offset 0 size 192 [ 334.369445][ T5337] Register r7 information: 2-page vmalloc region starting at 0xdf9f4000 allocated at kernel_clone+0xac/0x3ec [ 334.370167][ T5337] Register r8 information: slab kmalloc-192 start 84160240 pointer offset 0 size 192 [ 334.370623][ T5337] Register r9 information: non-paged memory [ 334.370881][ T5337] Register r10 information: non-slab/vmalloc memory [ 334.371149][ T5337] Register r11 information: 2-page vmalloc region starting at 0xdf9f4000 allocated at kernel_clone+0xac/0x3ec [ 334.371606][ T5337] Register r12 information: 2-page vmalloc region starting at 0xdf9f4000 allocated at kernel_clone+0xac/0x3ec [ 334.372022][ T5337] Process syz.0.344 (pid: 5337, stack limit = 0xdf9f4000) [ 334.372361][ T5337] Stack: (0xdf9f5d30 to 0xdf9f6000) [ 334.372702][ T5337] 5d20: 82403704 84160240 829cf9ac 829cf9ac [ 334.373065][ T5337] 5d40: 81e16fc4 84160284 df9f5d8c df9f5d58 813b7cc4 813bbac0 200000c0 00000000 [ 334.373411][ T5337] 5d60: df9f5d7c 200000c0 84160240 b5403587 200000c0 85dcec00 40946400 00000003 [ 334.373733][ T5337] 5d80: df9f5e4c df9f5d90 813b3810 813b7bc8 656d6f63 705f6964 6f707261 00007472 [ 334.374046][ T5337] 5da0: 00000000 00004f27 00007fff 00000008 00000006 00000005 00000005 00000009 [ 334.374411][ T5337] 5dc0: 00000008 54c6cff3 000000fd 00000002 00008401 00000006 5da31c5d 00000006 [ 334.374751][ T5337] 5de0: 00000101 00000000 00000892 0000a418 40000001 00000005 0000caa3 00000008 [ 334.375089][ T5337] 5e00: 20001e5b 00000000 00000e66 00000004 00000008 00000005 00000000 fffffff8 [ 334.375494][ T5337] 5e20: 00000000 dd536d38 00000000 85b0a540 84160240 200000c0 200000c0 85dcec00 [ 334.375835][ T5337] 5e40: df9f5f14 df9f5e50 813b47dc 813b371c 00000000 00000000 00000000 dd536d38 [ 334.376166][ T5337] 5e60: 00000000 00000000 82477544 0000005f 842f8058 84160270 8418636c 85dcec00 [ 334.376527][ T5337] 5e80: df9f5ee4 df9f5e90 8079fd20 80796118 00000064 00000001 00000000 df9f5eac [ 334.376874][ T5337] 5ea0: 84cdbc10 834fa550 00006400 0000000b df9f5ea0 00000000 00000000 dd536d38 [ 334.377305][ T5337] 5ec0: 85b0a540 40946400 200000c0 200000c0 85b0a540 00000003 df9f5ef4 df9f5ee8 [ 334.377675][ T5337] 5ee0: 8079fe40 dd536d38 df9f5f14 40946400 00000000 85b0a541 200000c0 85b0a540 [ 334.378043][ T5337] 5f00: 00000003 85dcec00 df9f5fa4 df9f5f18 80573398 813b420c ecac8b10 85dcec00 [ 334.378411][ T5337] 5f20: df9f5f3c df9f5f30 81a4f298 81a4f168 df9f5f54 df9f5f40 8025c288 8028d5d4 [ 334.378777][ T5337] 5f40: df9f5fb0 40000000 df9f5f84 df9f5f58 802229ec 8025c244 00000000 8281cdf4 [ 334.379138][ T5337] 5f60: df9f5fb0 0014ca70 ecac8b10 80222940 00000000 dd536d38 df9f5fac 00000000 [ 334.379987][ T5337] 5f80: 00000000 00316308 00000036 8020029c 85dcec00 00000036 00000000 df9f5fa8 [ 334.380589][ T5337] 5fa0: 80200060 80573274 00000000 00000000 00000003 40946400 200000c0 00000000 [ 334.381076][ T5337] 5fc0: 00000000 00000000 00316308 00000036 00300000 00000000 00006364 76feb0bc [ 334.381498][ T5337] 5fe0: 76feaec0 76feaeb0 000195a4 00132510 60000010 00000003 00000000 00000000 [ 334.381871][ T5337] Call trace: [ 334.382224][ T5337] [<813bbab4>] (parport_attach) from [<813b7cc4>] (comedi_device_attach+0x108/0x250) [ 334.382828][ T5337] r6:84160284 r5:81e16fc4 r4:829cf9ac [ 334.383084][ T5337] [<813b7bbc>] (comedi_device_attach) from [<813b3810>] (do_devconfig_ioctl+0x100/0x220) [ 334.383473][ T5337] r10:00000003 r9:40946400 r8:85dcec00 r7:200000c0 r6:b5403587 r5:84160240 [ 334.383734][ T5337] r4:200000c0 [ 334.383866][ T5337] [<813b3710>] (do_devconfig_ioctl) from [<813b47dc>] (comedi_unlocked_ioctl+0x5dc/0x1c50) [ 334.384272][ T5337] r8:85dcec00 r7:200000c0 r6:200000c0 r5:84160240 r4:85b0a540 [ 334.384510][ T5337] [<813b4200>] (comedi_unlocked_ioctl) from [<80573398>] (sys_ioctl+0x130/0xba0) [ 334.384862][ T5337] r10:85dcec00 r9:00000003 r8:85b0a540 r7:200000c0 r6:85b0a541 r5:00000000 [ 334.385117][ T5337] r4:40946400 [ 334.385249][ T5337] [<80573268>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 334.385566][ T5337] Exception stack(0xdf9f5fa8 to 0xdf9f5ff0) [ 334.385775][ T5337] 5fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 334.386066][ T5337] 5fc0: 00000000 00000000 00316308 00000036 00300000 00000000 00006364 76feb0bc [ 334.386339][ T5337] 5fe0: 76feaec0 76feaeb0 000195a4 00132510 [ 334.386554][ T5337] r10:00000036 r9:85dcec00 r8:8020029c r7:00000036 r6:00316308 r5:00000000 [ 334.386806][ T5337] r4:00000000 [ 334.387180][ T5337] Code: e596306c e3a04000 e7f33053 e2433612 (e5c34000) [ 334.387802][ T5337] ---[ end trace 0000000000000000 ]--- [ 334.388530][ T5337] Kernel panic - not syncing: Fatal exception [ 334.390761][ T5337] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:13:56 Registers: info registers vcpu 0 CPU#0 R00=82801aec R01=00000000 R02=00000000 R03=8281b240 R04=00000000 R05=8389c094 R06=82801bf4 R07=8389c094 R08=8281b240 R09=00000000 R10=00000000 R11=82801c2c R12=82801a58 R13=82801bd8 R14=8173f840 R15=8158f7d8 PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=84391c40 R01=00000052 R02=eb87f000 R03=00000000 R04=832f4059 R05=84391c40 R06=80a85eac R07=832f4060 R08=82826f28 R09=00000000 R10=00000599 R11=df9f5924 R12=00000002 R13=df9f5918 R14=82958f94 R15=80a85f04 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000