last executing test programs: 2m5.838425172s ago: executing program 1 (id=771): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m5.597521381s ago: executing program 1 (id=772): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)="42f7"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2m5.38504385s ago: executing program 1 (id=773): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x400}, 0x1c) 2m5.036381224s ago: executing program 1 (id=774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4010}, 0x18) 2m4.684546418s ago: executing program 1 (id=775): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x0) 2m4.330075402s ago: executing program 1 (id=776): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xc00}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xfffffff8}]}}]}, 0x40}}, 0x0) r10 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x40) syz_open_dev$usbfs(&(0x7f0000000380), 0x200, 0x2002) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f0000000140)) 1m18.27376328s ago: executing program 32 (id=776): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xc00}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xfffffff8}]}}]}, 0x40}}, 0x0) r10 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x40) syz_open_dev$usbfs(&(0x7f0000000380), 0x200, 0x2002) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f0000000140)) 10.115980134s ago: executing program 2 (id=803): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x5335, 0x4) 9.289919378s ago: executing program 2 (id=805): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 8.445795231s ago: executing program 2 (id=807): bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=@base={0x6, 0x4, 0x8000, 0x5c, 0x180, 0xffffffffffffffff, 0x10000000, '\x00', 0x0, 0xffffffffffffffff, 0x20, 0x2}, 0x50) 7.71520682s ago: executing program 2 (id=809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x14, 0x6, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) 6.560494397s ago: executing program 2 (id=810): syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.990385639s ago: executing program 2 (id=811): memfd_create(0x0, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) dup3(r0, r0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4008004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003000a000000010000004d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 3.614029655s ago: executing program 0 (id=814): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffe71) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x2133, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.117599345s ago: executing program 0 (id=815): syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.687901062s ago: executing program 0 (id=816): setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000000)=0x5335, 0x4) 2.106508266s ago: executing program 0 (id=817): openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000002480), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002500), 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000039800)={{0x12, 0x1, 0x250, 0xdf, 0xeb, 0xd5, 0x8, 0x424, 0xcf30, 0x3109, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x9, 0xaaa045ba821a7990, 0xf, [{{0x9, 0x4, 0x2c, 0xbe, 0x0, 0x30, 0x4e, 0xfd, 0x4}}]}}]}}, &(0x7f0000039b00)={0x0, 0x0, 0x0, 0x0}) 449.680842ms ago: executing program 0 (id=818): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r1, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r1, r1, 0x2f, 0x202c, 0x4, @void, @void, @value=r2}, 0x20) 0s ago: executing program 0 (id=819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) unshare(0x64000600) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:64862' (ED25519) to the list of known hosts. [ 212.760517][ T30] audit: type=1400 audit(212.340:46): avc: denied { name_bind } for pid=3318 comm="sshd-session" src=30004 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 213.300550][ T30] audit: type=1400 audit(212.880:47): avc: denied { execute } for pid=3319 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 213.305792][ T30] audit: type=1400 audit(212.880:48): avc: denied { execute_no_trans } for pid=3319 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 219.506578][ T30] audit: type=1400 audit(219.080:49): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 219.558150][ T30] audit: type=1400 audit(219.130:50): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 219.631218][ T3319] cgroup: Unknown subsys name 'net' [ 219.683212][ T30] audit: type=1400 audit(219.260:51): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 219.993172][ T3319] cgroup: Unknown subsys name 'cpuset' [ 220.054903][ T3319] cgroup: Unknown subsys name 'rlimit' [ 220.482591][ T30] audit: type=1400 audit(220.060:52): avc: denied { setattr } for pid=3319 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.493505][ T30] audit: type=1400 audit(220.070:53): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 220.502885][ T30] audit: type=1400 audit(220.080:54): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 221.262000][ T3321] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 221.268302][ T30] audit: type=1400 audit(220.840:55): avc: denied { relabelto } for pid=3321 comm="mkswap" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 221.276002][ T30] audit: type=1400 audit(220.850:56): avc: denied { write } for pid=3321 comm="mkswap" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 221.398756][ T30] audit: type=1400 audit(220.970:57): avc: denied { read } for pid=3319 comm="syz-executor" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 221.402028][ T30] audit: type=1400 audit(220.980:58): avc: denied { open } for pid=3319 comm="syz-executor" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 221.444048][ T3319] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 236.286271][ T30] audit: type=1400 audit(235.860:59): avc: denied { execmem } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 236.386190][ T30] audit: type=1400 audit(235.960:60): avc: denied { read } for pid=3324 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 236.393114][ T30] audit: type=1400 audit(235.960:61): avc: denied { open } for pid=3324 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 236.408587][ T30] audit: type=1400 audit(235.980:62): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 236.496276][ T30] audit: type=1400 audit(236.070:63): avc: denied { module_request } for pid=3324 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 236.691383][ T30] audit: type=1400 audit(236.250:64): avc: denied { sys_module } for pid=3324 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 243.821371][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.856428][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.842760][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.884590][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.475803][ T3325] hsr_slave_0: entered promiscuous mode [ 247.496152][ T3325] hsr_slave_1: entered promiscuous mode [ 248.852065][ T3324] hsr_slave_0: entered promiscuous mode [ 248.861728][ T3324] hsr_slave_1: entered promiscuous mode [ 248.869648][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 248.872396][ T3324] Cannot create hsr debugfs directory [ 250.732110][ T30] audit: type=1400 audit(250.310:65): avc: denied { create } for pid=3325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 250.735722][ T30] audit: type=1400 audit(250.310:66): avc: denied { write } for pid=3325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 250.748149][ T30] audit: type=1400 audit(250.320:67): avc: denied { read } for pid=3325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 250.822583][ T3325] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.922041][ T3325] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.961604][ T3325] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 251.084964][ T3325] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 251.475920][ T3324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.515891][ T3324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.596958][ T3324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 251.641159][ T3324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 254.733242][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.005276][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.670614][ T3324] veth0_vlan: entered promiscuous mode [ 266.782842][ T3324] veth1_vlan: entered promiscuous mode [ 267.052818][ T3324] veth0_macvtap: entered promiscuous mode [ 267.091131][ T3324] veth1_macvtap: entered promiscuous mode [ 267.725545][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.735517][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.739323][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.741461][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.956005][ T3325] veth0_vlan: entered promiscuous mode [ 268.326168][ T3325] veth1_vlan: entered promiscuous mode [ 268.468855][ T30] audit: type=1400 audit(268.030:68): avc: denied { mount } for pid=3324 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 268.492203][ T30] audit: type=1400 audit(268.070:69): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/syzkaller.s8bFrq/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 268.524027][ T30] audit: type=1400 audit(268.100:70): avc: denied { mount } for pid=3324 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 268.567006][ T30] audit: type=1400 audit(268.140:71): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/syzkaller.s8bFrq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 268.585915][ T30] audit: type=1400 audit(268.160:72): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/syzkaller.s8bFrq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 268.672754][ T30] audit: type=1400 audit(268.250:73): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 268.804581][ T30] audit: type=1400 audit(268.380:74): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 268.858220][ T30] audit: type=1400 audit(268.430:75): avc: denied { mount } for pid=3324 comm="syz-executor" name="/" dev="gadgetfs" ino=3027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 268.904502][ T30] audit: type=1400 audit(268.480:76): avc: denied { mount } for pid=3324 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 268.914752][ T30] audit: type=1400 audit(268.490:77): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 269.120420][ T3325] veth0_macvtap: entered promiscuous mode [ 269.184360][ T3325] veth1_macvtap: entered promiscuous mode [ 269.234164][ T3324] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 269.596568][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.598197][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.598437][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.598653][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.864149][ T3472] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 273.943691][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 273.955046][ T30] audit: type=1400 audit(273.520:87): avc: denied { read write } for pid=3478 comm="syz.0.5" name="fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 273.955631][ T30] audit: type=1400 audit(273.530:88): avc: denied { open } for pid=3478 comm="syz.0.5" path="/dev/fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 274.663652][ T30] audit: type=1400 audit(274.240:89): avc: denied { read write } for pid=3482 comm="syz.1.6" name="rdma_cm" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 274.685774][ T30] audit: type=1400 audit(274.240:90): avc: denied { open } for pid=3482 comm="syz.1.6" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 275.371099][ T30] audit: type=1400 audit(274.950:91): avc: denied { read write } for pid=3487 comm="syz.1.8" name="udmabuf" dev="devtmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.373399][ T30] audit: type=1400 audit(274.950:92): avc: denied { open } for pid=3487 comm="syz.1.8" path="/dev/udmabuf" dev="devtmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.413271][ T30] audit: type=1400 audit(274.990:93): avc: denied { ioctl } for pid=3487 comm="syz.1.8" path="/dev/udmabuf" dev="devtmpfs" ino=677 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.986012][ T30] audit: type=1400 audit(275.560:94): avc: denied { ioctl } for pid=3491 comm="syz.1.10" path="socket:[4103]" dev="sockfs" ino=4103 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 276.238140][ T30] audit: type=1400 audit(275.810:95): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 276.375100][ T30] audit: type=1400 audit(275.950:96): avc: denied { mounton } for pid=3494 comm="syz.1.11" path="/6/file0" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 277.056271][ T3501] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 285.914404][ T30] audit: type=1400 audit(285.490:97): avc: denied { create } for pid=3533 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 285.982643][ T30] audit: type=1400 audit(285.560:98): avc: denied { setopt } for pid=3533 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 286.617973][ T30] audit: type=1400 audit(286.190:99): avc: denied { create } for pid=3535 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 286.629675][ T30] audit: type=1400 audit(286.210:100): avc: denied { bind } for pid=3535 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 286.642678][ T30] audit: type=1400 audit(286.220:101): avc: denied { listen } for pid=3535 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 286.649891][ T30] audit: type=1400 audit(286.220:102): avc: denied { accept } for pid=3535 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 302.800475][ T30] audit: type=1400 audit(302.370:103): avc: denied { prog_load } for pid=3548 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 302.801691][ T30] audit: type=1400 audit(302.370:104): avc: denied { bpf } for pid=3548 comm="syz.0.34" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 302.824385][ T30] audit: type=1400 audit(302.400:105): avc: denied { perfmon } for pid=3548 comm="syz.0.34" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 302.908347][ T30] audit: type=1400 audit(302.470:106): avc: denied { create } for pid=3548 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 303.058227][ T30] audit: type=1400 audit(302.630:107): avc: denied { write } for pid=3548 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 319.363934][ T30] audit: type=1400 audit(318.930:108): avc: denied { read write } for pid=3566 comm="syz.0.41" name="vhost-net" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 319.389626][ T30] audit: type=1400 audit(318.960:109): avc: denied { open } for pid=3566 comm="syz.0.41" path="/dev/vhost-net" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 319.421021][ T30] audit: type=1400 audit(319.000:110): avc: denied { ioctl } for pid=3566 comm="syz.0.41" path="/dev/vhost-net" dev="devtmpfs" ino=714 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 319.511140][ T30] audit: type=1400 audit(319.090:111): avc: denied { create } for pid=3566 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 321.018786][ T30] audit: type=1400 audit(320.590:112): avc: denied { create } for pid=3573 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 321.049777][ T30] audit: type=1400 audit(320.610:113): avc: denied { getopt } for pid=3573 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 329.571254][ T30] audit: type=1400 audit(329.150:114): avc: denied { map_create } for pid=3586 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 329.646618][ T30] audit: type=1400 audit(329.210:115): avc: denied { map_read map_write } for pid=3586 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 329.723743][ T30] audit: type=1400 audit(329.300:116): avc: denied { bind } for pid=3586 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 329.761954][ T30] audit: type=1400 audit(329.340:117): avc: denied { allowed } for pid=3586 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 329.838318][ T30] audit: type=1400 audit(329.400:118): avc: denied { create } for pid=3586 comm="syz.0.49" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 329.891440][ T30] audit: type=1400 audit(329.470:119): avc: denied { map } for pid=3586 comm="syz.0.49" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 329.894955][ T30] audit: type=1400 audit(329.470:120): avc: denied { read write } for pid=3586 comm="syz.0.49" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 330.030623][ T30] audit: type=1400 audit(329.560:121): avc: denied { accept } for pid=3586 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 345.882678][ T3597] Zero length message leads to an empty skb [ 360.708011][ T30] audit: type=1400 audit(360.280:122): avc: denied { create } for pid=3622 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 360.734098][ T30] audit: type=1400 audit(360.310:123): avc: denied { write } for pid=3622 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 361.559521][ T3626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.575019][ T3626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.954083][ T3644] syz_tun: entered allmulticast mode [ 381.324492][ T3642] syz_tun: left allmulticast mode [ 383.279699][ T30] audit: type=1400 audit(382.850:124): avc: denied { read } for pid=3649 comm="syz.1.72" name="card1" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 383.280670][ T30] audit: type=1400 audit(382.850:125): avc: denied { open } for pid=3649 comm="syz.1.72" path="/dev/dri/card1" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 383.388252][ T30] audit: type=1400 audit(382.960:126): avc: denied { ioctl } for pid=3649 comm="syz.1.72" path="/dev/dri/card1" dev="devtmpfs" ino=618 ioctlcmd=0x64c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 385.263356][ T3655] syz_tun: entered allmulticast mode [ 385.355230][ T3654] syz_tun: left allmulticast mode [ 386.122285][ T30] audit: type=1400 audit(385.700:127): avc: denied { prog_run } for pid=3656 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 387.209649][ T30] audit: type=1400 audit(386.780:128): avc: denied { read write } for pid=3661 comm="syz.1.77" name="uinput" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 387.210472][ T30] audit: type=1400 audit(386.780:129): avc: denied { open } for pid=3661 comm="syz.1.77" path="/dev/uinput" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 387.259523][ T30] audit: type=1400 audit(386.830:130): avc: denied { ioctl } for pid=3661 comm="syz.1.77" path="/dev/uinput" dev="devtmpfs" ino=707 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 387.355466][ T3662] input: syz1 as /devices/virtual/input/input1 [ 389.966860][ T30] audit: type=1400 audit(389.540:131): avc: denied { create } for pid=3669 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 394.673313][ T3685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.681737][ T3685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.881551][ T3690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.88'. [ 395.885832][ T3690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 395.890144][ T3690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 396.460580][ T30] audit: type=1400 audit(396.030:132): avc: denied { read } for pid=3691 comm="syz.1.89" name="rtc0" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 396.461482][ T30] audit: type=1400 audit(396.030:133): avc: denied { open } for pid=3691 comm="syz.1.89" path="/dev/rtc0" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 396.496826][ T30] audit: type=1400 audit(396.070:134): avc: denied { ioctl } for pid=3691 comm="syz.1.89" path="/dev/rtc0" dev="devtmpfs" ino=708 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 402.794111][ T30] audit: type=1400 audit(402.370:135): avc: denied { setopt } for pid=3714 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 405.922399][ T3731] syz.1.106 uses obsolete (PF_INET,SOCK_PACKET) [ 411.211553][ T30] audit: type=1400 audit(410.790:136): avc: denied { setopt } for pid=3742 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 419.250202][ T30] audit: type=1400 audit(418.830:137): avc: denied { kexec_image_load } for pid=3756 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 422.292586][ T3769] fuse: Bad value for 'fd' [ 422.390022][ T3769] fuse: Bad value for 'fd' [ 430.582739][ T3783] fuse: Bad value for 'fd' [ 430.650444][ T3783] fuse: Bad value for 'fd' [ 440.421578][ T3800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.135'. [ 442.304506][ T3805] netlink: 128 bytes leftover after parsing attributes in process `syz.0.137'. [ 442.312808][ T3805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 443.763912][ T30] audit: type=1400 audit(443.340:138): avc: denied { read } for pid=3810 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 446.578577][ T30] audit: type=1400 audit(446.150:139): avc: denied { execute } for pid=3820 comm="syz.0.145" path="/74/cpu.stat" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 448.124398][ T30] audit: type=1400 audit(447.700:140): avc: denied { mounton } for pid=3825 comm="syz.0.148" path="/76/file0" dev="tmpfs" ino=407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 451.331071][ T3835] fuse: Bad value for 'fd' [ 469.489553][ T30] audit: type=1400 audit(469.010:141): avc: denied { create } for pid=3855 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 469.504875][ T30] audit: type=1400 audit(469.080:142): avc: denied { bind } for pid=3855 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 469.543316][ T30] audit: type=1400 audit(469.120:143): avc: denied { listen } for pid=3855 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 469.556436][ T30] audit: type=1400 audit(469.130:144): avc: denied { sqpoll } for pid=3855 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 471.144256][ T30] audit: type=1400 audit(470.720:145): avc: denied { write } for pid=3853 comm="syz.1.157" name="snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 471.153821][ T30] audit: type=1400 audit(470.720:146): avc: denied { open } for pid=3853 comm="syz.1.157" path="/dev/snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 471.159252][ T3866] random: crng reseeded on system resumption [ 471.230967][ T30] audit: type=1400 audit(470.800:147): avc: denied { create } for pid=3853 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 471.245553][ T30] audit: type=1400 audit(470.820:148): avc: denied { ioctl } for pid=3853 comm="syz.1.157" path="/dev/snapshot" dev="devtmpfs" ino=85 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 471.274665][ T30] audit: type=1400 audit(470.850:149): avc: denied { create } for pid=3853 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 471.318644][ T30] audit: type=1400 audit(470.890:150): avc: denied { bind } for pid=3853 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 475.036986][ T3873] fuse: Bad value for 'fd' [ 475.083042][ T3873] fuse: Bad value for 'fd' [ 485.133858][ T3886] fuse: Bad value for 'fd' [ 485.224013][ T3886] fuse: Bad value for 'fd' [ 485.738940][ T3888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.765161][ T3888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.895895][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 485.900534][ T30] audit: type=1400 audit(485.470:154): avc: denied { ioctl } for pid=3887 comm="syz.1.170" path="socket:[5836]" dev="sockfs" ino=5836 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 485.911595][ T30] audit: type=1400 audit(485.490:155): avc: denied { bind } for pid=3887 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 488.202218][ T3896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.238661][ T3896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.720223][ T3907] capability: warning: `syz.1.179' uses deprecated v2 capabilities in a way that may be insecure [ 508.898148][ T30] audit: type=1400 audit(508.470:156): avc: denied { read } for pid=3955 comm="syz.1.198" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 508.898661][ T30] audit: type=1400 audit(508.470:157): avc: denied { open } for pid=3955 comm="syz.1.198" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 508.949155][ T30] audit: type=1400 audit(508.530:158): avc: denied { ioctl } for pid=3955 comm="syz.1.198" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 508.963333][ T30] audit: type=1400 audit(508.540:159): avc: denied { set_context_mgr } for pid=3955 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 509.027852][ T30] audit: type=1400 audit(508.600:160): avc: denied { map } for pid=3955 comm="syz.1.198" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 509.056132][ T3956] binder: 3955:3956 tried to acquire reference to desc 0, got 1 instead [ 509.066464][ T3956] binder: 3955:3956 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 509.071367][ T3956] binder: 3956 RLIMIT_NICE not set [ 509.599194][ T30] audit: type=1400 audit(509.170:161): avc: denied { call } for pid=3955 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 509.610066][ T3956] binder: 3956 RLIMIT_NICE not set [ 509.635650][ T3411] binder: release 3955:3957 transaction 5 out, still active [ 509.641818][ T3411] binder: undelivered TRANSACTION_COMPLETE [ 509.674451][ T3411] binder: release 3955:3956 transaction 5 in, still active [ 509.681122][ T3411] binder: send failed reply for transaction 5, target dead [ 513.501194][ T30] audit: type=1326 audit(513.070:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.0.201" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x125d44 code=0x7ffc0000 [ 513.505025][ T30] audit: type=1326 audit(513.070:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.0.201" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x132510 code=0x7ffc0000 [ 513.560477][ T30] audit: type=1326 audit(513.140:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.0.201" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x132510 code=0x7ffc0000 [ 513.609016][ T30] audit: type=1326 audit(513.170:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.0.201" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x125d44 code=0x7ffc0000 [ 536.760681][ T4006] binder: 4005:4006 tried to acquire reference to desc 0, got 1 instead [ 540.380664][ T4018] binder: tried to use weak ref as strong ref [ 540.381405][ T4018] binder: 4016:4018 Acquire 1 refcount change on invalid ref 0 ret -22 [ 560.143749][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 560.144541][ T30] audit: type=1400 audit(559.720:170): avc: denied { write } for pid=4050 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 560.868657][ T30] audit: type=1400 audit(560.440:171): avc: denied { ioctl } for pid=4055 comm="syz.0.237" path="socket:[6146]" dev="sockfs" ino=6146 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 560.919872][ T30] audit: type=1400 audit(560.490:172): avc: denied { bind } for pid=4055 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 561.134741][ T30] audit: type=1400 audit(560.710:173): avc: denied { mount } for pid=4057 comm="syz.1.238" name="/" dev="autofs" ino=6158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 561.198289][ T30] audit: type=1400 audit(560.770:174): avc: denied { unmount } for pid=4057 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 561.642787][ T30] audit: type=1400 audit(561.220:175): avc: denied { write } for pid=4055 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 563.903291][ T4074] binder: 4071:4074 Acquire 1 refcount change on invalid ref 0 ret -22 [ 567.272485][ T4090] fuse: Bad value for 'fd' [ 584.526083][ T4106] fuse: Bad value for 'fd' [ 592.415946][ T4121] fuse: Bad value for 'fd' [ 594.400723][ T30] audit: type=1400 audit(593.980:176): avc: denied { read } for pid=4132 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 597.325176][ T30] audit: type=1400 audit(596.900:177): avc: denied { create } for pid=4134 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 599.218905][ T30] audit: type=1400 audit(598.790:178): avc: denied { name_bind } for pid=4143 comm="syz.1.272" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 601.345763][ T4154] netlink: 'syz.1.277': attribute type 10 has an invalid length. [ 601.430700][ T4154] bond0: (slave bond_slave_1): Releasing backup interface [ 601.930455][ T4156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.278'. [ 601.969591][ T4156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.278'. [ 602.148415][ T30] audit: type=1326 audit(601.690:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.0.279" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x125d44 code=0x7ffc0000 [ 602.151631][ T30] audit: type=1326 audit(601.720:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.0.279" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x132510 code=0x7ffc0000 [ 602.160438][ T30] audit: type=1326 audit(601.740:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.0.279" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x132510 code=0x7ffc0000 [ 602.187034][ T30] audit: type=1326 audit(601.760:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.0.279" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x125d44 code=0x7ffc0000 [ 602.194151][ T30] audit: type=1326 audit(601.770:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.0.279" exe="/syz-executor" sig=0 arch=40000028 syscall=171 compat=1 ip=0x132510 code=0x7ffc0000 [ 602.201826][ T30] audit: type=1326 audit(601.780:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.0.279" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x125d44 code=0x7ffc0000 [ 602.209014][ T30] audit: type=1326 audit(601.780:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.0.279" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x132510 code=0x7ffc0000 [ 606.394376][ T30] audit: type=1400 audit(605.970:186): avc: denied { create } for pid=4190 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 606.406051][ T30] audit: type=1400 audit(605.980:187): avc: denied { write } for pid=4190 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 613.302983][ T30] audit: type=1400 audit(612.880:188): avc: denied { connect } for pid=4197 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 613.362592][ T30] audit: type=1400 audit(612.940:189): avc: denied { write } for pid=4197 comm="syz.0.295" laddr=fe80::16 lport=40664 faddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 616.121370][ T4217] Process accounting resumed [ 616.484984][ T4219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 638.494428][ T3470] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 638.719518][ T3470] usb 1-1: device descriptor read/64, error -71 [ 640.339459][ T3470] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 640.789211][ T3470] usb 1-1: device descriptor read/64, error -71 [ 640.929044][ T3470] usb usb1-port1: attempt power cycle [ 641.328985][ T3470] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 641.378922][ T3470] usb 1-1: device descriptor read/8, error -71 [ 641.641714][ T3470] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 642.008341][ T3470] usb 1-1: device descriptor read/8, error -71 [ 642.123070][ T3470] usb usb1-port1: unable to enumerate USB device [ 668.720480][ T862] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 669.009828][ T862] usb 1-1: config index 0 descriptor too short (expected 30768, got 18) [ 669.011915][ T862] usb 1-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 669.014052][ T862] usb 1-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 669.016049][ T862] usb 1-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 669.020457][ T862] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 669.028732][ T862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.539065][ T862] usb 1-1: string descriptor 0 read error: -71 [ 669.570321][ T862] usb 1-1: USB disconnect, device number 6 [ 682.135045][ T30] audit: type=1400 audit(681.710:190): avc: denied { watch watch_reads } for pid=4382 comm="syz.1.373" path="/227" dev="tmpfs" ino=1194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 691.348777][ T30] audit: type=1400 audit(690.920:191): avc: denied { write } for pid=4414 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 691.401938][ T30] audit: type=1400 audit(690.970:192): avc: denied { read } for pid=4414 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 694.470605][ T4430] binder: tried to use weak ref as strong ref [ 694.473014][ T4430] binder: 4429:4430 Acquire 1 refcount change on invalid ref 0 ret -22 [ 694.486353][ T4430] binder: 4429:4430 got transaction to invalid handle, 1 [ 694.493973][ T4430] binder: 4429:4430 cannot find target node [ 694.496751][ T4430] binder: 4429:4430 transaction call to 0:0 failed 19/29201/-22, code 0 size 72-24 line 3241 [ 694.522975][ T968] binder: undelivered TRANSACTION_ERROR: 29201 [ 709.799347][ T862] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 710.084992][ T862] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 710.086894][ T862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.119466][ T862] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 710.121612][ T862] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 710.123278][ T862] usb 1-1: Manufacturer: syz [ 710.172754][ T862] usb 1-1: config 0 descriptor?? [ 710.489307][ T3411] usb 1-1: USB disconnect, device number 7 [ 711.056633][ T4527] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.425'. [ 713.785825][ T30] audit: type=1400 audit(713.360:193): avc: denied { read } for pid=4540 comm="syz.0.429" laddr=::1 lport=58 faddr=::1 fport=8195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 715.262693][ T30] audit: type=1400 audit(714.830:194): avc: denied { read write } for pid=4545 comm="syz.0.431" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 715.274955][ T30] audit: type=1400 audit(714.850:195): avc: denied { open } for pid=4545 comm="syz.0.431" path="/174/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 716.025309][ T4556] netlink: 'syz.1.434': attribute type 4 has an invalid length. [ 723.608401][ T30] audit: type=1400 audit(723.180:196): avc: denied { name_bind } for pid=4603 comm="syz.0.451" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 726.322701][ T4618] "syz.1.458" (4618) uses obsolete ecb(arc4) skcipher [ 729.951186][ T4648] binder: BINDER_SET_CONTEXT_MGR already set [ 729.962207][ T4648] binder: 4646:4648 ioctl 4018620d 200002c0 returned -16 [ 729.983226][ T4648] binder: 4646:4648 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 729.983913][ T4648] binder: 4648 RLIMIT_NICE not set [ 730.889095][ T30] audit: type=1400 audit(730.460:197): avc: denied { mount } for pid=4654 comm="syz.1.473" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 731.935063][ T30] audit: type=1400 audit(731.510:198): avc: denied { create } for pid=4661 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 731.940605][ T30] audit: type=1400 audit(731.520:199): avc: denied { write } for pid=4661 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 732.235278][ T30] audit: type=1400 audit(731.810:200): avc: denied { read } for pid=4661 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 732.270451][ T30] audit: type=1400 audit(731.840:201): avc: denied { ioctl } for pid=4661 comm="syz.1.476" path="socket:[6865]" dev="sockfs" ino=6865 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 735.128524][ T30] audit: type=1400 audit(734.700:202): avc: denied { append } for pid=4682 comm="syz.0.484" name="loop6" dev="devtmpfs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 736.773623][ T30] audit: type=1400 audit(736.350:203): avc: denied { ioctl } for pid=4693 comm="syz.0.490" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7916 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 737.468990][ T4701] binder: 4699:4701 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 737.530929][ T4701] binder: 4699:4701 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 737.535777][ T4701] binder: 4701 RLIMIT_NICE not set [ 738.085669][ T4704] binder: 4699:4704 got transaction to invalid handle, 1 [ 738.086279][ T4704] binder: 4699:4704 cannot find target node [ 738.091636][ T4704] binder: 4699:4704 transaction call to 0:0 failed 23/29201/-22, code 0 size 72-24 line 3241 [ 739.891542][ T4096] binder: undelivered TRANSACTION_ERROR: 29201 [ 740.263871][ T30] audit: type=1400 audit(739.840:204): avc: denied { create } for pid=4714 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 740.284219][ T30] audit: type=1400 audit(739.860:205): avc: denied { write } for pid=4714 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 740.284694][ T30] audit: type=1400 audit(739.860:206): avc: denied { nlmsg_write } for pid=4714 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 745.516962][ T4750] binder: 4749:4750 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 745.542234][ T4750] binder: 4749:4750 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 745.543522][ T4750] binder: 4750 RLIMIT_NICE not set [ 745.750093][ T30] audit: type=1400 audit(745.330:207): avc: denied { bind } for pid=4751 comm="syz.1.509" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 745.752093][ T30] audit: type=1400 audit(745.330:208): avc: denied { name_bind } for pid=4751 comm="syz.1.509" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 745.754181][ T30] audit: type=1400 audit(745.330:209): avc: denied { node_bind } for pid=4751 comm="syz.1.509" saddr=fc01:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 745.888874][ T4754] raw_sendmsg: syz.1.510 forgot to set AF_INET. Fix it! [ 746.063902][ T4757] binder: 4749:4757 got transaction to invalid handle, 1 [ 746.064559][ T4757] binder: 4749:4757 cannot find target node [ 746.064810][ T4757] binder: 4749:4757 transaction call to 0:0 failed 25/29201/-22, code 0 size 72-24 line 3241 [ 748.009032][ T862] binder: undelivered TRANSACTION_ERROR: 29201 [ 748.640360][ T30] audit: type=1400 audit(748.190:210): avc: denied { create } for pid=4772 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 748.708934][ T30] audit: type=1400 audit(748.280:211): avc: denied { setopt } for pid=4772 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 751.294318][ T4787] binder: 4786:4787 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 751.370479][ T4787] binder: 4786:4787 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 751.371109][ T4787] binder: 4787 RLIMIT_NICE not set [ 751.902944][ T4792] binder: 4786:4792 got transaction to invalid handle, 1 [ 751.903655][ T4792] binder: 4786:4792 cannot find target node [ 751.910427][ T4792] binder: 4786:4792 transaction call to 0:0 failed 27/29201/-22, code 0 size 72-24 line 3241 [ 753.723635][ T3411] binder: undelivered TRANSACTION_ERROR: 29201 [ 761.320560][ T30] audit: type=1400 audit(760.900:212): avc: denied { connect } for pid=4848 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 764.684774][ T862] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 764.858244][ T862] usb 1-1: Using ep0 maxpacket: 8 [ 764.975959][ T862] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 764.976330][ T862] usb 1-1: config 179 has no interface number 0 [ 764.976684][ T862] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 764.976975][ T862] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 764.984780][ T862] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 764.992083][ T862] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 764.994427][ T862] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 764.999770][ T862] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 765.001436][ T862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.091441][ T4869] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 765.676013][ T968] usb 1-1: USB disconnect, device number 8 [ 765.676035][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 765.680726][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 765.974119][ T3470] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input3 [ 766.499440][ T30] audit: type=1400 audit(766.050:213): avc: denied { read } for pid=4877 comm="syz.0.565" name="fb0" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 766.500441][ T30] audit: type=1400 audit(766.070:214): avc: denied { open } for pid=4877 comm="syz.0.565" path="/dev/fb0" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 766.546107][ T30] audit: type=1400 audit(766.120:215): avc: denied { ioctl } for pid=4877 comm="syz.0.565" path="/dev/fb0" dev="devtmpfs" ino=619 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 789.590902][ T4096] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 789.951546][ T4096] usb 1-1: config index 0 descriptor too short (expected 30768, got 18) [ 789.952277][ T4096] usb 1-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 789.952864][ T4096] usb 1-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 789.953179][ T4096] usb 1-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 789.953461][ T4096] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 789.953739][ T4096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.399769][ T4096] usb 1-1: string descriptor 0 read error: -71 [ 790.474188][ T4096] usb 1-1: USB disconnect, device number 9 [ 800.929220][ T3411] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 801.180181][ T3411] usb 1-1: device descriptor read/64, error -71 [ 801.459622][ T3411] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 801.649411][ T3411] usb 1-1: device descriptor read/64, error -71 [ 801.771772][ T3411] usb usb1-port1: attempt power cycle [ 802.183373][ T3411] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 802.269506][ T3411] usb 1-1: device descriptor read/8, error -71 [ 802.549510][ T3411] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 802.602253][ T3411] usb 1-1: device descriptor read/8, error -71 [ 802.721883][ T3411] usb usb1-port1: unable to enumerate USB device [ 814.753370][ T30] audit: type=1400 audit(814.330:216): avc: denied { mounton } for pid=5150 comm="syz.0.682" path="/proc/589/task" dev="proc" ino=8435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 817.770873][ T968] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 817.929135][ T968] usb 1-1: device descriptor read/64, error -71 [ 818.195706][ T968] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 818.369426][ T968] usb 1-1: device descriptor read/64, error -71 [ 818.499570][ T968] usb usb1-port1: attempt power cycle [ 818.913752][ T968] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 818.989885][ T968] usb 1-1: device descriptor read/8, error -71 [ 819.240865][ T968] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 819.298349][ T968] usb 1-1: device descriptor read/8, error -71 [ 819.414403][ T968] usb usb1-port1: unable to enumerate USB device [ 832.136096][ T30] audit: type=1400 audit(831.690:217): avc: denied { mount } for pid=5227 comm="syz.0.714" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 832.979060][ T862] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 833.209107][ T862] usb 1-1: Using ep0 maxpacket: 16 [ 833.309362][ T862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.310324][ T862] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 833.311002][ T862] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 833.311171][ T862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.469891][ T862] usb 1-1: config 0 descriptor?? [ 833.674841][ T862] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 833.921264][ T968] usb 1-1: USB disconnect, device number 18 [ 838.228859][ T862] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 838.479563][ T862] usb 1-1: Using ep0 maxpacket: 16 [ 838.595289][ T862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.595892][ T862] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 838.596502][ T862] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 838.596629][ T862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.745690][ T862] usb 1-1: config 0 descriptor?? [ 844.094523][ T30] audit: type=1400 audit(843.670:218): avc: denied { write } for pid=5287 comm="syz.1.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 849.765599][ T4215] usb 1-1: USB disconnect, device number 19 [ 851.905594][ T5358] fuse: Bad value for 'fd' [ 854.091837][ T5373] fuse: Bad value for 'fd' [ 854.825555][ T30] audit: type=1400 audit(854.400:219): avc: denied { read } for pid=5378 comm="syz.1.742" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 854.978144][ T5377] process 'syz.0.738' launched './file0' with NULL argv: empty string added [ 859.479002][ T4096] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 859.640154][ T4096] usb 1-1: device descriptor read/64, error -71 [ 859.879991][ T4096] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 860.038555][ T4096] usb 1-1: device descriptor read/64, error -71 [ 860.168465][ T4096] usb usb1-port1: attempt power cycle [ 860.569727][ T4096] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 860.633443][ T4096] usb 1-1: device descriptor read/8, error -71 [ 860.914036][ T4096] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 861.033368][ T4096] usb 1-1: device descriptor read/8, error -71 [ 861.144417][ T4096] usb usb1-port1: unable to enumerate USB device [ 865.673722][ T30] audit: type=1400 audit(865.250:220): avc: denied { create } for pid=5456 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 865.698190][ T30] audit: type=1400 audit(865.270:221): avc: denied { bind } for pid=5456 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 865.716172][ T5457] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 865.732122][ T30] audit: type=1400 audit(865.300:222): avc: denied { write } for pid=5456 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 866.760062][ T5464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5464 comm=syz.1.776 [ 869.642832][ T5469] binder: tried to use weak ref as strong ref [ 869.643476][ T5469] binder: 5467:5469 Acquire 1 refcount change on invalid ref 0 ret -22 [ 869.662325][ T5469] binder: 5467:5469 got transaction to invalid handle, 1 [ 869.663003][ T5469] binder: 5467:5469 cannot find target node [ 869.663377][ T5469] binder: 5467:5469 transaction call to 0:0 failed 30/29201/-22, code 0 size 72-24 line 3241 [ 869.666992][ T4096] binder: undelivered TRANSACTION_ERROR: 29201 [ 890.948631][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 891.134247][ T10] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 891.174615][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 891.176248][ T10] usb 1-1: can't read configurations, error -61 [ 891.319644][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 891.565792][ T10] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 891.612205][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 891.614173][ T10] usb 1-1: can't read configurations, error -61 [ 891.618694][ T10] usb usb1-port1: attempt power cycle [ 892.009057][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 892.073466][ T10] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 892.091785][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 892.093471][ T10] usb 1-1: can't read configurations, error -61 [ 892.248887][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 892.304744][ T10] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 892.339850][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 892.340581][ T10] usb 1-1: can't read configurations, error -61 [ 892.351336][ T10] usb usb1-port1: unable to enumerate USB device [ 901.232772][ T5494] binder: tried to use weak ref as strong ref [ 901.235093][ T5494] binder: 5492:5494 Acquire 1 refcount change on invalid ref 0 ret -22 [ 901.250612][ T5494] binder: 5492:5494 got transaction to invalid handle, 1 [ 901.262142][ T5494] binder: 5492:5494 cannot find target node [ 901.269377][ T5494] binder: 5492:5494 transaction call to 0:0 failed 33/29201/-22, code 0 size 72-24 line 3241 [ 901.285548][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 902.879597][ T3470] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 903.184622][ T3470] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 903.326489][ T3470] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 903.326898][ T3470] usb 1-1: can't read configurations, error -61 [ 903.468951][ T3470] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 903.764765][ T3470] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 903.862378][ T3470] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 903.862982][ T3470] usb 1-1: can't read configurations, error -61 [ 903.866264][ T3470] usb usb1-port1: attempt power cycle [ 904.291927][ T3470] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 904.405481][ T3470] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 904.456395][ T3470] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 904.457932][ T3470] usb 1-1: can't read configurations, error -61 [ 904.599768][ T3470] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 904.709932][ T3470] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 904.806848][ T3470] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 904.808015][ T3470] usb 1-1: can't read configurations, error -61 [ 904.815435][ T3470] usb usb1-port1: unable to enumerate USB device [ 913.419542][ T5507] binder: tried to use weak ref as strong ref [ 913.423226][ T5507] binder: 5504:5507 Acquire 1 refcount change on invalid ref 0 ret -22 [ 913.440500][ T5507] binder: 5504:5507 got transaction to invalid handle, 1 [ 913.443434][ T5507] binder: 5504:5507 cannot find target node [ 913.445278][ T5507] binder: 5504:5507 transaction call to 0:0 failed 36/29201/-22, code 0 size 72-24 line 3241 [ 913.452248][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 918.485625][ T4215] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 918.734686][ T4215] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 918.813082][ T4215] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 918.814673][ T4215] usb 1-1: can't read configurations, error -61 [ 918.970640][ T4215] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 919.174187][ T4215] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 919.198300][ T4215] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 919.201557][ T4215] usb 1-1: can't read configurations, error -61 [ 919.213195][ T4215] usb usb1-port1: attempt power cycle [ 919.599562][ T4215] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 919.653660][ T4215] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 919.688429][ T4215] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 919.698399][ T4215] usb 1-1: can't read configurations, error -61 [ 919.859725][ T4215] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 919.940383][ T4215] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 919.986928][ T4215] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 919.989195][ T4215] usb 1-1: can't read configurations, error -61 [ 919.994154][ T4215] usb usb1-port1: unable to enumerate USB device [ 925.088657][ T5505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.144302][ T5505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.852246][ T5548] binder: 5545:5548 ioctl 4018620d 0 returned -22 [ 928.880735][ T5548] binder: tried to use weak ref as strong ref [ 928.881180][ T5548] binder: 5545:5548 Acquire 1 refcount change on invalid ref 0 ret -22 [ 928.896880][ T5548] binder: 5545:5548 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 928.931982][ T5548] binder: 5548 RLIMIT_NICE not set [ 929.451554][ T5550] binder: 5545:5550 got transaction to invalid handle, 1 [ 929.452280][ T5550] binder: 5545:5550 cannot find target node [ 929.480394][ T5550] binder: 5545:5550 transaction call to 0:0 failed 39/29201/-22, code 0 size 72-24 line 3241 [ 930.105490][ T5505] hsr_slave_0: entered promiscuous mode [ 930.120018][ T5505] hsr_slave_1: entered promiscuous mode [ 930.125414][ T5505] debugfs: 'hsr0' already exists in 'hsr' [ 930.134742][ T5505] Cannot create hsr debugfs directory [ 931.155906][ T3470] binder: undelivered TRANSACTION_ERROR: 29201 [ 931.918682][ T968] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 932.178694][ T968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.181766][ T968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.185990][ T968] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 932.198298][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.301594][ T968] usb 1-1: config 0 descriptor?? [ 933.032929][ T968] hid-generic 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 933.042230][ T968] hid-generic 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 933.044462][ T968] hid-generic 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 933.048696][ T968] hid-generic 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 933.050898][ T968] hid-generic 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 933.052785][ T968] hid-generic 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 933.058106][ T968] hid-generic 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 933.169541][ T968] hid-generic 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 934.821554][ T5505] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 934.892707][ T5505] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 934.970610][ T5505] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 935.030925][ T5505] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 940.191775][ T5505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.359404][ T4215] usb 1-1: USB disconnect, device number 36 [ 945.010281][ T4096] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 945.282465][ T4096] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 945.358576][ T4096] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 945.358957][ T4096] usb 1-1: can't read configurations, error -61 [ 945.528757][ T4096] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 945.826003][ T4096] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 946.033455][ T4096] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 946.034220][ T4096] usb 1-1: can't read configurations, error -61 [ 946.056095][ T4096] usb usb1-port1: attempt power cycle [ 946.529531][ T4096] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 946.671222][ T4096] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 946.730549][ T4096] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 946.731347][ T4096] usb 1-1: can't read configurations, error -61 [ 946.900502][ T4096] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 946.971069][ T4096] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 946.998704][ T4096] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 946.999372][ T4096] usb 1-1: can't read configurations, error -61 [ 947.015357][ T4096] usb usb1-port1: unable to enumerate USB device [ 954.592740][ T1086] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.454668][ T1086] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.413251][ T1086] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.105960][ T1086] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.189146][ T4215] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 957.538979][ T4215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.540076][ T4215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.541854][ T4215] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 957.543415][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.565041][ T4215] usb 1-1: config 0 descriptor?? [ 958.366737][ T4215] hid-generic 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 958.398620][ T4215] hid-generic 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 958.399442][ T4215] hid-generic 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 958.399774][ T4215] hid-generic 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 958.400085][ T4215] hid-generic 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 958.400396][ T4215] hid-generic 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 958.400708][ T4215] hid-generic 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 958.439857][ T4215] hid-generic 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 958.490546][ T4215] usb 1-1: USB disconnect, device number 41 [ 959.571803][ T5609] binder: 5608:5609 ioctl c0306201 0 returned -14 [ 959.590518][ T5609] binder: 5608:5609 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 959.612123][ T5609] binder: 5609 RLIMIT_NICE not set [ 960.139667][ T5611] binder: 5608:5611 got transaction to invalid handle, 1 [ 960.143108][ T5611] binder: 5608:5611 cannot find target node [ 960.155106][ T5611] binder: 5608:5611 transaction call to 0:0 failed 43/29201/-22, code 0 size 72-24 line 3241 [ 961.192150][ T30] audit: type=1400 audit(960.770:223): avc: denied { read } for pid=3169 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 961.774255][ T4096] binder: undelivered TRANSACTION_ERROR: 29201 [ 962.862149][ T4215] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 963.169684][ T4215] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 963.171940][ T4215] usb 1-1: can't read configurations, error -61 [ 963.359841][ T4215] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 963.686138][ T4215] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 963.688689][ T4215] usb 1-1: can't read configurations, error -61 [ 963.691777][ T4215] usb usb1-port1: attempt power cycle [ 964.069337][ T4215] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 964.142407][ T4215] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 964.146026][ T4215] usb 1-1: can't read configurations, error -61 [ 964.222280][ T5614] fido_id[5614]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 964.278348][ T4215] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 964.357677][ T4215] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 964.359099][ T4215] usb 1-1: can't read configurations, error -61 [ 964.364633][ T4215] usb usb1-port1: unable to enumerate USB device [ 964.609337][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.721750][ T1086] bond0 (unregistering): Released all slaves [ 965.656129][ T1086] hsr_slave_0: left promiscuous mode [ 965.711350][ T1086] hsr_slave_1: left promiscuous mode [ 966.056539][ T1086] veth1_macvtap: left promiscuous mode [ 966.064782][ T1086] veth0_macvtap: left promiscuous mode [ 966.072051][ T1086] veth1_vlan: left promiscuous mode [ 966.093836][ T1086] veth0_vlan: left promiscuous mode [ 974.513266][ T5505] veth0_vlan: entered promiscuous mode [ 974.820585][ T5505] veth1_vlan: entered promiscuous mode [ 975.485528][ T5505] veth0_macvtap: entered promiscuous mode [ 975.714906][ T5505] veth1_macvtap: entered promiscuous mode [ 976.200778][ T3411] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 976.595329][ T3411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.595664][ T3411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.596138][ T3411] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 976.596276][ T3411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.722803][ T1295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.735774][ T3411] usb 1-1: config 0 descriptor?? [ 976.744333][ T1086] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.749711][ T5313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.752748][ T5313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.379479][ T3411] usbhid 1-1:0.0: can't add hid device: -71 [ 977.380513][ T3411] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 977.742125][ T3411] usb 1-1: USB disconnect, device number 46 [ 978.059079][ T30] audit: type=1400 audit(977.610:224): avc: denied { mounton } for pid=5505 comm="syz-executor" path="/syzkaller.KOZSUT/syz-tmp" dev="vda" ino=1878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 978.364058][ T30] audit: type=1400 audit(977.920:225): avc: denied { mounton } for pid=5505 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 978.442895][ T5639] binder: 5637:5639 ioctl c0306201 0 returned -14 [ 978.461096][ T5639] binder: 5637:5639 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 978.495685][ T5639] binder: 5639 RLIMIT_NICE not set [ 979.051646][ T5640] binder: 5637:5640 got transaction to invalid handle, 1 [ 979.089412][ T5640] binder: 5637:5640 cannot find target node [ 979.090348][ T5640] binder: 5637:5640 transaction call to 0:0 failed 47/29201/-22, code 0 size 72-24 line 3241 [ 979.706182][ T5643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.780457][ T5643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.450773][ T5645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.465199][ T5645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.665352][ T3411] binder: undelivered TRANSACTION_ERROR: 29201 [ 981.165334][ T30] audit: type=1400 audit(980.730:226): avc: denied { create } for pid=5647 comm="syz.2.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 981.303224][ T30] audit: type=1400 audit(980.880:227): avc: denied { setopt } for pid=5647 comm="syz.2.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 982.972925][ T5658] binder: 5656:5658 ioctl c0306201 0 returned -14 [ 983.005116][ T5658] binder: 5656:5658 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 983.005669][ T5658] binder: 5658 RLIMIT_NICE not set [ 983.526268][ T5664] binder: 5656:5664 got transaction to invalid handle, 1 [ 983.526642][ T5664] binder: 5656:5664 cannot find target node [ 983.536623][ T5664] binder: 5656:5664 transaction call to 0:0 failed 51/29201/-22, code 0 size 72-24 line 3241 [ 985.159111][ T4096] binder: undelivered TRANSACTION_ERROR: 29201 [ 989.331506][ T968] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 989.599664][ T968] usb 1-1: Using ep0 maxpacket: 8 [ 989.739341][ T968] usb 1-1: unable to get BOS descriptor or descriptor too short [ 989.756424][ T968] usb 1-1: config 0 has an invalid interface number: 44 but max is 0 [ 989.759250][ T968] usb 1-1: config 0 has no interface number 0 [ 989.760213][ T968] usb 1-1: config 0 interface 44 has no altsetting 0 [ 989.931315][ T968] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=31.09 [ 989.932154][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.932713][ T968] usb 1-1: Product: syz [ 989.932825][ T968] usb 1-1: Manufacturer: syz [ 989.932960][ T968] usb 1-1: SerialNumber: syz [ 990.110430][ T968] usb 1-1: config 0 descriptor?? [ 990.747722][ T968] usb 1-1: USB disconnect, device number 47 [ 990.982621][ T968] ================================================================== [ 990.983688][ T968] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x1bc/0x1e0 [ 990.984702][ T968] Read of size 8 at addr ffff0000136e98b0 by task kworker/0:2/968 [ 990.984858][ T968] [ 990.986429][ T968] CPU: 0 UID: 0 PID: 968 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT [ 990.986620][ T968] Hardware name: linux,dummy-virt (DT) [ 990.987104][ T968] Workqueue: usb_hub_wq hub_event [ 990.987818][ T968] Call trace: [ 990.988160][ T968] show_stack+0x18/0x24 (C) [ 990.988417][ T968] dump_stack_lvl+0xa4/0xf4 [ 990.988545][ T968] print_report+0xf4/0x5a0 [ 990.988640][ T968] kasan_report+0xc8/0x108 [ 990.988737][ T968] __asan_report_load8_noabort+0x20/0x2c [ 990.988830][ T968] hdm_disconnect+0x1bc/0x1e0 [ 990.989007][ T968] usb_unbind_interface+0x168/0x71c [ 990.989105][ T968] device_remove+0x100/0x14c [ 990.989195][ T968] device_release_driver_internal+0x310/0x47c [ 990.989279][ T968] device_release_driver+0x18/0x24 [ 990.989357][ T968] bus_remove_device+0x1a4/0x348 [ 990.989440][ T968] device_del+0x2d0/0x7b4 [ 990.989523][ T968] usb_disable_device+0x240/0x5ac [ 990.989610][ T968] usb_disconnect+0x22c/0x7ec [ 990.989697][ T968] hub_event+0x10a4/0x365c [ 990.989790][ T968] process_one_work+0x7cc/0x18d4 [ 990.989877][ T968] worker_thread+0x734/0xb84 [ 990.989961][ T968] kthread+0x348/0x5fc [ 990.990056][ T968] ret_from_fork+0x10/0x20 [ 990.990363][ T968] [ 990.990446][ T968] Allocated by task 968: [ 990.990769][ T968] kasan_save_stack+0x3c/0x64 [ 990.990896][ T968] kasan_save_track+0x20/0x3c [ 990.990977][ T968] kasan_save_alloc_info+0x40/0x54 [ 990.991069][ T968] __kasan_kmalloc+0xb8/0xbc [ 990.991143][ T968] __kmalloc_cache_noprof+0x2b8/0x6f8 [ 990.991225][ T968] hdm_probe+0x94/0x13a0 [ 990.991302][ T968] usb_probe_interface+0x230/0x8e4 [ 990.991374][ T968] really_probe+0x180/0x7d8 [ 990.991445][ T968] __driver_probe_device+0x15c/0x364 [ 990.991516][ T968] driver_probe_device+0x5c/0x16c [ 990.991587][ T968] __device_attach_driver+0x16c/0x270 [ 990.991659][ T968] bus_for_each_drv+0x104/0x18c [ 990.991730][ T968] __device_attach+0x168/0x35c [ 990.991804][ T968] device_initial_probe+0x14/0x20 [ 990.991889][ T968] bus_probe_device+0x124/0x15c [ 990.991958][ T968] device_add+0xc30/0x12cc [ 990.992264][ T968] usb_set_configuration+0xbb8/0x15b8 [ 990.992416][ T968] usb_generic_driver_probe+0x8c/0xc0 [ 990.992543][ T968] usb_probe_device+0xa4/0x2f4 [ 990.992643][ T968] really_probe+0x180/0x7d8 [ 990.992933][ T968] __driver_probe_device+0x15c/0x364 [ 990.993047][ T968] driver_probe_device+0x5c/0x16c [ 990.993119][ T968] __device_attach_driver+0x16c/0x270 [ 990.993191][ T968] bus_for_each_drv+0x104/0x18c [ 990.993256][ T968] __device_attach+0x168/0x35c [ 990.993322][ T968] device_initial_probe+0x14/0x20 [ 990.993388][ T968] bus_probe_device+0x124/0x15c [ 990.993448][ T968] device_add+0xc30/0x12cc [ 990.993516][ T968] usb_new_device+0x778/0x16cc [ 990.993586][ T968] hub_event+0x1d70/0x365c [ 990.993655][ T968] process_one_work+0x7cc/0x18d4 [ 990.993723][ T968] worker_thread+0x734/0xb84 [ 990.993797][ T968] kthread+0x348/0x5fc [ 990.993872][ T968] ret_from_fork+0x10/0x20 [ 990.994016][ T968] [ 990.994088][ T968] Freed by task 968: [ 990.994181][ T968] kasan_save_stack+0x3c/0x64 [ 990.994258][ T968] kasan_save_track+0x20/0x3c [ 990.994330][ T968] __kasan_save_free_info+0x4c/0x74 [ 990.994406][ T968] __kasan_slab_free+0x60/0x8c [ 990.994480][ T968] kfree+0x2c4/0x6b0 [ 990.994556][ T968] release_mdev+0x10/0x1c [ 990.994635][ T968] device_release+0x80/0x1e8 [ 990.994708][ T968] kobject_put+0x17c/0x430 [ 990.994795][ T968] device_unregister+0x2c/0xbc [ 990.994873][ T968] most_deregister_interface+0x2d8/0x46c [ 990.994948][ T968] hdm_disconnect+0xcc/0x1e0 [ 990.995032][ T968] usb_unbind_interface+0x168/0x71c [ 990.995107][ T968] device_remove+0x100/0x14c [ 990.995179][ T968] device_release_driver_internal+0x310/0x47c [ 990.995253][ T968] device_release_driver+0x18/0x24 [ 990.995324][ T968] bus_remove_device+0x1a4/0x348 [ 990.995395][ T968] device_del+0x2d0/0x7b4 [ 990.995469][ T968] usb_disable_device+0x240/0x5ac [ 990.995547][ T968] usb_disconnect+0x22c/0x7ec [ 990.995620][ T968] hub_event+0x10a4/0x365c [ 990.995692][ T968] process_one_work+0x7cc/0x18d4 [ 990.995768][ T968] worker_thread+0x734/0xb84 [ 990.995839][ T968] kthread+0x348/0x5fc [ 990.995912][ T968] ret_from_fork+0x10/0x20 [ 990.996013][ T968] [ 990.996158][ T968] The buggy address belongs to the object at ffff0000136e8000 [ 990.996158][ T968] which belongs to the cache kmalloc-8k of size 8192 [ 990.996334][ T968] The buggy address is located 6320 bytes inside of [ 990.996334][ T968] freed 8192-byte region [ffff0000136e8000, ffff0000136ea000) [ 990.996427][ T968] [ 990.996578][ T968] The buggy address belongs to the physical page: [ 990.997725][ T968] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x536e8 [ 990.998153][ T968] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 990.998302][ T968] anon flags: 0x1ffc00000000040(head|node=0|zone=0|lastcpupid=0x7ff) [ 990.999049][ T968] page_type: f5(slab) [ 990.999635][ T968] raw: 01ffc00000000040 ffff00000dc02280 0000000000000000 0000000000000001 [ 990.999738][ T968] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 990.999927][ T968] head: 01ffc00000000040 ffff00000dc02280 0000000000000000 0000000000000001 [ 991.000009][ T968] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 991.000077][ T968] head: 01ffc00000000003 fffffdffc04dba01 00000000ffffffff 00000000ffffffff [ 991.000143][ T968] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 991.000266][ T968] page dumped because: kasan: bad access detected [ 991.000339][ T968] [ 991.000396][ T968] Memory state around the buggy address: [ 991.000873][ T968] ffff0000136e9780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 991.001039][ T968] ffff0000136e9800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 991.001136][ T968] >ffff0000136e9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 991.001225][ T968] ^ [ 991.001378][ T968] ffff0000136e9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 991.001441][ T968] ffff0000136e9980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 991.001605][ T968] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 991.228520][ T968] Disabling lock debugging due to kernel taint [ 991.229793][ T968] ------------[ cut here ]------------ [ 991.229896][ T968] refcount_t: underflow; use-after-free. [ 991.231342][ T968] WARNING: CPU: 0 PID: 968 at lib/refcount.c:28 refcount_warn_saturate+0x138/0x19c [ 991.233891][ T968] Modules linked in: [ 991.235133][ T968] CPU: 0 UID: 0 PID: 968 Comm: kworker/0:2 Tainted: G B syzkaller #0 PREEMPT [ 991.235696][ T968] Tainted: [B]=BAD_PAGE [ 991.236005][ T968] Hardware name: linux,dummy-virt (DT) [ 991.236334][ T968] Workqueue: usb_hub_wq hub_event [ 991.236883][ T968] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 991.237537][ T968] pc : refcount_warn_saturate+0x138/0x19c [ 991.238000][ T968] lr : refcount_warn_saturate+0x138/0x19c [ 991.238370][ T968] sp : ffff80008e9073a0 [ 991.238706][ T968] x29: ffff80008e9073a0 x28: ffff000016dad000 x27: ffff000016dad0d8 [ 991.239536][ T968] x26: ffff600002db5a1b x25: ffff80008872f660 x24: ffff000016dad0e0 [ 991.240162][ T968] x23: ffff000014b01038 x22: 0000000000000004 x21: 1fffe00002960207 [ 991.240756][ T968] x20: ffff000014b01038 x19: 0000000000000003 x18: 0000000000000000 [ 991.241473][ T968] x17: ffff7fffe2f82000 x16: 00000000f1f1f1f1 x15: 00000000f3f3f3f3 [ 991.242101][ T968] x14: ffff700011d20e5c x13: 0000000000000001 x12: ffff700011d20dc9 [ 991.242679][ T968] x11: 1ffff00011d20dc8 x10: ffff700011d20dc8 x9 : dfff800000000000 [ 991.243372][ T968] x8 : ffff0000150b9e80 x7 : ffff80008e906f70 x6 : ffff80008034a7e8 [ 991.243962][ T968] x5 : 0000000000000000 x4 : 1fffe00002a173d1 x3 : dfff800000000000 [ 991.244510][ T968] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000150b9e80 [ 991.245164][ T968] Call trace: [ 991.245487][ T968] refcount_warn_saturate+0x138/0x19c (P) [ 991.245895][ T968] kobject_put+0x29c/0x430 [ 991.246257][ T968] put_device+0x14/0x24 [ 991.246588][ T968] hdm_disconnect+0x168/0x1e0 [ 991.246938][ T968] usb_unbind_interface+0x168/0x71c [ 991.247403][ T968] device_remove+0x100/0x14c [ 991.247742][ T968] device_release_driver_internal+0x310/0x47c [ 991.248149][ T968] device_release_driver+0x18/0x24 [ 991.248504][ T968] bus_remove_device+0x1a4/0x348 [ 991.248848][ T968] device_del+0x2d0/0x7b4 [ 991.249277][ T968] usb_disable_device+0x240/0x5ac [ 991.249641][ T968] usb_disconnect+0x22c/0x7ec [ 991.249993][ T968] hub_event+0x10a4/0x365c [ 991.250322][ T968] process_one_work+0x7cc/0x18d4 [ 991.250672][ T968] worker_thread+0x734/0xb84 [ 991.251007][ T968] kthread+0x348/0x5fc [ 991.251326][ T968] ret_from_fork+0x10/0x20 [ 991.251767][ T968] irq event stamp: 131595 [ 991.252089][ T968] hardirqs last enabled at (131595): [] finish_task_switch.isra.0+0x1a8/0x854 [ 991.252662][ T968] hardirqs last disabled at (131594): [] __schedule+0x2e8/0x3180 [ 991.253214][ T968] softirqs last enabled at (131382): [] handle_softirqs+0x88c/0xdb4 [ 991.253734][ T968] softirqs last disabled at (131363): [] __do_softirq+0x14/0x20 [ 991.254408][ T968] ---[ end trace 0000000000000000 ]--- [ 992.474049][ T5313] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.589748][ T5313] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.748960][ T5313] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.864761][ T5313] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.198485][ T5313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.250152][ T5313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.305540][ T5313] bond0 (unregistering): Released all slaves [ 994.545930][ T5313] hsr_slave_0: left promiscuous mode [ 994.580863][ T5313] hsr_slave_1: left promiscuous mode [ 994.633131][ T5313] veth1_macvtap: left promiscuous mode [ 994.634599][ T5313] veth0_macvtap: left promiscuous mode [ 994.635406][ T5313] veth1_vlan: left promiscuous mode [ 994.636108][ T5313] veth0_vlan: left promiscuous mode [ 997.663936][ T5313] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.834108][ T5313] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.993483][ T5313] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.135938][ T5313] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.606182][ T5313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.658457][ T5313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.733611][ T5313] bond0 (unregistering): Released all slaves [ 999.963733][ T5313] hsr_slave_0: left promiscuous mode [ 999.972120][ T5313] hsr_slave_1: left promiscuous mode [ 1000.007661][ T5313] veth1_macvtap: left promiscuous mode [ 1000.008721][ T5313] veth0_macvtap: left promiscuous mode [ 1000.009592][ T5313] veth1_vlan: left promiscuous mode [ 1000.010219][ T5313] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 08:07:17 Registers: info registers vcpu 0 CPU#0 PC=ffff8000802703a8 X00=ffff000014229e80 X01=0000000100000105 X02=0000000000000000 X03=ffff80008027066c X04=ffff6000028453d7 X05=ffff000014229eb4 X06=ffff6000028453d6 X07=0000000000000001 X08=ffff000014229eb7 X09=1ffff00011aacd10 X10=ffff6000028453d6 X11=1fffe000028453d6 X12=ffff6000028453d7 X13=0000000000000000 X14=1fffe00001d13e05 X15=ffff00000e89f000 X16=0000000000000007 X17=0000000000000000 X18=1fffe000025769e0 X19=ffff80008710efc0 X20=0000000000000000 X21=0000000000000018 X22=0000000000000012 X23=ffff7fffe2f82000 X24=0000000000000012 X25=ffff8000802a0850 X26=0000000000000000 X27=ffff80008715df78 X28=ffff000014229e80 X29=ffff80008d5666a0 X30=ffff8000803257ac SP=ffff80008d5665a0 PSTATE=600000c5 -ZC- EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=00312e6f732e6369:6d6f746162696c2f Q02=0000000000000000:fffffffffff00000 Q03=0000000000000000:0000000000000000 Q04=3333333333333333:3333333333333333 Q05=0000000000000000:0000000c00000000 Q06=0000000000000000:0000000000000000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800080018aa0 X00=ffff80008da77ab0 X01=ffff800080010000 X02=1fffe00001d08b74 X03=1fffe00001d08b71 X04=000000e6bcc23520 X05=ffff80008da77938 X06=ffff80008da77950 X07=ffff80008da77a30 X08=ffff80008da778d8 X09=00000000000000c0 X10=ffff700011b4ef1a X11=1ffff00011b4ef1a X12=ffff700011b4ef1b X13=0000000000008000 X14=323a302f72656b72 X15=69617420746f4e20 X16=ffff80008d570000 X17=ffff7fffe2fa5000 X18=0000000000000000 X19=ffff80008710de08 X20=ffff8000854b5540 X21=ffff80008da77a21 X22=ffff80008da77ab0 X23=ffff800080010000 X24=0000000000000000 X25=ffff00000e845b80 X26=ffff7fffe2fa5000 X27=1ffff00011b4efae X28=ffff00000e845b80 X29=ffff80008da77a10 X30=ffff80008001e0e0 SP=ffff80008d578000 PSTATE=200000c5 --C- EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=0000000000000000:0000000000000000 Q02=0000000000000000:0000000000000000 Q03=0000000000000000:0000000000000000 Q04=0000000000000000:0000000000000000 Q05=0000000000000000:0000000000000000 Q06=0000000000000000:0000000000000000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000