last executing test programs: 2m4.653360306s ago: executing program 1 (id=2): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xd3, @time={0xffff, 0x6}, 0x0, {0x0, 0xfd}}) 2m3.829627052s ago: executing program 1 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "da2d7634feff5d2439726da4d3"}}}}, 0x3f) 2m3.302454149s ago: executing program 1 (id=5): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 1m30.611352746s ago: executing program 0 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m29.674174596s ago: executing program 0 (id=33): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000800)="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", 0x170, 0x801, 0x0, 0x0) 1m29.450719565s ago: executing program 0 (id=34): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00010100ff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m28.981203045s ago: executing program 0 (id=35): r0 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x29, 0xce, 0x0, &(0x7f0000000380)) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffdf}, {0xffff, 0xffff}, {0xb, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0x3ff}}], 0x18, 0x2004c0d5}, 0x0) 1m28.621159101s ago: executing program 0 (id=36): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="380000001014010029b57000fedbdf2508004b00130000000800030001000000080001000000000008004c000008000008004a000100"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) 1m28.522667874s ago: executing program 0 (id=37): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r5, 0x40084d0c, &(0x7f00000000c0)={0x1, 0x300, 0x0, 0x0}) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'netpci0\x00', &(0x7f0000000340)=@ethtool_eeprom={0xb, 0x6, 0x474a, 0x36, "19ece7b9affc9b88fafd117e7559e59ca20ba4a263349c5392c0b2f9bea9d1c7a74d01e2c011ba7ea8e71afb39d35c24e59df5acdbab"}}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) 1m18.203635856s ago: executing program 32 (id=5): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 43.208489268s ago: executing program 33 (id=37): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r5, 0x40084d0c, &(0x7f00000000c0)={0x1, 0x300, 0x0, 0x0}) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'netpci0\x00', &(0x7f0000000340)=@ethtool_eeprom={0xb, 0x6, 0x474a, 0x36, "19ece7b9affc9b88fafd117e7559e59ca20ba4a263349c5392c0b2f9bea9d1c7a74d01e2c011ba7ea8e71afb39d35c24e59df5acdbab"}}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) 8.530297217s ago: executing program 3 (id=125): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x1000000}, 0x14}}, 0x0) 7.962353027s ago: executing program 3 (id=127): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 7.170457501s ago: executing program 3 (id=128): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xbfffffffffffff20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) unshare(0x2e020080) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) 5.249557734s ago: executing program 3 (id=129): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 4.996865431s ago: executing program 2 (id=131): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)="aa", 0x1}], 0x1}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000040) 4.868421464s ago: executing program 3 (id=132): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 4.541037129s ago: executing program 3 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) 4.508209273s ago: executing program 2 (id=134): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 4.367321557s ago: executing program 2 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) 1.740074276s ago: executing program 2 (id=136): stat(&(0x7f00000000c0)='./file0/file0/../file0\x00', 0x0) 1.282209135s ago: executing program 2 (id=137): mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x101, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000500)) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=138): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) kernel console output (not intermixed with test programs): [ 44.165710][ T28] audit: type=1400 audit(44.090:91): avc: denied { read write } for pid=3092 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.166202][ T28] audit: type=1400 audit(44.090:92): avc: denied { open } for pid=3092 comm="scp" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:53691' (ED25519) to the list of known hosts. [ 61.223061][ T28] audit: type=1400 audit(61.150:93): avc: denied { name_bind } for pid=3095 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 62.681013][ T28] audit: type=1400 audit(62.610:94): avc: denied { execute } for pid=3096 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 62.777584][ T28] audit: type=1400 audit(62.670:95): avc: denied { execute_no_trans } for pid=3096 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 65.960306][ T28] audit: type=1400 audit(65.890:96): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.966706][ T28] audit: type=1400 audit(65.890:97): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.979971][ T3096] cgroup: Unknown subsys name 'net' [ 65.986840][ T28] audit: type=1400 audit(65.910:98): avc: denied { unmount } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.128715][ T3096] cgroup: Unknown subsys name 'cpuset' [ 66.134197][ T3096] cgroup: Unknown subsys name 'hugetlb' [ 66.135093][ T3096] cgroup: Unknown subsys name 'rlimit' [ 66.319553][ T28] audit: type=1400 audit(66.250:99): avc: denied { setattr } for pid=3096 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.321351][ T28] audit: type=1400 audit(66.250:100): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.324624][ T28] audit: type=1400 audit(66.250:101): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.517117][ T3098] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.520918][ T28] audit: type=1400 audit(66.450:102): avc: denied { relabelto } for pid=3098 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.525039][ T28] audit: type=1400 audit(66.450:103): avc: denied { write } for pid=3098 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 66.560475][ T28] audit: type=1400 audit(66.490:104): avc: denied { read } for pid=3096 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.560956][ T28] audit: type=1400 audit(66.490:105): avc: denied { open } for pid=3096 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 74.245463][ T3096] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.513465][ T28] audit: type=1400 audit(76.440:106): avc: denied { execmem } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.566299][ T28] audit: type=1400 audit(76.490:107): avc: denied { read } for pid=3101 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.569971][ T28] audit: type=1400 audit(76.500:108): avc: denied { open } for pid=3101 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.578619][ T28] audit: type=1400 audit(76.500:109): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 76.604012][ T28] audit: type=1400 audit(76.530:110): avc: denied { module_request } for pid=3101 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.604502][ T28] audit: type=1400 audit(76.530:111): avc: denied { module_request } for pid=3102 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.694821][ T28] audit: type=1400 audit(76.620:112): avc: denied { sys_module } for pid=3102 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.307002][ T28] audit: type=1400 audit(77.230:113): avc: denied { ioctl } for pid=3102 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=678 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.422981][ T3102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.432552][ T3101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.440761][ T3102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.443907][ T3101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.231354][ T3101] hsr_slave_0: entered promiscuous mode [ 79.235631][ T3101] hsr_slave_1: entered promiscuous mode [ 79.384259][ T3102] hsr_slave_0: entered promiscuous mode [ 79.385859][ T3102] hsr_slave_1: entered promiscuous mode [ 79.393201][ T3102] debugfs: 'hsr0' already exists in 'hsr' [ 79.395086][ T3102] Cannot create hsr debugfs directory [ 79.760607][ T28] audit: type=1400 audit(79.690:114): avc: denied { create } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.763804][ T28] audit: type=1400 audit(79.690:115): avc: denied { write } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.784282][ T3101] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.796531][ T3101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.809283][ T3101] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.820473][ T3101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.824060][ T3101] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.834333][ T3101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.847677][ T3101] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.851985][ T3101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.910059][ T3102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.915840][ T3102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.923722][ T3102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.933246][ T3102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.942090][ T3102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.948491][ T3102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.956831][ T3102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.964345][ T3102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.681666][ T3101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.790076][ T3102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.480800][ T3101] veth0_vlan: entered promiscuous mode [ 83.510010][ T3101] veth1_vlan: entered promiscuous mode [ 83.604180][ T3101] veth0_macvtap: entered promiscuous mode [ 83.632278][ T3101] veth1_macvtap: entered promiscuous mode [ 83.691294][ T3102] veth0_vlan: entered promiscuous mode [ 83.720871][ T3102] veth1_vlan: entered promiscuous mode [ 83.762668][ T2304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.771750][ T2304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.773156][ T2304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.779329][ T2304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.880190][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 83.880545][ T28] audit: type=1400 audit(83.800:117): avc: denied { mount } for pid=3101 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.885706][ T28] audit: type=1400 audit(83.810:118): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/syzkaller.x0Ku2i/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.895548][ T28] audit: type=1400 audit(83.820:119): avc: denied { mount } for pid=3101 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.902186][ T28] audit: type=1400 audit(83.830:120): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/syzkaller.x0Ku2i/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 83.905530][ T28] audit: type=1400 audit(83.830:121): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/syzkaller.x0Ku2i/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 83.916669][ T28] audit: type=1400 audit(83.840:122): avc: denied { unmount } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.928083][ T28] audit: type=1400 audit(83.850:123): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.928531][ T28] audit: type=1400 audit(83.850:124): avc: denied { mount } for pid=3101 comm="syz-executor" name="/" dev="gadgetfs" ino=3235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.928629][ T28] audit: type=1400 audit(83.860:125): avc: denied { mount } for pid=3101 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.933825][ T28] audit: type=1400 audit(83.860:126): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 83.951770][ T3102] veth0_macvtap: entered promiscuous mode [ 83.989078][ T3101] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.005301][ T3102] veth1_macvtap: entered promiscuous mode [ 84.095715][ T1220] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.096210][ T1220] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.096299][ T1220] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.096387][ T1220] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.922846][ T3714] fuse: Unknown parameter 'user_id00000000000000000000' [ 85.262477][ T3716] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4'. [ 85.340781][ T3716] syzkaller1: entered promiscuous mode [ 85.341420][ T3716] syzkaller1: entered allmulticast mode [ 88.658179][ T3651] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.808349][ T3651] usb 1-1: Using ep0 maxpacket: 8 [ 88.831820][ T3651] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.833047][ T3651] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.834407][ T3651] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 60960, setting to 1024 [ 88.835547][ T3651] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 88.836709][ T3651] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.838592][ T3651] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.839516][ T3651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.064140][ T3651] usb 1-1: GET_CAPABILITIES returned 0 [ 89.065205][ T3651] usbtmc 1-1:16.0: can't read capabilities [ 89.284412][ T3651] usb 1-1: USB disconnect, device number 2 [ 89.425752][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 89.426230][ T28] audit: type=1400 audit(89.350:140): avc: denied { setopt } for pid=3757 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.458444][ T28] audit: type=1400 audit(89.390:141): avc: denied { connect } for pid=3757 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.664799][ T28] audit: type=1400 audit(89.590:142): avc: denied { create } for pid=3759 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.781358][ T28] audit: type=1400 audit(89.700:143): avc: denied { write } for pid=3759 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.323557][ T28] audit: type=1400 audit(91.250:144): avc: denied { create } for pid=3765 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.370749][ T28] audit: type=1400 audit(91.300:145): avc: denied { write } for pid=3765 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.423501][ T28] audit: type=1400 audit(91.350:146): avc: denied { bind } for pid=3765 comm="syz.0.12" lport=33465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.424734][ T28] audit: type=1400 audit(91.350:147): avc: denied { node_bind } for pid=3765 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 92.316215][ T40] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.555488][ T40] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.555962][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 92.556338][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.556550][ T40] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.556783][ T40] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.557006][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.568809][ T40] usb 1-1: config 0 descriptor?? [ 92.589110][ T3768] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 93.269299][ T40] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 93.409328][ T40] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 93.555821][ T40] usb 1-1: USB disconnect, device number 3 [ 94.168243][ T40] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.318355][ T40] usb 1-1: Using ep0 maxpacket: 32 [ 94.355352][ T40] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 94.356698][ T40] usb 1-1: config 155 has 0 interfaces, different from the descriptor's value: 1 [ 94.379381][ T40] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 94.380807][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.385270][ T40] usb 1-1: Product: syz [ 94.388326][ T40] usb 1-1: Manufacturer: syz [ 94.390774][ T40] usb 1-1: SerialNumber: syz [ 105.142537][ T28] audit: type=1400 audit(105.070:148): avc: denied { bind } for pid=3791 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.168763][ T28] audit: type=1400 audit(105.100:149): avc: denied { name_bind } for pid=3791 comm="syz.0.14" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 105.169625][ T28] audit: type=1400 audit(105.100:150): avc: denied { node_bind } for pid=3791 comm="syz.0.14" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 108.823009][ T88] usb 1-1: USB disconnect, device number 4 [ 109.418304][ T28] audit: type=1400 audit(109.340:151): avc: denied { prog_load } for pid=3810 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 109.434428][ T28] audit: type=1400 audit(109.360:152): avc: denied { perfmon } for pid=3810 comm="syz.0.17" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.544365][ T28] audit: type=1400 audit(109.470:153): avc: denied { prog_run } for pid=3810 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.843612][ T3822] bond0: (slave bond_slave_0): Releasing backup interface [ 111.949595][ T3822] bond0: (slave bond_slave_1): Releasing backup interface [ 111.994848][ T3822] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.949879][ T28] audit: type=1400 audit(113.880:154): avc: denied { create } for pid=3831 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.070341][ T28] audit: type=1400 audit(114.000:155): avc: denied { create } for pid=3833 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.158491][ T28] audit: type=1400 audit(114.090:156): avc: denied { write } for pid=3833 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.802357][ T28] audit: type=1400 audit(114.730:157): avc: denied { read write } for pid=3835 comm="syz.0.27" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 114.806444][ T28] audit: type=1400 audit(114.730:158): avc: denied { open } for pid=3835 comm="syz.0.27" path="/23/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 119.524158][ T28] audit: type=1400 audit(119.450:159): avc: denied { ioctl } for pid=3860 comm="syz.0.34" path="socket:[2363]" dev="sockfs" ino=2363 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.014960][ T28] audit: type=1400 audit(119.940:160): avc: denied { getopt } for pid=3864 comm="syz.0.35" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.027049][ T28] audit: type=1400 audit(119.950:161): avc: denied { create } for pid=3864 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.032013][ T28] audit: type=1400 audit(119.960:162): avc: denied { bind } for pid=3864 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.174007][ T28] audit: type=1400 audit(120.100:163): avc: denied { write } for pid=3864 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.346810][ T28] audit: type=1400 audit(120.270:164): avc: denied { write } for pid=3870 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 124.628674][ T28] audit: type=1400 audit(124.540:165): avc: denied { map_create } for pid=3872 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 124.629069][ T28] audit: type=1400 audit(124.560:166): avc: denied { map_read map_write } for pid=3872 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 138.284151][ T3882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.300746][ T3882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.920568][ T3882] hsr_slave_0: entered promiscuous mode [ 140.922194][ T3882] hsr_slave_1: entered promiscuous mode [ 140.928258][ T3882] debugfs: 'hsr0' already exists in 'hsr' [ 140.928470][ T3882] Cannot create hsr debugfs directory [ 141.582178][ T3882] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 141.599238][ T3882] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.602643][ T3882] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 141.612356][ T3882] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.615890][ T3882] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 141.633111][ T3882] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.640433][ T3882] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 141.653221][ T3882] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 143.692551][ T3882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.279839][ T3882] veth0_vlan: entered promiscuous mode [ 150.338925][ T3882] veth1_vlan: entered promiscuous mode [ 150.489123][ T3882] veth0_macvtap: entered promiscuous mode [ 150.518703][ T3882] veth1_macvtap: entered promiscuous mode [ 150.626629][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.630989][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.631227][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.631359][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.295428][ T28] audit: type=1400 audit(151.220:167): avc: denied { connect } for pid=4187 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.758314][ T4191] Zero length message leads to an empty skb [ 151.969211][ T28] audit: type=1400 audit(151.840:168): avc: denied { create } for pid=4192 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.290703][ T28] audit: type=1400 audit(155.220:169): avc: denied { append } for pid=4204 comm="syz.2.44" name="audio" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.573134][ T1220] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.652707][ T1220] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.726777][ T1220] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.811883][ T1220] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.385171][ T1220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.393036][ T1220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.401320][ T1220] bond0 (unregistering): Released all slaves [ 162.492501][ T1220] hsr_slave_0: left promiscuous mode [ 162.502112][ T1220] hsr_slave_1: left promiscuous mode [ 162.522842][ T1220] veth1_macvtap: left promiscuous mode [ 162.523962][ T1220] veth0_macvtap: left promiscuous mode [ 162.528667][ T1220] veth1_vlan: left promiscuous mode [ 162.529732][ T1220] veth0_vlan: left promiscuous mode [ 164.683565][ T28] audit: type=1400 audit(164.610:170): avc: denied { setopt } for pid=4240 comm="syz.2.51" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.714086][ T4241] pim6reg: entered allmulticast mode [ 166.287541][ T28] audit: type=1400 audit(166.210:171): avc: denied { write } for pid=4253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.560920][ T4272] syz.2.57 uses obsolete (PF_INET,SOCK_PACKET) [ 167.853673][ T28] audit: type=1400 audit(167.780:172): avc: denied { write } for pid=4261 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.379728][ T2957] 8021q: adding VLAN 0 to HW filter on device eth1 [ 169.895513][ T28] audit: type=1400 audit(169.820:173): avc: denied { write } for pid=4330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.932325][ T28] audit: type=1400 audit(169.860:174): avc: denied { write } for pid=4295 comm="syz.2.58" path="socket:[4272]" dev="sockfs" ino=4272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.937875][ T28] audit: type=1400 audit(169.860:175): avc: denied { connect } for pid=4295 comm="syz.2.58" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.001123][ T28] audit: type=1400 audit(170.930:176): avc: denied { write } for pid=4384 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.003148][ T28] audit: type=1400 audit(170.930:177): avc: denied { nlmsg_write } for pid=4384 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.138369][ T28] audit: type=1400 audit(171.060:178): avc: denied { write } for pid=4383 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.506926][ T2957] 8021q: adding VLAN 0 to HW filter on device eth2 [ 172.272008][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.288784][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.772137][ T1220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.940504][ T1220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.034180][ T1220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.121329][ T1220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.244092][ T28] audit: type=1400 audit(173.170:179): avc: denied { write } for pid=4432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.482806][ T1220] bond0 (unregistering): Released all slaves [ 173.616905][ T1220] hsr_slave_0: left promiscuous mode [ 173.639851][ T1220] hsr_slave_1: left promiscuous mode [ 173.662704][ T1220] veth1_macvtap: left promiscuous mode [ 173.663209][ T1220] veth0_macvtap: left promiscuous mode [ 173.663688][ T1220] veth1_vlan: left promiscuous mode [ 173.663810][ T1220] veth0_vlan: left promiscuous mode [ 173.842166][ T28] audit: type=1400 audit(173.770:180): avc: denied { write } for pid=4468 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.480204][ T2957] 8021q: adding VLAN 0 to HW filter on device eth3 [ 174.611204][ T4252] hsr_slave_0: entered promiscuous mode [ 174.615802][ T4252] hsr_slave_1: entered promiscuous mode [ 175.365390][ T4252] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.382185][ T4252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.385745][ T4252] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.402621][ T4252] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.410909][ T4252] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.425645][ T4252] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.439920][ T4252] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.449831][ T4252] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.571221][ T28] audit: type=1400 audit(175.500:181): avc: denied { write } for pid=4542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.080638][ T28] audit: type=1400 audit(176.010:182): avc: denied { write } for pid=4585 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.366685][ T2957] 8021q: adding VLAN 0 to HW filter on device eth4 [ 176.478463][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.415193][ T4601] syzkaller1: entered promiscuous mode [ 177.420246][ T4601] syzkaller1: entered allmulticast mode [ 177.812543][ T28] audit: type=1400 audit(177.740:183): avc: denied { create } for pid=4610 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 177.954455][ T28] audit: type=1400 audit(177.880:184): avc: denied { create } for pid=4610 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 177.964100][ T28] audit: type=1400 audit(177.890:185): avc: denied { setopt } for pid=4610 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 177.979067][ T28] audit: type=1400 audit(177.910:186): avc: denied { accept } for pid=4610 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 178.158605][ T28] audit: type=1400 audit(178.080:187): avc: denied { write } for pid=4606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.722013][ T28] audit: type=1400 audit(178.650:188): avc: denied { write } for pid=4621 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.903171][ T28] audit: type=1400 audit(178.830:189): avc: denied { allowed } for pid=4626 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 178.910082][ T28] audit: type=1400 audit(178.830:190): avc: denied { create } for pid=4626 comm="syz.2.64" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.969016][ T2957] 8021q: adding VLAN 0 to HW filter on device eth5 [ 180.340715][ T2957] 8021q: adding VLAN 0 to HW filter on device eth6 [ 180.519315][ T4658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.522934][ T4658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.153250][ T4252] veth0_vlan: entered promiscuous mode [ 181.175902][ T4252] veth1_vlan: entered promiscuous mode [ 181.292403][ T4252] veth0_macvtap: entered promiscuous mode [ 181.314332][ T4252] veth1_macvtap: entered promiscuous mode [ 181.333377][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 181.334281][ T28] audit: type=1400 audit(181.260:195): avc: denied { write } for pid=4669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.424335][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.425638][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.431663][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.434032][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.744652][ T28] audit: type=1400 audit(181.670:196): avc: denied { write } for pid=4673 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.993384][ T4679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.998998][ T4679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.129873][ T2957] 8021q: adding VLAN 0 to HW filter on device eth7 [ 182.678041][ T28] audit: type=1400 audit(182.600:197): avc: denied { block_suspend } for pid=4694 comm="syz.2.76" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.899336][ T28] audit: type=1400 audit(182.820:198): avc: denied { write } for pid=4693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.962560][ T28] audit: type=1400 audit(182.890:199): avc: denied { create } for pid=4705 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 182.994333][ T28] audit: type=1400 audit(182.920:200): avc: denied { write } for pid=4705 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.065883][ T28] audit: type=1400 audit(182.990:201): avc: denied { bind } for pid=4707 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 183.220946][ T28] audit: type=1400 audit(183.150:202): avc: denied { write } for pid=4710 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.368493][ T2957] 8021q: adding VLAN 0 to HW filter on device eth8 [ 183.598672][ T28] audit: type=1400 audit(183.530:203): avc: denied { getopt } for pid=4719 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 184.602283][ T28] audit: type=1400 audit(184.530:204): avc: denied { read } for pid=4737 comm="syz.3.85" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.794946][ T4764] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 187.082967][ T4770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.084940][ T4770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.193108][ T4774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.195526][ T4774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.100056][ T28] audit: type=1400 audit(189.030:205): avc: denied { write } for pid=4796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.407542][ T28] audit: type=1400 audit(189.330:206): avc: denied { write } for pid=4799 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.529103][ T28] audit: type=1326 audit(189.450:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.3.98" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 189.530898][ T28] audit: type=1326 audit(189.450:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.3.98" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 189.532803][ T28] audit: type=1326 audit(189.450:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.3.98" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 189.534713][ T28] audit: type=1326 audit(189.450:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.3.98" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 189.536700][ T28] audit: type=1326 audit(189.440:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.3.98" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 189.537442][ T28] audit: type=1326 audit(189.460:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.3.98" exe="/syz-executor" sig=0 arch=40000028 syscall=39 compat=0 ip=0x130810 code=0x7ffc0000 [ 189.539073][ T28] audit: type=1326 audit(189.460:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.3.98" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 189.540814][ T28] audit: type=1326 audit(189.460:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.3.98" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 193.730654][ T4858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.731783][ T4858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.320180][ T4866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.116'. [ 195.659181][ T4873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.662218][ T4873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.151894][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 196.152147][ T28] audit: type=1400 audit(196.080:323): avc: denied { setopt } for pid=4876 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.877909][ T28] audit: type=1400 audit(197.800:324): avc: denied { write } for pid=4882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.396922][ T28] audit: type=1400 audit(199.320:325): avc: denied { write } for pid=4890 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.631897][ T28] audit: type=1400 audit(200.560:326): avc: denied { ioctl } for pid=4895 comm="syz.2.124" path="ipc:[4026532956]" dev="nsfs" ino=4026532956 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 201.220267][ T28] audit: type=1400 audit(201.150:327): avc: denied { write } for pid=4897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.804544][ T28] audit: type=1400 audit(201.730:328): avc: denied { write } for pid=4908 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.565370][ T28] audit: type=1400 audit(202.490:329): avc: denied { write } for pid=4915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.999225][ T28] audit: type=1400 audit(202.910:330): avc: denied { write } for pid=4918 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.510536][ T28] audit: type=1400 audit(203.440:331): avc: denied { write } for pid=4921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.137875][ T28] audit: type=1400 audit(204.050:332): avc: denied { write } for pid=4925 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.838524][ T28] audit: type=1400 audit(204.770:333): avc: denied { write } for pid=4941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.074079][ T28] audit: type=1400 audit(205.000:334): avc: denied { write } for pid=4946 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.723304][ T28] audit: type=1400 audit(205.650:335): avc: denied { write } for pid=4950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.824659][ T4951] *** NOT YET: opcode c3 *** [ 206.051131][ T28] audit: type=1400 audit(205.980:336): avc: denied { write } for pid=4954 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.038240][ T4965] ------------[ cut here ]------------ [ 209.039242][ T4965] WARNING: fs/exec.c:118 at path_noexec+0x80/0x88, CPU#1: syz.2.138/4965 [ 209.043780][ T4965] Modules linked in: [ 209.045406][ T4965] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 209.046827][ T4965] CPU: 1 UID: 0 PID: 4965 Comm: syz.2.138 Not tainted syzkaller #0 PREEMPT [ 209.047363][ T4965] Hardware name: ARM-Versatile Express [ 209.047877][ T4965] Call trace: [ 209.048375][ T4965] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 209.049010][ T4965] r7:82a1eab8 r6:00000000 r5:8231e02c r4:00000001 [ 209.049396][ T4965] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 209.049807][ T4965] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 209.050179][ T4965] r7:82a1eab8 r6:00000000 r5:840fa580 r4:82c7bd3c [ 209.050466][ T4965] [<8021e390>] (dump_stack) from [<8020260c>] (vpanic+0x114/0x320) [ 209.050786][ T4965] [<802024f8>] (vpanic) from [<8020284c>] (trace_suspend_resume+0x0/0x104) [ 209.051125][ T4965] r7:80590d98 [ 209.051282][ T4965] [<80202818>] (panic) from [<80250844>] (get_taint+0x0/0x1c) [ 209.051636][ T4965] r3:82a0b544 r2:00000001 r1:82304af4 r0:8230c3f0 [ 209.051913][ T4965] [<802507cc>] (check_panic_on_warn) from [<802509c0>] (__warn+0x98/0x1ac) [ 209.052257][ T4965] [<80250928>] (__warn) from [<80250c4c>] (warn_slowpath_fmt+0x178/0x1f4) [ 209.052638][ T4965] r8:00000009 r7:82340648 r6:dfb39e4c r5:840fa580 r4:00000000 [ 209.052923][ T4965] [<80250ad8>] (warn_slowpath_fmt) from [<80590d98>] (path_noexec+0x80/0x88) [ 209.053360][ T4965] r10:859bf180 r9:8485c780 r8:840fa580 r7:20000000 r6:00000001 r5:00010012 [ 209.053739][ T4965] r4:859bf1a8 [ 209.053918][ T4965] [<80590d18>] (path_noexec) from [<804fa728>] (do_mmap+0x334/0x53c) [ 209.054257][ T4965] r5:00010012 r4:00400000 [ 209.054490][ T4965] [<804fa3f4>] (do_mmap) from [<804c3678>] (vm_mmap_pgoff+0x128/0x20c) [ 209.054860][ T4965] r10:8485c780 r9:20000000 r8:00400000 r7:dfb39f18 r6:859bf180 r5:00000001 [ 209.055281][ T4965] r4:00000000 [ 209.055474][ T4965] [<804c3550>] (vm_mmap_pgoff) from [<804f9be8>] (ksys_mmap_pgoff+0xa4/0xec) [ 209.055914][ T4965] r10:000000c0 r9:840fa580 r8:859bf180 r7:20000000 r6:00400000 r5:00000001 [ 209.056367][ T4965] r4:00010012 [ 209.056611][ T4965] [<804f9b44>] (ksys_mmap_pgoff) from [<804f9c4c>] (sys_mmap_pgoff+0x1c/0x24) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 209.057278][ T4965] r8:8020029c r7:000000c0 r6:0034631c r5:00000000 r4:00000003 [ 209.057583][ T4965] [<804f9c30>] (sys_mmap_pgoff) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 209.058028][ T4965] Exception stack(0xdfb39fa8 to 0xdfb39ff0) [ 209.058419][ T4965] 9fa0: 00000003 00000000 20000000 00400000 00000001 00010012 [ 209.058851][ T4965] 9fc0: 00000003 00000000 0034631c 000000c0 003462d8 00000000 00000001 76f8f0dc [ 209.059276][ T4965] 9fe0: 76f8ee88 76f8ee78 00018ebc 00130810 [ 209.063365][ T4965] Rebooting in 86400 seconds..