last executing test programs: 3.991765143s ago: executing program 1 (id=2249): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb4}}, 0x50) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 3.358830568s ago: executing program 1 (id=2254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000140)=0x200000000006, 0x12) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x184) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000740)={[{@noquota}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@resgid}, {@noinit_itable}, {@norecovery}, {@nombcache}, {@nodioread_nolock}, {@errors_remount}, {@mblk_io_submit}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) chdir(&(0x7f0000000300)='./file0\x00') 2.370188903s ago: executing program 4 (id=2257): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.294284485s ago: executing program 0 (id=2261): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x6, 0x0, &(0x7f0000000080)) 2.253218306s ago: executing program 0 (id=2263): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f0000003780)=[{&(0x7f0000000240)=""/183, 0xb7}], 0x1, 0xffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000100)={0x0, 0x49, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd2a}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r4) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000100)=@x86={0x8, 0x2, 0x50, 0x0, 0x2000000b, 0x7, 0x2, 0x9, 0x1, 0x8, 0x0, 0x51, 0x0, 0x40004, 0x10, 0xff, 0xb, 0x2, 0xf, '\x00', 0x2, 0x4080000000000005}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = gettid() prlimit64(r5, 0x0, &(0x7f00000000c0)={0x400080000001, 0xfffffffffffffffb}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x8000090}, 0x4000) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 2.234625095s ago: executing program 2 (id=2264): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7020000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) bind$inet(r0, &(0x7f0000000000)={0x2, 0x270f, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000001c0)={0xfffffffffffffff0, 0x0, '\x00', 0x1, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x38, 0x0, &(0x7f0000000400)='\x00'/56, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.189789987s ago: executing program 1 (id=2266): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x7f) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), 0x0, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0xf, 0x0, &(0x7f0000000100)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1, 0x7, 0x2, 0x182, 0x2, 0x10, 0xf1, 0x800, 0x1, 0x5, 0x0, 0x29, 0x0, 0xf48, 0x9, 0xfffffffffffffffa], 0xe000}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001700), 0x0, 0x20040005) r6 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) close_range(r6, r6, 0x0) 2.156849808s ago: executing program 2 (id=2267): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x100, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.117939878s ago: executing program 2 (id=2269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.07529471s ago: executing program 2 (id=2271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.909612014s ago: executing program 2 (id=2272): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8c) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x0) 1.735095318s ago: executing program 4 (id=2273): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 1.727664588s ago: executing program 2 (id=2274): io_setup(0x6, &(0x7f00000000c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0x1a1081, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[0x0]) socket$xdp(0x2c, 0x3, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r1 = syz_io_uring_setup(0x3fde, &(0x7f0000000080)={0x0, 0x3a84, 0x8, 0x82, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000000)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x36fb, 0x6a29, 0x9, 0x0, 0x0) io_uring_enter(r1, 0x41b3, 0x550b, 0x8, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x400) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x48, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x12, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1.556176452s ago: executing program 3 (id=2275): setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0xffffffff, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x206, 0x2}, {0x4000000000, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.555952782s ago: executing program 4 (id=2276): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) 1.518536083s ago: executing program 4 (id=2277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000140)=0x200000000006, 0x12) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x184) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000740)={[{@noquota}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@resgid}, {@noinit_itable}, {@norecovery}, {@nombcache}, {@nodioread_nolock}, {@errors_remount}, {@mblk_io_submit}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) chdir(&(0x7f0000000300)='./file0\x00') 1.517414923s ago: executing program 3 (id=2278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x1465004e, 0x6, 0xff], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.419701766s ago: executing program 3 (id=2279): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.419410946s ago: executing program 3 (id=2280): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$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") epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380687b, 0x0, 0x5, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.419245646s ago: executing program 3 (id=2281): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 1.419009346s ago: executing program 3 (id=2282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x7f) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001700), 0x0, 0x20040005) r6 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) close_range(r6, r6, 0x0) 486.959028ms ago: executing program 1 (id=2283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@alu={0x4, 0x0, 0x5, 0x0, 0x2, 0x5c}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 448.440918ms ago: executing program 1 (id=2284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f00004af000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 406.77098ms ago: executing program 0 (id=2285): mkdirat(0xffffffffffffff9c, 0x0, 0x1de) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0xffbd}}, 0x26) syz_emit_ethernet(0x50, &(0x7f0000000640)={@random="b9200ccf188c", @random="ada1d50109bc", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x42, 0x0, 0x0, 0xa, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e20, 0x2e, 0x0, @opaque="361c3bc3105908202c8312ce6a3ecfb4f817260261b8d0f8edb283c8cd432fb15ee65932a013"}}}}}, 0x0) 405.77138ms ago: executing program 0 (id=2286): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8004745a, 0x0) 386.351891ms ago: executing program 1 (id=2287): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 385.156391ms ago: executing program 0 (id=2288): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r2, r1, 0x2, 0x0, @void}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 327.087401ms ago: executing program 0 (id=2289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x361, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 171.080765ms ago: executing program 4 (id=2290): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x28, r3, 0x1, 0x70bd2b, 0xffffffff, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x8}]}, 0x28}, 0x1, 0x800000000000000, 0x0, 0x4145}, 0x800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 4 (id=2291): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x30e, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x481}, 0x8000000) syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r1) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000800), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbc3df0703b94000000408000100000053057b791ef9ce9c18f97c88b9834cb963c08a671887dd77d26b65ed296feb02d52e6f64969e98c23d1ab652f7ed975ea0fb8ccf712458cab7813e290ab6562b09452ee239022c377a1129f1577fe3fbce3cbfed11d42b12809e26d39f031659eea0c59b2ae6d1a1446a8d14747cb66a3dbd0776d55f600eb3fef499c0681a133a3cdb5244b4bb63cdbbd3141936061e2235d7b6304c25b6a487948827afe9d7a1fc4d9e3b0d51f4a98265415f2c2cf707fddc94e476dcca8a13cc76954b92e4826ddb67f8a2a0b87c9262e210d60f6ab73c21469b321e297f3a87da54"], 0x1c}}, 0x40004) kernel console output (not intermixed with test programs): t=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.401759][ T390] usb 5-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 150.425831][ T390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.437609][ T30] audit: type=1400 audit(1792095979.612:408): avc: denied { create } for pid=1697 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.445042][ T390] usb 5-1: Product: syz [ 150.477539][ T390] usb 5-1: Manufacturer: syz [ 150.482187][ T390] usb 5-1: SerialNumber: syz [ 150.497750][ T30] audit: type=1400 audit(1792095979.612:409): avc: denied { write } for pid=1697 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.521208][ T30] audit: type=1400 audit(1792095979.612:410): avc: denied { read } for pid=1697 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.575235][ T30] audit: type=1400 audit(1792095979.723:411): avc: denied { execmem } for pid=1704 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 150.600181][ T390] usb 5-1: can't set config #1, error -71 [ 150.612891][ T390] usb 5-1: USB disconnect, device number 2 [ 150.642688][ T30] audit: type=1400 audit(1792095979.732:412): avc: denied { prog_load } for pid=1702 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 152.110953][ T30] audit: type=1400 audit(1792095979.732:413): avc: denied { create } for pid=1704 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 152.137736][ T30] audit: type=1400 audit(1792095979.741:414): avc: denied { module_request } for pid=1704 comm="syz.1.308" kmod="net-pf-16-proto-21" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 152.160853][ T30] audit: type=1400 audit(1792095979.815:415): avc: denied { mounton } for pid=1702 comm="syz.2.309" path="/58/trace" dev="tmpfs" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 152.336604][ T1705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.308'. [ 153.780293][ T1731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 156.971139][ T1769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 157.795687][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 157.795705][ T30] audit: type=1400 audit(1792095986.449:452): avc: denied { name_bind } for pid=1774 comm="syz.3.326" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 157.902229][ T30] audit: type=1400 audit(1792095986.532:453): avc: denied { node_bind } for pid=1774 comm="syz.3.326" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 157.928886][ T30] audit: type=1400 audit(1792095986.551:454): avc: denied { unmount } for pid=1772 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 159.169538][ T30] audit: type=1400 audit(1792095987.713:455): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 159.680748][ T30] audit: type=1400 audit(1792095987.750:456): avc: denied { prog_load } for pid=1790 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 159.680784][ T30] audit: type=1400 audit(1792095987.769:457): avc: denied { execmem } for pid=1788 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 159.680806][ T30] audit: type=1400 audit(1792095988.184:458): avc: denied { create } for pid=1788 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 159.680830][ T30] audit: type=1400 audit(1792095988.184:459): avc: denied { write } for pid=1788 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 159.735520][ T30] audit: type=1400 audit(1792095988.221:460): avc: denied { create } for pid=1797 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 159.803834][ T30] audit: type=1400 audit(1792095988.258:461): avc: denied { block_suspend } for pid=1788 comm="syz.0.332" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.784655][ T1810] overlayfs: failed to resolve './file0': -2 [ 164.024725][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 164.024747][ T30] audit: type=1400 audit(1792095991.238:482): avc: denied { mount } for pid=1835 comm="syz.1.342" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 164.060662][ T30] audit: type=1400 audit(1792095991.247:483): avc: denied { map_create } for pid=1835 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 164.114451][ T30] audit: type=1400 audit(1792095992.253:484): avc: denied { create } for pid=1823 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 164.285046][ T30] audit: type=1400 audit(1792095992.262:485): avc: denied { mmap_zero } for pid=1823 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 164.385167][ T30] audit: type=1400 audit(1792095992.475:486): avc: denied { module_request } for pid=1823 comm="syz.3.340" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 165.189598][ T30] audit: type=1400 audit(1792095992.668:487): avc: denied { bpf } for pid=1841 comm="syz.2.344" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.819429][ T30] audit: type=1400 audit(1792095992.668:488): avc: denied { map_read map_write } for pid=1841 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 165.843132][ T30] audit: type=1400 audit(1792095992.668:489): avc: denied { perfmon } for pid=1841 comm="syz.2.344" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.945169][ T1859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 165.955035][ T1859] device bridge_slave_1 left promiscuous mode [ 165.962841][ T1859] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.974888][ T1859] device bridge_slave_0 left promiscuous mode [ 165.981965][ T1859] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.249458][ T30] audit: type=1400 audit(1792095992.668:490): avc: denied { create } for pid=1841 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 166.269289][ T30] audit: type=1400 audit(1792095993.877:491): avc: denied { name_bind } for pid=1854 comm="syz.4.346" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 166.897917][ T1866] syz.1.349 (1866): /proc/1864/oom_adj is deprecated, please use /proc/1864/oom_score_adj instead. [ 169.308252][ T1895] device veth0_vlan left promiscuous mode [ 169.404477][ T1895] device veth0_vlan entered promiscuous mode [ 169.657784][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.666077][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.673950][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.682634][ T684] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.689782][ T684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.698179][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.708261][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.439969][ T684] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.447299][ T684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.520754][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.529793][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 170.538006][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.546491][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.555276][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.571230][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.582613][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.591273][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.605123][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.613797][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.622284][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.631098][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.639447][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.647777][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.655884][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.665164][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.676560][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.083291][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.096583][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.106779][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.116717][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.141338][ T1897] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.150442][ T1897] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.167249][ T1897] device bridge1 left promiscuous mode [ 171.173049][ T1897] device sit1 left promiscuous mode [ 171.202005][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.295072][ T1926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 171.304638][ T1926] device bridge_slave_1 left promiscuous mode [ 171.311126][ T1926] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.318995][ T1926] device bridge_slave_0 left promiscuous mode [ 171.325219][ T1926] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.421912][ T1928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.363'. [ 172.606355][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 172.606376][ T30] audit: type=1400 audit(1792095999.902:514): avc: denied { read } for pid=1924 comm="syz.3.364" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 172.723277][ T30] audit: type=1400 audit(1792095999.902:515): avc: denied { open } for pid=1924 comm="syz.3.364" path="/dev/usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 172.747453][ T30] audit: type=1400 audit(1792095999.902:516): avc: denied { ioctl } for pid=1924 comm="syz.3.364" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 173.648912][ T30] audit: type=1400 audit(1792096000.871:517): avc: denied { read } for pid=1937 comm="syz.1.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.682871][ T30] audit: type=1400 audit(1792096001.074:518): avc: denied { remount } for pid=1933 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.241873][ T30] audit: type=1400 audit(1792096002.311:519): avc: denied { write } for pid=1950 comm="syz.1.368" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.290134][ T30] audit: type=1400 audit(1792096002.311:520): avc: denied { read } for pid=1950 comm="syz.1.368" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.311981][ T1980] syz.2.374 uses obsolete (PF_INET,SOCK_PACKET) [ 175.695945][ T30] audit: type=1400 audit(1792096002.495:521): avc: denied { search } for pid=1963 comm="syz.0.371" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 175.719133][ T30] audit: type=1400 audit(1792096002.495:522): avc: denied { read } for pid=1963 comm="syz.0.371" name="trace" dev="tracefs" ino=13075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 175.753113][ T30] audit: type=1400 audit(1792096002.495:523): avc: denied { open } for pid=1963 comm="syz.0.371" path="/74/trace/trace" dev="tracefs" ino=13075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 176.256389][ T1997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 176.265807][ T1997] device bridge_slave_1 left promiscuous mode [ 176.272492][ T1997] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.312621][ T1997] device bridge_slave_0 left promiscuous mode [ 176.319496][ T1997] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.124681][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 178.124700][ T30] audit: type=1400 audit(1792096004.876:532): avc: denied { read write } for pid=2012 comm="syz.1.383" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 178.155415][ T30] audit: type=1400 audit(1792096004.876:533): avc: denied { open } for pid=2012 comm="syz.1.383" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 178.179339][ T30] audit: type=1400 audit(1792096004.876:534): avc: denied { mounton } for pid=2012 comm="syz.1.383" path="/77/file0" dev="tmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 178.201927][ T30] audit: type=1400 audit(1792096004.876:535): avc: denied { mount } for pid=2012 comm="syz.1.383" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 179.187033][ T30] audit: type=1400 audit(1792096006.167:536): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 180.046417][ T30] audit: type=1400 audit(1792096006.979:537): avc: denied { listen } for pid=2021 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 180.109687][ T30] audit: type=1400 audit(1792096006.979:538): avc: denied { create } for pid=2021 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 180.199475][ T30] audit: type=1400 audit(1792096007.007:539): avc: denied { ioctl } for pid=2021 comm="syz.4.385" path="socket:[37356]" dev="sockfs" ino=37356 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 180.292247][ T30] audit: type=1400 audit(1792096007.007:540): avc: denied { connect } for pid=2021 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 180.314422][ T30] audit: type=1400 audit(1792096007.026:541): avc: denied { setopt } for pid=2031 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.561660][ T2040] cgroup: Unknown subsys name 'hash' [ 181.577093][ T2047] netlink: 276 bytes leftover after parsing attributes in process `syz.1.395'. [ 182.714698][ T2061] ip_tables: iptables: counters copy to user failed while replacing table [ 182.845812][ T2064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 183.579699][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 183.579719][ T30] audit: type=1400 audit(1792096010.209:609): avc: denied { mounton } for pid=2055 comm="syz.0.396" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 187.701586][ T30] audit: type=1400 audit(1792620302.266:610): avc: denied { read write } for pid=2098 comm="syz.0.408" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 187.757535][ T30] audit: type=1400 audit(1792620302.306:611): avc: denied { open } for pid=2098 comm="syz.0.408" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 187.842889][ T30] audit: type=1400 audit(1792620302.405:612): avc: denied { write } for pid=2100 comm="syz.3.405" name="ptype" dev="proc" ino=4026532561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 187.906560][ T30] audit: type=1400 audit(1792620302.405:613): avc: denied { mount } for pid=2100 comm="syz.3.405" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 188.024623][ T2112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 188.123940][ T2114] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 188.174124][ T2114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 189.770063][ T30] audit: type=1400 audit(1792620304.305:614): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 189.841302][ T30] audit: type=1400 audit(1792620304.372:615): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 191.057430][ T30] audit: type=1400 audit(1792620305.542:616): avc: denied { read } for pid=2144 comm="syz.3.418" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.484631][ T30] audit: type=1400 audit(1792620305.942:617): avc: denied { open } for pid=2144 comm="syz.3.418" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.824750][ T30] audit: type=1400 audit(1792620306.160:618): avc: denied { create } for pid=2149 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 195.761319][ T2167] team_slave_1: Caught tx_queue_len zero misconfig [ 197.113798][ T30] audit: type=1400 audit(1792620311.169:619): avc: denied { write } for pid=2173 comm="syz.3.425" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 197.195053][ T30] audit: type=1400 audit(1792620311.289:620): avc: denied { map } for pid=2180 comm="syz.2.427" path="socket:[37565]" dev="sockfs" ino=37565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.169647][ T30] audit: type=1400 audit(1792620311.289:621): avc: denied { read } for pid=2180 comm="syz.2.427" path="socket:[37565]" dev="sockfs" ino=37565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.250513][ T30] audit: type=1400 audit(1792620312.273:622): avc: denied { create } for pid=2158 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 198.270286][ T30] audit: type=1400 audit(1792620312.273:623): avc: denied { bind } for pid=2158 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 198.781499][ T30] audit: type=1400 audit(1792620312.273:624): avc: denied { listen } for pid=2158 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.419861][ T30] audit: type=1400 audit(1792620313.348:625): avc: denied { write } for pid=2198 comm="syz.3.429" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 199.457520][ T30] audit: type=1400 audit(1792620313.395:626): avc: denied { write } for pid=2207 comm="syz.1.433" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 200.378773][ T30] audit: type=1400 audit(1792620313.969:627): avc: denied { bind } for pid=2207 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.408996][ T30] audit: type=1400 audit(1792620314.709:628): avc: denied { write } for pid=2207 comm="syz.1.433" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 204.645245][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 204.645267][ T30] audit: type=1326 audit(1792620317.557:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2215 comm="syz.2.437" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a16a6e1d9 code=0x7ffc0000 [ 204.676995][ T30] audit: type=1326 audit(1792620317.557:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2215 comm="syz.2.437" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a16a6e1d9 code=0x7ffc0000 [ 204.702427][ T30] audit: type=1326 audit(1792620317.557:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2215 comm="syz.2.437" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5a16a6e1d9 code=0x7ffc0000 [ 204.727799][ T30] audit: type=1326 audit(1792620317.557:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2215 comm="syz.2.437" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5a16a6df42 code=0x7ffc0000 [ 204.753079][ T30] audit: type=1326 audit(1792620317.576:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2215 comm="syz.2.437" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5a16a2ea0e code=0x7ffc0000 [ 205.724909][ T30] audit: type=1326 audit(1792620317.576:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2215 comm="syz.2.437" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5a16a6e007 code=0x7ffc0000 [ 205.750202][ T30] audit: type=1326 audit(1792620317.576:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2215 comm="syz.2.437" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a16a2ea0e code=0x7ffc0000 [ 205.775242][ T30] audit: type=1326 audit(1792620317.576:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2215 comm="syz.2.437" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5a16a2ea0e code=0x7ffc0000 [ 205.800347][ T30] audit: type=1326 audit(1792620317.576:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2215 comm="syz.2.437" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a16a6e1d9 code=0x7ffc0000 [ 205.825564][ T30] audit: type=1326 audit(1792620317.576:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2215 comm="syz.2.437" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a16a6e1d9 code=0x7ffc0000 [ 208.927706][ T2280] loop0: detected capacity change from 0 to 256 [ 208.949373][ T2280] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.982835][ T2280] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 208.998152][ T2280] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 209.027481][ T2281] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 209.371268][ T2283] devpts: called with bogus options [ 213.306695][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 213.306713][ T30] audit: type=1400 audit(1792620326.192:701): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 213.608115][ T2300] device lo entered promiscuous mode [ 213.613881][ T2300] device tunl0 entered promiscuous mode [ 213.621952][ T2300] device gre0 entered promiscuous mode [ 213.629842][ T2300] device gretap0 entered promiscuous mode [ 213.637445][ T2300] device erspan0 entered promiscuous mode [ 213.649450][ T2300] device ip_vti0 entered promiscuous mode [ 213.656222][ T2300] device ip6_vti0 entered promiscuous mode [ 213.663890][ T2300] device sit0 entered promiscuous mode [ 213.670862][ T2300] device ip6tnl0 entered promiscuous mode [ 213.677703][ T2300] device ip6gre0 entered promiscuous mode [ 213.684874][ T2300] device syz_tun entered promiscuous mode [ 213.692954][ T2300] device ip6gretap0 entered promiscuous mode [ 213.703517][ T2300] device dummy0 entered promiscuous mode [ 213.712696][ T2300] device veth0 entered promiscuous mode [ 213.738465][ T2300] device veth1 entered promiscuous mode [ 215.191875][ T2300] device wg0 entered promiscuous mode [ 215.209536][ T2300] device wg1 entered promiscuous mode [ 215.235972][ T2300] device wg2 entered promiscuous mode [ 215.253042][ T2300] device veth0_to_bridge entered promiscuous mode [ 215.262148][ T2300] device bridge_slave_0 entered promiscuous mode [ 215.270540][ T2300] device veth1_to_bridge entered promiscuous mode [ 215.278799][ T2300] device bridge_slave_1 entered promiscuous mode [ 215.286675][ T2300] device veth1_to_bond entered promiscuous mode [ 215.294623][ T2300] device bond_slave_1 entered promiscuous mode [ 215.301760][ T2300] device veth0_to_team entered promiscuous mode [ 215.309039][ T2300] device team_slave_0 entered promiscuous mode [ 215.317693][ T2300] device veth1_to_team entered promiscuous mode [ 215.327037][ T2300] device team_slave_1 entered promiscuous mode [ 215.335349][ T2300] device veth0_to_batadv entered promiscuous mode [ 215.345168][ T2300] device batadv_slave_0 entered promiscuous mode [ 215.603323][ T2300] device veth1_to_batadv entered promiscuous mode [ 215.611157][ T2300] device batadv_slave_1 entered promiscuous mode [ 215.618753][ T2299] loop0: detected capacity change from 0 to 40427 [ 215.625574][ T2300] device xfrm0 entered promiscuous mode [ 215.632654][ T2300] device veth0_to_hsr entered promiscuous mode [ 215.639728][ T2300] device hsr_slave_0 entered promiscuous mode [ 215.648444][ T2299] F2FS-fs (loop0): fault_injection options not supported [ 215.649470][ T2300] device veth1_to_hsr entered promiscuous mode [ 215.663668][ T2299] F2FS-fs (loop0): Unrecognized mount option "checkpoint[enable" or missing value [ 215.667666][ T2300] device hsr_slave_1 entered promiscuous mode [ 215.680737][ T2300] device veth1_virt_wifi entered promiscuous mode [ 215.690341][ T2300] device veth0_virt_wifi entered promiscuous mode [ 215.701681][ T2300] device veth1_vlan entered promiscuous mode [ 215.719676][ T2300] device vlan0 entered promiscuous mode [ 215.726313][ T2300] device vlan1 entered promiscuous mode [ 215.735969][ T2300] device veth0_macvtap entered promiscuous mode [ 215.799439][ T2318] futex_wake_op: syz.2.460 tries to shift op by 144; fix this program [ 215.879041][ T2300] device macsec0 entered promiscuous mode [ 215.949085][ T2300] device bridge1 entered promiscuous mode [ 215.961837][ T2300] device sit1 entered promiscuous mode [ 216.623478][ T2327] loop0: detected capacity change from 0 to 40427 [ 216.729682][ T2325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 216.816729][ T2327] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 216.824517][ T2327] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 216.836059][ T2327] F2FS-fs (loop0): invalid crc value [ 216.980724][ T2327] F2FS-fs (loop0): Mismatch valid blocks 0 vs. 2 [ 216.988018][ T2327] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 218.470310][ T30] audit: type=1400 audit(1792620330.947:702): avc: denied { create } for pid=2349 comm="syz.3.470" dev="anon_inodefs" ino=37736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 218.594966][ T30] audit: type=1400 audit(1792620331.067:703): avc: denied { write } for pid=2349 comm="syz.3.470" name="set_event" dev="tracefs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 218.751141][ T2359] usb usb8: usbfs: process 2359 (syz.0.468) did not claim interface 0 before use [ 218.865319][ T2363] netlink: 32 bytes leftover after parsing attributes in process `syz.1.471'. [ 218.986262][ T2363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 220.299539][ T2372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.472'. [ 220.314152][ T2372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.472'. [ 220.506235][ T30] audit: type=1400 audit(1793144620.717:704): avc: denied { bind } for pid=2367 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 221.818965][ T30] audit: type=1400 audit(1793144621.265:705): avc: denied { map } for pid=2377 comm="syz.0.475" path="socket:[37758]" dev="sockfs" ino=37758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 223.816651][ T30] audit: type=1400 audit(1793144623.625:706): avc: denied { read write } for pid=2384 comm="syz.0.477" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.846850][ T30] audit: type=1400 audit(1793144623.625:707): avc: denied { open } for pid=2384 comm="syz.0.477" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.871354][ T30] audit: type=1400 audit(1793144623.625:708): avc: denied { ioctl } for pid=2384 comm="syz.0.477" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.304185][ T30] audit: type=1400 audit(1793144624.603:709): avc: denied { getopt } for pid=2389 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.453781][ T30] audit: type=1400 audit(1793144624.603:710): avc: denied { ioctl } for pid=2389 comm="syz.3.478" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=39053 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 224.528197][ T352] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 225.393151][ T352] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.946354][ T352] usb 1-1: config 0 has no interfaces? [ 226.041344][ T2416] xt_TPROXY: Can be used only with -p tcp or -p udp [ 226.055514][ T352] usb 1-1: string descriptor 0 read error: -71 [ 226.065491][ T352] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.077059][ T352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 226.348696][ T352] usb 1-1: config 0 descriptor?? [ 226.429299][ T352] usb 1-1: can't set config #0, error -71 [ 226.435786][ T352] usb 1-1: USB disconnect, device number 2 [ 226.584994][ T2430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.485'. [ 226.639910][ T2430] loop0: detected capacity change from 0 to 256 [ 226.772590][ T2430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 230.328289][ T2467] loop0: detected capacity change from 0 to 256 [ 230.423428][ T2467] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 230.436741][ T30] audit: type=1400 audit(1793144630.480:711): avc: denied { accept } for pid=2459 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 230.463006][ T30] audit: type=1400 audit(1793144630.499:712): avc: denied { write } for pid=2466 comm="syz.0.497" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.485385][ T30] audit: type=1400 audit(1793144630.499:713): avc: denied { add_name } for pid=2466 comm="syz.0.497" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.912493][ T30] audit: type=1400 audit(1793144630.499:714): avc: denied { create } for pid=2466 comm="syz.0.497" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 231.200700][ T30] audit: type=1400 audit(1793144630.499:715): avc: denied { associate } for pid=2466 comm="syz.0.497" name="cpuacct.usage_percpu" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 231.294397][ T352] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 231.500679][ T30] audit: type=1400 audit(1793144630.499:716): avc: denied { append } for pid=2466 comm="syz.0.497" path=2F39392FE91F7189591E9233614B2F637075616363742E75736167655F706572637075 dev="loop0" ino=1048668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 231.671265][ T2467] lo: Caught tx_queue_len zero misconfig [ 231.714339][ T352] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.735942][ T352] usb 4-1: config 0 has no interfaces? [ 231.745773][ T30] audit: type=1400 audit(1793144631.688:717): avc: denied { unlink } for pid=2481 comm="syz.1.501" name="#d" dev="tmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 231.827056][ T2485] : renamed from bond_slave_0 [ 231.846250][ T352] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.957498][ T352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 231.971584][ T30] audit: type=1400 audit(1793144631.753:718): avc: denied { read } for pid=2481 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 232.000931][ T352] usb 4-1: SerialNumber: syz [ 232.009814][ T352] usb 4-1: config 0 descriptor?? [ 232.210322][ T30] audit: type=1400 audit(1793144632.124:719): avc: denied { ioctl } for pid=2490 comm="syz.0.503" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 232.373285][ T30] audit: type=1400 audit(1793144632.217:720): avc: denied { mount } for pid=2463 comm="syz.3.495" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 233.588341][ T392] usb 4-1: USB disconnect, device number 3 [ 234.312291][ T2511] kernel profiling enabled (shift: 9) [ 234.331136][ T2512] x_tables: ip_tables: CT.1 target: invalid size 72 (kernel) != (user) 0 [ 234.733888][ T2521] overlayfs: failed to clone lowerpath [ 238.680754][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.693476][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.725174][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.751630][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.777457][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.802796][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.829064][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 238.853667][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.890957][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.911316][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.919936][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.929751][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.941779][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.951674][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.961698][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.970785][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.979521][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.995226][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.004025][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.012441][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.020980][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.036369][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.052032][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.062848][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.077973][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.095067][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.126429][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.134469][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 239.134488][ T30] audit: type=1400 audit(1793144638.527:724): avc: denied { create } for pid=2566 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 239.169427][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.213882][ T358] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 241.151258][ T358] usb 2-1: Using ep0 maxpacket: 8 [ 241.167594][ T2594] tipc: Can't bind to reserved service type 1 [ 241.241363][ T30] audit: type=1400 audit(1793144640.485:725): avc: denied { connect } for pid=2588 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.261484][ T2593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 241.308292][ T30] audit: type=1400 audit(1793144640.504:726): avc: denied { ioctl } for pid=2588 comm="syz.4.530" path="socket:[39456]" dev="sockfs" ino=39456 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.432440][ T358] usb 2-1: config 0 has no interfaces? [ 241.468469][ T358] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 241.478794][ T358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.887626][ T358] usb 2-1: config 0 descriptor?? [ 242.596176][ T358] usb 2-1: USB disconnect, device number 4 [ 242.651958][ T2590] loop0: detected capacity change from 0 to 40427 [ 242.830332][ T2590] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 243.199339][ T2590] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 243.309996][ T2590] F2FS-fs (loop0): invalid crc value [ 243.359432][ T2590] F2FS-fs (loop0): Found nat_bits in checkpoint [ 243.404663][ T2590] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 243.411937][ T2590] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 244.514209][ T30] audit: type=1400 audit(1793144643.505:727): avc: denied { name_bind } for pid=2616 comm="syz.3.536" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 245.156975][ T2624] device veth1_to_bond left promiscuous mode [ 245.165906][ T2624] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 245.263452][ T2627] ip_tables: iptables: counters copy to user failed while replacing table [ 245.569915][ C1] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 245.781713][ T2634] loop0: detected capacity change from 0 to 128 [ 245.929786][ T2633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 246.333100][ T30] audit: type=1400 audit(1793144645.185:728): avc: denied { mount } for pid=2632 comm="syz.0.540" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 246.491952][ T2650] TCP: TCP_TX_DELAY enabled [ 246.579889][ T2648] device veth0_vlan left promiscuous mode [ 246.586345][ T2648] device veth0_vlan entered promiscuous mode [ 246.601874][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.617157][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.626052][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.644843][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.654399][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.664477][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.673220][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): 30: link becomes ready [ 246.681327][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.690214][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 246.699152][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.708102][ T358] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 246.716154][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.725286][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.742848][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.848379][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.857737][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.871800][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.898181][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.956716][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.061642][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.078104][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.088686][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.099821][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.108781][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.119992][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.136468][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.152848][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.202371][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.209988][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.412402][ T2674] SELinux: Context system_u:object_r:netlabel_mgmt_exec_t:s0 is not valid (left unmapped). [ 248.745510][ T30] audit: type=1400 audit(1793144647.106:729): avc: denied { relabelfrom } for pid=2669 comm="syz.1.548" name="UNIX" dev="sockfs" ino=39544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 249.607631][ T2676] block device autoloading is deprecated and will be removed. [ 249.656233][ T30] audit: type=1400 audit(1793144647.115:730): avc: denied { relabelto } for pid=2669 comm="syz.1.548" name="UNIX" dev="sockfs" ino=39544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 249.706551][ T30] audit: type=1400 audit(1793144647.493:731): avc: denied { read write } for pid=2671 comm="syz.3.549" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 249.805879][ T30] audit: type=1400 audit(1793144647.493:732): avc: denied { open } for pid=2671 comm="syz.3.549" path="/110/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 249.831553][ T30] audit: type=1400 audit(1793144647.521:733): avc: denied { ioctl } for pid=2671 comm="syz.3.549" path="/110/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 249.859681][ T30] audit: type=1400 audit(1793144648.232:734): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 250.483207][ T30] audit: type=1400 audit(1793144648.417:735): avc: denied { execute } for pid=2685 comm="syz.4.552" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 250.999782][ T30] audit: type=1400 audit(1793144649.488:736): avc: denied { write } for pid=2694 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 251.349826][ T2710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'. [ 251.719485][ T30] audit: type=1400 audit(1793144650.143:737): avc: denied { connect } for pid=2671 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 252.935201][ T30] audit: type=1326 audit(1793144651.094:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.0.559" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad25f4a1d9 code=0x7ffc0000 [ 253.923603][ T30] audit: type=1326 audit(1793144651.094:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.0.559" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad25f4a1d9 code=0x7ffc0000 [ 253.950478][ T30] audit: type=1326 audit(1793144651.103:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.0.559" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fad25f4a1d9 code=0x7ffc0000 [ 253.978133][ T30] audit: type=1326 audit(1793144651.103:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.0.559" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fad25f49f42 code=0x7ffc0000 [ 254.004341][ T30] audit: type=1326 audit(1793144651.122:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.0.559" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fad25f0aa0e code=0x7ffc0000 [ 254.030069][ T30] audit: type=1326 audit(1793144651.140:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.0.559" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fad25f4a007 code=0x7ffc0000 [ 254.199093][ T30] audit: type=1326 audit(1793144651.140:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.0.559" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad25f0aa0e code=0x7ffc0000 [ 254.227877][ T30] audit: type=1326 audit(1793144651.140:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.0.559" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad25f49e6b code=0x7ffc0000 [ 254.256097][ T30] audit: type=1326 audit(1793144651.140:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.0.559" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad25f49e6b code=0x7ffc0000 [ 254.284583][ T30] audit: type=1326 audit(1793144651.140:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.0.559" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad25f0aa0e code=0x7ffc0000 [ 255.793315][ T2741] netlink: 'syz.2.566': attribute type 13 has an invalid length. [ 256.099413][ T358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 256.108271][ T358] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 256.364496][ T2754] device veth0_vlan left promiscuous mode [ 256.459126][ T2754] device veth0_vlan entered promiscuous mode [ 256.680016][ T2757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 256.706877][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.726099][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 256.762998][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan.4: link becomes ready [ 256.801884][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 256.844225][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 256.883604][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 256.973131][ T2769] netlink: 104 bytes leftover after parsing attributes in process `syz.1.572'. [ 258.187949][ T358] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 258.354074][ T2792] netlink: 3584 bytes leftover after parsing attributes in process `syz.3.578'. [ 258.381066][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 258.381084][ T30] audit: type=1400 audit(1793144656.301:812): avc: denied { connect } for pid=2779 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.541472][ T30] audit: type=1400 audit(1793144656.301:813): avc: denied { write } for pid=2779 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.758264][ T30] audit: type=1400 audit(1793144656.578:814): avc: denied { connect } for pid=2795 comm="syz.4.580" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 259.413457][ T30] audit: type=1400 audit(1793144656.643:815): avc: denied { read } for pid=2779 comm="syz.2.576" path="socket:[40393]" dev="sockfs" ino=40393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 259.446066][ T30] audit: type=1400 audit(1793144657.289:816): avc: denied { map } for pid=2801 comm="syz.0.582" path="/dev/usbmon2" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 259.465422][ T2802] input: syz1 as /devices/virtual/input/input6 [ 259.575017][ T30] audit: type=1400 audit(1793144657.353:817): avc: denied { read } for pid=85 comm="acpid" name="event3" dev="devtmpfs" ino=748 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 259.660488][ T2807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.583'. [ 259.680533][ T30] audit: type=1400 audit(1793144657.353:818): avc: denied { open } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=748 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 259.740625][ T30] audit: type=1400 audit(1793144657.353:819): avc: denied { ioctl } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=748 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 259.780865][ T358] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.803585][ T358] usb 2-1: config 0 interface 0 has no altsetting 0 [ 259.819562][ T358] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 259.845830][ T30] audit: type=1400 audit(1793144657.649:820): avc: denied { ioctl } for pid=2806 comm="syz.0.583" path="socket:[41109]" dev="sockfs" ino=41109 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 259.884763][ T358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.989743][ T358] usb 2-1: config 0 descriptor?? [ 260.409705][ T358] usb 2-1: can't set config #0, error -71 [ 260.429226][ T358] usb 2-1: USB disconnect, device number 5 [ 260.981558][ T30] audit: type=1400 audit(1793144658.701:821): avc: denied { ioctl } for pid=2834 comm="syz.3.591" path="socket:[41213]" dev="sockfs" ino=41213 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 261.098019][ T2837] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 261.106397][ T2837] netlink: 'syz.2.590': attribute type 2 has an invalid length. [ 261.534415][ T2844] netlink: 156 bytes leftover after parsing attributes in process `syz.2.590'. [ 263.767273][ T2867] lo: Caught tx_queue_len zero misconfig [ 264.789962][ T2876] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 264.800014][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 264.800029][ T30] audit: type=1400 audit(1793144668.234:824): avc: denied { relabelto } for pid=2875 comm="syz.4.602" name="121" dev="tmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 264.832551][ T30] audit: type=1400 audit(1793144668.234:825): avc: denied { associate } for pid=2875 comm="syz.4.602" name="121" dev="tmpfs" ino=709 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 266.939955][ T30] audit: type=1400 audit(1793144670.200:826): avc: denied { getopt } for pid=2908 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 267.011499][ T30] audit: type=1400 audit(1793144670.274:827): avc: denied { shutdown } for pid=2910 comm="syz.0.614" laddr=172.20.20.10 lport=255 faddr=172.20.20.170 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.050209][ T30] audit: type=1400 audit(1793144670.283:828): avc: denied { ioctl } for pid=2892 comm="syz.1.609" path="socket:[40706]" dev="sockfs" ino=40706 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 267.711482][ T30] audit: type=1400 audit(1793144670.680:829): avc: denied { read } for pid=2910 comm="syz.0.614" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 267.837676][ T30] audit: type=1400 audit(1793144670.680:830): avc: denied { open } for pid=2910 comm="syz.0.614" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 267.864543][ T30] audit: type=1400 audit(1793144670.689:831): avc: denied { ioctl } for pid=2910 comm="syz.0.614" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 267.891666][ T30] audit: type=1400 audit(1793144670.689:832): avc: denied { set_context_mgr } for pid=2910 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 267.913673][ T30] audit: type=1400 audit(1793144671.030:833): avc: denied { setopt } for pid=2936 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 269.160269][ T2966] netlink: 'syz.1.634': attribute type 1 has an invalid length. [ 269.203013][ T2966] netlink: 'syz.1.634': attribute type 2 has an invalid length. [ 269.531564][ T2971] netlink: 156 bytes leftover after parsing attributes in process `syz.1.634'. [ 269.987286][ T299] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 271.713784][ T3012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.649'. [ 271.723195][ T3012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 271.732171][ T299] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.529038][ T299] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 272.538600][ T299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.547011][ T299] usb 1-1: Product: syz [ 272.551256][ T299] usb 1-1: Manufacturer: syz [ 272.555979][ T299] usb 1-1: SerialNumber: syz [ 272.943568][ T299] usb 1-1: USB disconnect, device number 4 [ 273.120656][ T30] audit: type=1400 audit(1793144675.911:834): avc: denied { nlmsg_read } for pid=3053 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 273.158204][ T30] audit: type=1400 audit(1793144675.939:835): avc: denied { nlmsg_read } for pid=3055 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 274.566098][ T3068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.669'. [ 274.782273][ T3071] device lo entered promiscuous mode [ 275.861431][ T3071] device tunl0 entered promiscuous mode [ 275.869382][ T3071] device gre0 entered promiscuous mode [ 275.878174][ T3071] device gretap0 entered promiscuous mode [ 275.886838][ T3071] device erspan0 entered promiscuous mode [ 275.896817][ T3071] device ip_vti0 entered promiscuous mode [ 275.903961][ T3071] device ip6_vti0 entered promiscuous mode [ 275.962432][ T3071] device sit0 entered promiscuous mode [ 275.970909][ T3071] device ip6tnl0 entered promiscuous mode [ 275.977659][ T3071] device ip6gre0 entered promiscuous mode [ 275.988066][ T3071] device syz_tun entered promiscuous mode [ 275.995277][ T3071] device ip6gretap0 entered promiscuous mode [ 276.002463][ T3071] device dummy0 entered promiscuous mode [ 276.009234][ T3071] device veth0 entered promiscuous mode [ 276.015903][ T3071] device veth1 entered promiscuous mode [ 276.030966][ T3071] device wg0 entered promiscuous mode [ 276.049768][ T3071] device wg1 entered promiscuous mode [ 276.056551][ T3071] device wg2 entered promiscuous mode [ 276.062956][ T3071] device veth0_to_bridge entered promiscuous mode [ 276.070916][ T3071] device bridge_slave_0 entered promiscuous mode [ 276.079648][ T3071] device veth1_to_bridge entered promiscuous mode [ 276.087382][ T3071] device bridge_slave_1 entered promiscuous mode [ 276.095238][ T3071] device veth0_to_bond entered promiscuous mode [ 276.103305][ T3071] device 30 entered promiscuous mode [ 276.110092][ T3071] device veth1_to_bond entered promiscuous mode [ 276.117855][ T3071] device bond_slave_1 entered promiscuous mode [ 276.125918][ T3071] device veth0_to_team entered promiscuous mode [ 277.278026][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 277.799503][ T291] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 278.424746][ T3071] device team_slave_0 entered promiscuous mode [ 278.436278][ T3071] device veth1_to_team entered promiscuous mode [ 278.450101][ T3071] device team_slave_1 entered promiscuous mode [ 278.470397][ T3071] device veth0_to_batadv entered promiscuous mode [ 278.499216][ T30] audit: type=1400 audit(1793144680.857:836): avc: denied { write } for pid=3095 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 278.500422][ T3071] device batadv_slave_0 entered promiscuous mode [ 278.526545][ T3071] device veth1_to_batadv entered promiscuous mode [ 278.526539][ T30] audit: type=1400 audit(1793144680.894:837): avc: denied { ioctl } for pid=3099 comm="syz.1.680" path="socket:[41729]" dev="sockfs" ino=41729 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 278.559371][ T3071] device batadv_slave_1 entered promiscuous mode [ 278.608095][ T3071] device xfrm0 entered promiscuous mode [ 278.615455][ T3071] device veth0_to_hsr entered promiscuous mode [ 278.622688][ T3071] device hsr_slave_0 entered promiscuous mode [ 278.629796][ T3071] device veth1_to_hsr entered promiscuous mode [ 278.648097][ T3071] device hsr_slave_1 entered promiscuous mode [ 278.656197][ T3071] device veth1_virt_wifi entered promiscuous mode [ 278.665370][ T3071] device veth0_virt_wifi entered promiscuous mode [ 278.674362][ T3071] device veth1_vlan entered promiscuous mode [ 279.403042][ T3071] device vlan0 entered promiscuous mode [ 279.410269][ T3071] device vlan1 entered promiscuous mode [ 279.416407][ T3071] device xfrm1 entered promiscuous mode [ 279.423034][ T3071] device ip6erspan0 entered promiscuous mode [ 279.430767][ T3071] device ipip0 entered promiscuous mode [ 279.456125][ T3071] device ip6gre1 entered promiscuous mode [ 279.464634][ T3071] device ip6tnl1 entered promiscuous mode [ 279.564610][ T3118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 279.590512][ T3120] team_slave_1: Caught tx_queue_len zero misconfig [ 281.025902][ T3163] netlink: 'syz.3.704': attribute type 32 has an invalid length. [ 281.057668][ T30] audit: type=1400 audit(1793144683.228:838): avc: denied { append } for pid=3168 comm="syz.0.708" name="001" dev="devtmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 282.688016][ T3200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 282.808335][ T30] audit: type=1400 audit(1793144684.825:839): avc: denied { ioctl } for pid=3212 comm="syz.4.726" path="socket:[42208]" dev="sockfs" ino=42208 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 283.302359][ T30] audit: type=1400 audit(1793144685.304:840): avc: denied { getopt } for pid=3217 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 284.356653][ T30] audit: type=1400 audit(1793144686.273:841): avc: denied { read write } for pid=3231 comm="syz.0.734" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 285.378914][ T30] audit: type=1400 audit(1793144686.273:842): avc: denied { open } for pid=3231 comm="syz.0.734" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 286.496724][ T30] audit: type=1400 audit(1793144688.229:843): avc: denied { create } for pid=3255 comm="syz.0.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 286.517545][ T30] audit: type=1400 audit(1793144688.229:844): avc: denied { getopt } for pid=3255 comm="syz.0.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 286.539202][ T30] audit: type=1400 audit(1793144688.248:845): avc: denied { setopt } for pid=3261 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 286.560650][ T30] audit: type=1400 audit(1793144688.275:846): avc: denied { connect } for pid=3264 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 286.585975][ T30] audit: type=1400 audit(1793144688.294:847): avc: denied { getopt } for pid=3268 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 288.511722][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.522095][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.550912][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.579740][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.606681][ T30] audit: type=1400 audit(1793144690.185:848): avc: denied { write } for pid=3302 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 288.608388][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.639831][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.648841][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): 30: link becomes ready [ 288.656937][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.665471][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 288.674206][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 288.683132][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.693701][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.702222][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.714170][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.724472][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.728608][ T3324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 288.753032][ T3324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 289.013035][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.030397][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.031074][ T30] audit: type=1400 audit(1793144690.591:849): avc: denied { ioctl } for pid=3336 comm="syz.4.780" path="socket:[41969]" dev="sockfs" ino=41969 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.049732][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.072220][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.081717][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.090231][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.106204][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.114452][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 289.123452][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 289.138568][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.146820][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.214004][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.221553][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.141202][ T3366] mip6: mip6_destopt_init_state: spi is not 0: 3557031936 [ 290.319544][ T3370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'. [ 290.562752][ T30] audit: type=1400 audit(1793144691.994:850): avc: denied { map } for pid=3384 comm="syz.4.799" path="socket:[43068]" dev="sockfs" ino=43068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 290.853819][ T3408] mip6: mip6_rthdr_init_state: spi is not 0: 4261412863 [ 291.136669][ T3416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.814'. [ 291.148805][ T3416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.814'. [ 291.169602][ T3421] overlayfs: conflicting options: nfs_export=on,index=off [ 291.250284][ T3439] netlink: 56 bytes leftover after parsing attributes in process `syz.1.824'. [ 291.441418][ T30] audit: type=1400 audit(1793144692.815:851): avc: denied { bind } for pid=3473 comm="syz.1.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 291.465259][ T30] audit: type=1400 audit(1793144692.815:852): avc: denied { name_bind } for pid=3473 comm="syz.1.841" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 292.388055][ T3529] ip_tables: iptables: counters copy to user failed while replacing table [ 292.420220][ T3531] overlayfs: unrecognized mount option "/file0" or missing value [ 292.476781][ T3537] netlink: 56 bytes leftover after parsing attributes in process `syz.4.868'. [ 296.183475][ T3610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.898'. [ 296.192773][ T3610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.898'. [ 296.210030][ T3610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 296.219504][ T3610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 296.921815][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 296.921833][ T30] audit: type=1400 audit(1793144697.871:854): avc: denied { setopt } for pid=3650 comm="syz.4.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 296.996962][ T3657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.916'. [ 297.191508][ T3694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 297.195762][ T30] audit: type=1400 audit(1793144698.121:855): avc: denied { setcheckreqprot } for pid=3695 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 297.493702][ T1196] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 297.894688][ T1196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.912694][ T1196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.938042][ T3734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.952'. [ 297.947529][ T3734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.952'. [ 298.057152][ T1196] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 298.066982][ T1196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 298.075468][ T1196] usb 4-1: Product: syz [ 298.079809][ T1196] usb 4-1: Manufacturer: syz [ 298.122631][ T1196] hub 4-1:1.0: USB hub found [ 298.350745][ T3748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.957'. [ 298.377219][ T1196] hub 4-1:1.0: config failed, can't read hub descriptor (err -90) [ 298.750770][ T1196] usb 4-1: USB disconnect, device number 4 [ 299.441589][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 301.010481][ T30] audit: type=1400 audit(1793144701.645:856): avc: denied { bind } for pid=3837 comm="syz.0.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 301.048285][ T30] audit: type=1400 audit(1793144701.673:857): avc: denied { wake_alarm } for pid=3841 comm="syz.0.993" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 301.059580][ T3846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'. [ 301.447291][ T3866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.984202][ T3880] netlink: 'syz.2.1009': attribute type 1 has an invalid length. [ 302.163472][ T358] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 302.188989][ T3890] __nla_validate_parse: 2 callbacks suppressed [ 302.189010][ T3890] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1014'. [ 302.219941][ T3895] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1016'. [ 302.238039][ T30] audit: type=1400 audit(1793144702.771:858): avc: denied { read } for pid=3897 comm="syz.2.1018" path="socket:[43743]" dev="sockfs" ino=43743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 302.554781][ T358] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.587219][ T358] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 302.609081][ T358] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.814912][ T358] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.831747][ T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.847310][ T358] usb 4-1: Product: syz [ 302.857422][ T358] usb 4-1: Manufacturer: syz [ 302.866881][ T358] usb 4-1: SerialNumber: syz [ 302.923605][ T358] hub 4-1:1.0: bad descriptor, ignoring hub [ 302.933266][ T358] hub: probe of 4-1:1.0 failed with error -5 [ 302.947152][ T358] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 303.151567][ T3919] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 303.179824][ T3919] 9pnet: Insufficient options for proto=fd [ 303.254393][ T3923] netlink: 3584 bytes leftover after parsing attributes in process `syz.1.1028'. [ 303.263897][ T3923] lo: Caught tx_queue_len zero misconfig [ 303.288958][ T6] usb 4-1: USB disconnect, device number 5 [ 303.299724][ T30] audit: type=1400 audit(1793144703.749:859): avc: denied { ioctl } for pid=3924 comm="syz.1.1029" path="/dev/ptp0" dev="devtmpfs" ino=260 ioctlcmd=0x3d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 303.359469][ T3931] netlink: 'syz.1.1031': attribute type 1 has an invalid length. [ 303.671394][ T30] audit: type=1400 audit(1793144704.100:860): avc: denied { setopt } for pid=3963 comm="syz.0.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 303.774756][ T30] audit: type=1400 audit(1793144704.192:861): avc: denied { view } for pid=3970 comm="syz.0.1051" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 304.402684][ T30] audit: type=1400 audit(1793144704.773:862): avc: denied { getopt } for pid=4006 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 307.264413][ T4089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'. [ 307.278048][ T4089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 307.279544][ T30] audit: type=1400 audit(1793144707.421:863): avc: denied { write } for pid=4093 comm="syz.1.1106" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 307.317868][ T30] audit: type=1400 audit(1793144707.440:864): avc: denied { open } for pid=4093 comm="syz.1.1106" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 307.417809][ T30] audit: type=1400 audit(1793144707.440:865): avc: denied { ioctl } for pid=4093 comm="syz.1.1106" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 307.448916][ T4108] IPv6: NLM_F_CREATE should be specified when creating new route [ 307.499771][ T4098] x_tables: unsorted entry at hook 3 [ 307.679329][ T4133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1124'. [ 307.755378][ T4152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1133'. [ 307.871625][ T30] audit: type=1400 audit(1793144707.975:866): avc: denied { accept } for pid=4175 comm="syz.3.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 307.911099][ T4184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'. [ 309.208075][ T4230] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1169'. [ 309.241247][ T4234] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 311.673326][ T4290] device veth0_vlan left promiscuous mode [ 311.731270][ T30] audit: type=1400 audit(1793144711.527:867): avc: denied { load_policy } for pid=4298 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 311.731311][ T4299] SELinux: policydb string does not match my string SE Linux [ 311.759518][ T4299] SELinux: failed to load policy [ 312.852807][ T30] audit: type=1400 audit(1793144712.570:868): avc: denied { shutdown } for pid=4326 comm="syz.2.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 312.894681][ T4330] netlink: 'syz.2.1210': attribute type 32 has an invalid length. [ 313.084401][ T4364] netlink: 'syz.4.1225': attribute type 5 has an invalid length. [ 313.214121][ T4385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1237'. [ 313.226373][ T4385] netlink: 'syz.4.1237': attribute type 2 has an invalid length. [ 313.241935][ T30] audit: type=1400 audit(1793144712.921:869): avc: denied { connect } for pid=4386 comm="syz.1.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.266126][ T4392] mip6: mip6_rthdr_init_state: state's mode is not 2: 1 [ 314.652632][ T4421] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1252'. [ 314.662049][ T4421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1252'. [ 314.671118][ T4421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 314.680482][ T4421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 314.702668][ T4427] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1255'. [ 314.709512][ T4429] xt_hashlimit: size too large, truncated to 1048576 [ 315.546253][ T4454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1267'. [ 315.587493][ T4462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1272'. [ 315.628635][ T4462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1272'. [ 315.657254][ T4462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1272'. [ 315.710730][ T30] audit: type=1400 audit(1793144715.200:870): avc: denied { lock } for pid=4486 comm="syz.1.1281" path="socket:[46342]" dev="sockfs" ino=46342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 315.761955][ T4493] netlink: 'syz.1.1284': attribute type 3 has an invalid length. [ 315.913010][ T4513] device vlan0 entered promiscuous mode [ 315.924656][ T4513] device veth0_vlan entered promiscuous mode [ 317.972540][ T4527] netlink: 'syz.4.1300': attribute type 32 has an invalid length. [ 318.439785][ T4618] SELinux: Context system_u:object_r:groupadd_exec_t:s0 is not valid (left unmapped). [ 318.458402][ T30] audit: type=1400 audit(1793144717.728:871): avc: denied { relabelto } for pid=4617 comm="syz.3.1345" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:groupadd_exec_t:s0" [ 318.545321][ T30] audit: type=1400 audit(1793144717.728:872): avc: denied { associate } for pid=4617 comm="syz.3.1345" name="loop5" dev="devtmpfs" ino=121 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:groupadd_exec_t:s0" [ 320.628391][ T30] audit: type=1400 audit(1793144719.739:873): avc: denied { write } for pid=4670 comm="syz.1.1367" path="socket:[45637]" dev="sockfs" ino=45637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 320.762848][ T4682] __nla_validate_parse: 3 callbacks suppressed [ 320.762871][ T4682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1371'. [ 320.803677][ T4687] netlink: 4704 bytes leftover after parsing attributes in process `syz.1.1374'. [ 320.839229][ T4687] netlink: 'syz.1.1374': attribute type 1 has an invalid length. [ 321.060106][ T4708] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1384'. [ 321.124875][ T4717] netlink: 9028 bytes leftover after parsing attributes in process `syz.1.1389'. [ 321.148836][ T4720] netlink: 'syz.1.1390': attribute type 3 has an invalid length. [ 321.169678][ T30] audit: type=1400 audit(1793144720.238:874): avc: denied { bind } for pid=4721 comm="syz.1.1391" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 321.202009][ T30] audit: type=1400 audit(1793144720.265:875): avc: denied { name_bind } for pid=4721 comm="syz.1.1391" src=17956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 321.231504][ T30] audit: type=1400 audit(1793144720.265:876): avc: denied { node_bind } for pid=4721 comm="syz.1.1391" saddr=2001::2 src=17956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 321.622089][ T4741] binder: BINDER_SET_CONTEXT_MGR already set [ 321.629615][ T4741] binder: 4740:4741 ioctl 40046207 0 returned -16 [ 321.881008][ T4758] fuse: Bad value for 'fd' [ 322.061152][ T4766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1409'. [ 322.246661][ T30] audit: type=1400 audit(1793144721.234:877): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 322.860725][ T4820] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.112320][ T4840] device batadv_slave_1 entered promiscuous mode [ 323.124912][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.132949][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.191249][ T4923] xt_hashlimit: size too large, truncated to 1048576 [ 324.474815][ T4949] xt_hashlimit: size too large, truncated to 1048576 [ 325.272224][ T5000] xt_hashlimit: size too large, truncated to 1048576 [ 326.634330][ T5044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1532'. [ 326.647148][ T5044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1532'. [ 326.825449][ T5048] device vlan2 entered promiscuous mode [ 326.875649][ T30] audit: type=1400 audit(1793144725.516:878): avc: denied { create } for pid=5064 comm="syz.1.1542" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 326.960550][ T5070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1544'. [ 327.090175][ T5076] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1547'. [ 328.426156][ T30] audit: type=1400 audit(1793144726.937:879): avc: denied { write } for pid=5095 comm="syz.0.1552" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 328.837426][ T5112] usb usb8: usbfs: process 5112 (syz.3.1560) did not claim interface 0 before use [ 330.604364][ T5134] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 330.708399][ T5144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1571'. [ 330.920297][ T30] audit: type=1400 audit(1793144729.234:880): avc: denied { listen } for pid=5166 comm="syz.1.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 332.399942][ T5158] syz.3.1578 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 332.521316][ T5184] sd 0:0:1:0: PR command failed: 2 [ 332.548771][ T5184] sd 0:0:1:0: Sense Key : 0x5 [current] [ 332.591587][ T5184] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 332.728121][ T30] audit: type=1400 audit(1793144730.913:881): avc: denied { execute_no_trans } for pid=5201 comm="syz.3.1595" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 333.084923][ T392] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 333.485736][ T392] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 333.501706][ T392] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 333.529550][ T392] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 333.561935][ T392] usb 2-1: config 220 has no interface number 2 [ 333.575557][ T392] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 333.602985][ T392] usb 2-1: config 220 interface 0 has no altsetting 0 [ 333.618228][ T392] usb 2-1: config 220 interface 76 has no altsetting 0 [ 333.632451][ T392] usb 2-1: config 220 interface 1 has no altsetting 0 [ 333.832639][ T392] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 333.846270][ T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.860899][ T392] usb 2-1: Product: syz [ 333.866785][ T392] usb 2-1: Manufacturer: syz [ 333.871724][ T392] usb 2-1: SerialNumber: syz [ 333.936675][ T30] audit: type=1400 audit(1793144732.021:882): avc: denied { create } for pid=5229 comm="syz.0.1608" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 333.960195][ T30] audit: type=1400 audit(1793144732.021:883): avc: denied { read } for pid=5229 comm="syz.0.1608" name="file0" dev="tmpfs" ino=1535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 333.987866][ T30] audit: type=1400 audit(1793144732.021:884): avc: denied { open } for pid=5229 comm="syz.0.1608" path="/279/file0" dev="tmpfs" ino=1535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 334.014209][ T30] audit: type=1400 audit(1793144732.021:885): avc: denied { ioctl } for pid=5229 comm="syz.0.1608" path="/279/file0" dev="tmpfs" ino=1535 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 334.039321][ T30] audit: type=1400 audit(1793144732.030:886): avc: denied { unlink } for pid=286 comm="syz-executor" name="file0" dev="tmpfs" ino=1535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 334.063582][ T30] audit: type=1400 audit(1793144732.076:887): avc: denied { append } for pid=5240 comm="syz.0.1613" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 334.244492][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.259842][ T352] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 334.282482][ T5261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1622'. [ 334.298695][ T392] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 334.305676][ T392] usb 2-1: No valid video chain found. [ 334.312148][ T392] usb 2-1: selecting invalid altsetting 0 [ 334.408121][ T392] usb 2-1: USB disconnect, device number 6 [ 334.439411][ T1196] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 334.667177][ T352] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 334.677343][ T352] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 334.710357][ T1196] usb 1-1: Using ep0 maxpacket: 8 [ 334.775532][ T5275] fuse: Bad value for 'fd' [ 334.840466][ T1196] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 334.849140][ T1196] usb 1-1: config 179 has no interface number 0 [ 334.855566][ T352] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 334.865931][ T1196] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 334.877235][ T352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.885487][ T352] usb 4-1: Product: syz [ 334.889676][ T352] usb 4-1: Manufacturer: syz [ 334.894638][ T1196] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 334.906172][ T352] usb 4-1: SerialNumber: syz [ 334.911051][ T1196] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 334.923215][ T1196] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 334.935011][ T1196] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 334.949778][ T1196] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 334.958990][ T1196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.971006][ T352] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 334.979271][ T352] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 334.979271][ T352] Please send a copy of this message to and [ 335.008955][ T5249] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 335.264159][ T392] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7 [ 335.471229][ T1196] usb 1-1: USB disconnect, device number 5 [ 335.479777][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 335.489247][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 335.501065][ T1196] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 335.686536][ T352] ums-sddr09: probe of 4-1:1.0 failed with error -5 [ 335.826668][ T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 335.904594][ T299] usb 4-1: USB disconnect, device number 6 [ 336.108428][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 336.238596][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.250066][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.260108][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 336.269299][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.279400][ T6] usb 2-1: config 0 descriptor?? [ 336.309193][ T30] audit: type=1400 audit(1793144734.207:888): avc: denied { getopt } for pid=5377 comm="syz.4.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 336.331282][ T6] hub 2-1:0.0: USB hub found [ 336.548604][ T5370] UDC core: couldn't find an available UDC or it's busy: -16 [ 336.556319][ T5370] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 337.081674][ T5407] SELinux: failed to load policy [ 337.119483][ T6] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 337.235639][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 337.241807][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 337.279242][ T6] usb 2-1: USB disconnect, device number 7 [ 337.698533][ T30] audit: type=1400 audit(1793144735.490:889): avc: denied { read } for pid=5448 comm="syz.1.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 337.961336][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1717'. [ 338.646606][ T5505] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=47 sclass=netlink_audit_socket pid=5505 comm=syz.1.1734 [ 338.660014][ T5505] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=5505 comm=syz.1.1734 [ 338.786486][ T30] audit: type=1400 audit(1793144736.505:890): avc: denied { mounton } for pid=5520 comm="syz.0.1742" path="/292/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 338.786946][ T5521] incfs: Can't find or create .index dir in ./file0 [ 338.821651][ T5521] incfs: mount failed -1 [ 338.840343][ T5521] incfs: Can't find or create .index dir in ./file0 [ 338.847150][ T5521] incfs: mount failed -1 [ 338.980384][ T352] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 339.103422][ T5548] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 339.139760][ T30] audit: type=1400 audit(1793144736.819:891): avc: denied { mount } for pid=5549 comm="syz.0.1756" name="/" dev="configfs" ino=13210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 339.165879][ T30] audit: type=1400 audit(1793144736.856:892): avc: denied { search } for pid=5549 comm="syz.0.1756" name="/" dev="configfs" ino=13210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 339.189874][ T30] audit: type=1400 audit(1793144736.856:893): avc: denied { setattr } for pid=5549 comm="syz.0.1756" name="/" dev="configfs" ino=13210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 339.500858][ T352] usb 2-1: unable to get BOS descriptor or descriptor too short [ 339.587467][ T352] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.598266][ T352] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.911648][ T352] usb 2-1: string descriptor 0 read error: -22 [ 339.922891][ T352] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 339.932346][ T352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.979009][ T352] usb 2-1: selecting invalid altsetting 1 [ 339.985503][ T352] usb 2-1: unit 6 not found! [ 341.027912][ T5643] netlink: 'syz.3.1799': attribute type 32 has an invalid length. [ 341.036145][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1799'. [ 341.077675][ T30] audit: type=1400 audit(1793144738.609:894): avc: denied { read } for pid=5650 comm="syz.0.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 341.353844][ T6] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 341.635833][ T352] usb 2-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 341.659044][ T352] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 341.691270][ T352] usb 2-1: USB disconnect, device number 8 [ 341.765740][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 341.917458][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.927908][ T6] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 342.112607][ T6] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 342.121859][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.130016][ T6] usb 4-1: Product: syz [ 342.134372][ T6] usb 4-1: Manufacturer: syz [ 342.139176][ T6] usb 4-1: SerialNumber: syz [ 343.889985][ T6] usb 4-1: USB disconnect, device number 7 [ 344.226366][ T5715] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1827'. [ 344.249324][ T5715] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1827'. [ 344.312417][ T30] audit: type=1400 audit(1793144741.589:895): avc: denied { bind } for pid=5724 comm="syz.4.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 345.530883][ T5747] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1841'. [ 345.542186][ T5747] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1841'. [ 345.597158][ T5750] overlayfs: failed to clone upperpath [ 345.700088][ T5760] netlink: 580 bytes leftover after parsing attributes in process `syz.4.1848'. [ 345.871058][ T30] audit: type=1400 audit(1793144743.028:896): avc: denied { accept } for pid=5779 comm="syz.3.1857" path="socket:[49469]" dev="sockfs" ino=49469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 346.076477][ T5794] xt_hashlimit: size too large, truncated to 1048576 [ 346.760384][ T5831] syz.2.1878[5831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.760474][ T5831] syz.2.1878[5831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.802784][ T30] audit: type=1400 audit(1793144743.887:897): avc: denied { getattr } for pid=5832 comm="syz.1.1879" path="/" dev="nsfs" ino=4026532287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 346.958076][ T30] audit: type=1400 audit(1793144744.043:898): avc: denied { module_load } for pid=5858 comm="syz.1.1892" path="/392/file2" dev="tmpfs" ino=2134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 346.958451][ T5859] Invalid ELF header magic: != ELF [ 346.989642][ T5861] fuse: Bad value for 'fd' [ 347.032841][ T352] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 347.336375][ T1196] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 347.466490][ T352] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 347.475610][ T352] usb 4-1: config 0 has no interface number 0 [ 347.536847][ T352] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.589509][ T352] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.594771][ T30] audit: type=1400 audit(1793144744.625:899): avc: denied { read } for pid=5878 comm="syz.0.1901" path="socket:[50732]" dev="sockfs" ino=50732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 347.600105][ T352] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.636339][ T352] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 347.645705][ T352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.655656][ T352] usb 4-1: config 0 descriptor?? [ 347.726540][ T1196] usb 2-1: unable to get BOS descriptor or descriptor too short [ 347.791508][ T1196] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 347.799397][ T1196] usb 2-1: can't read configurations, error -71 [ 348.972895][ T352] uclogic 0003:28BD:0042.0003: failed retrieving string descriptor #100: -71 [ 348.993582][ T352] uclogic 0003:28BD:0042.0003: failed retrieving pen parameters: -71 [ 349.015061][ T352] uclogic 0003:28BD:0042.0003: pen probing failed: -71 [ 349.040823][ T352] uclogic 0003:28BD:0042.0003: failed probing parameters: -71 [ 349.063248][ T352] uclogic: probe of 0003:28BD:0042.0003 failed with error -71 [ 349.104555][ T352] usb 4-1: USB disconnect, device number 8 [ 349.114790][ T30] audit: type=1400 audit(1793144746.027:900): avc: denied { watch } for pid=5904 comm="syz.1.1911" path="/399/cgroup" dev="tmpfs" ino=2167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 349.167243][ T30] audit: type=1400 audit(1793144746.073:901): avc: denied { write } for pid=5915 comm="syz.0.1918" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 349.190043][ T30] audit: type=1400 audit(1793144746.073:902): avc: denied { open } for pid=5915 comm="syz.0.1918" path="/323/dev/kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 349.235871][ T6] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 349.246587][ T6] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 349.363310][ T5935] fido_id[5935]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 350.405234][ T5958] xt_hashlimit: size too large, truncated to 1048576 [ 350.417267][ T5956] netlink: 'syz.4.1933': attribute type 12 has an invalid length. [ 350.641807][ T1196] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 350.648186][ T5978] xt_hashlimit: size too large, truncated to 1048576 [ 350.665700][ T5982] ip_tables: iptables: counters copy to user failed while replacing table [ 353.188887][ T1196] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.219009][ T1196] usb 4-1: config 0 interface 0 has no altsetting 0 [ 353.251132][ T1196] usb 4-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.00 [ 353.323057][ T1196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.345398][ T1196] usb 4-1: config 0 descriptor?? [ 353.586236][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1964'. [ 354.121040][ T1196] usbhid 4-1:0.0: can't add hid device: -71 [ 354.131350][ T1196] usbhid: probe of 4-1:0.0 failed with error -71 [ 354.216141][ T1196] usb 4-1: USB disconnect, device number 9 [ 354.702401][ T6055] FAULT_INJECTION: forcing a failure. [ 354.702401][ T6055] name failslab, interval 1, probability 0, space 0, times 0 [ 354.738764][ T6055] CPU: 1 PID: 6055 Comm: syz.3.1974 Not tainted syzkaller #0 [ 354.746392][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 354.756563][ T6055] Call Trace: [ 354.760109][ T6055] [ 354.763060][ T6055] __dump_stack+0x21/0x30 [ 354.767587][ T6055] dump_stack_lvl+0x110/0x170 [ 354.772485][ T6055] ? show_regs_print_info+0x20/0x20 [ 354.778265][ T6055] dump_stack+0x15/0x20 [ 354.782639][ T6055] should_fail+0x3ab/0x500 [ 354.787284][ T6055] __should_failslab+0xa4/0xe0 [ 354.792365][ T6055] should_failslab+0x9/0x20 [ 354.797488][ T6055] slab_pre_alloc_hook+0x39/0xd0 [ 354.803679][ T6055] ? key_alloc+0x306/0xef0 [ 354.808600][ T6055] __kmalloc_track_caller+0x6c/0x2c0 [ 354.814191][ T6055] ? key_alloc+0x306/0xef0 [ 354.818649][ T6055] kmemdup+0x26/0x60 [ 354.822937][ T6055] key_alloc+0x306/0xef0 [ 354.827433][ T6055] keyring_alloc+0x47/0xb0 [ 354.831891][ T6055] lookup_user_key+0x4e9/0x11b0 [ 354.837033][ T6055] ? lookup_user_key_possessed+0x40/0x40 [ 354.843002][ T6055] ? search_process_keyrings_rcu+0x280/0x280 [ 354.849013][ T6055] __se_sys_add_key+0x311/0x410 [ 354.853978][ T6055] ? __x64_sys_add_key+0xd0/0xd0 [ 354.858950][ T6055] ? ksys_write+0x1fa/0x260 [ 354.863557][ T6055] ? __kasan_check_write+0x14/0x20 [ 354.868892][ T6055] __x64_sys_add_key+0xbf/0xd0 [ 354.873787][ T6055] x64_sys_call+0x713/0x9a0 [ 354.878357][ T6055] do_syscall_64+0x4c/0xa0 [ 354.882904][ T6055] ? clear_bhb_loop+0x50/0xa0 [ 354.887702][ T6055] ? clear_bhb_loop+0x50/0xa0 [ 354.892733][ T6055] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 354.898930][ T6055] RIP: 0033:0x7fbcf7f321d9 [ 354.903473][ T6055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.923993][ T6055] RSP: 002b:00007fbcf698b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 354.932911][ T6055] RAX: ffffffffffffffda RBX: 00007fbcf81b9fa0 RCX: 00007fbcf7f321d9 [ 354.941348][ T6055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 354.949948][ T6055] RBP: 00007fbcf7fc9888 R08: fffffffffffffffe R09: 0000000000000000 [ 354.958412][ T6055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.966668][ T6055] R13: 00007fbcf81ba038 R14: 00007fbcf81b9fa0 R15: 00007ffc2c758f08 [ 354.975091][ T6055] [ 354.992024][ T30] audit: type=1400 audit(1793144751.453:903): avc: denied { read append } for pid=6062 comm="syz.1.1978" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 355.085684][ T6070] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1980'. [ 355.332095][ T6090] FAULT_INJECTION: forcing a failure. [ 355.332095][ T6090] name failslab, interval 1, probability 0, space 0, times 0 [ 355.364463][ T6090] CPU: 0 PID: 6090 Comm: syz.1.1989 Not tainted syzkaller #0 [ 355.371907][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 355.383293][ T6090] Call Trace: [ 355.386602][ T6090] [ 355.389829][ T6090] __dump_stack+0x21/0x30 [ 355.395477][ T6090] dump_stack_lvl+0x110/0x170 [ 355.400291][ T6090] ? show_regs_print_info+0x20/0x20 [ 355.405558][ T6090] dump_stack+0x15/0x20 [ 355.410313][ T6090] should_fail+0x3ab/0x500 [ 355.414845][ T6090] __should_failslab+0xa4/0xe0 [ 355.420538][ T6090] should_failslab+0x9/0x20 [ 355.425400][ T6090] slab_pre_alloc_hook+0x39/0xd0 [ 355.430382][ T6090] ? key_alloc+0x306/0xef0 [ 355.434872][ T6090] __kmalloc_track_caller+0x6c/0x2c0 [ 355.440378][ T6090] ? key_alloc+0x306/0xef0 [ 355.444843][ T6090] kmemdup+0x26/0x60 [ 355.448813][ T6090] key_alloc+0x306/0xef0 [ 355.453270][ T6090] keyring_alloc+0x47/0xb0 [ 355.458111][ T6090] lookup_user_key+0x4e9/0x11b0 [ 355.463298][ T6090] ? lookup_user_key_possessed+0x40/0x40 [ 355.469454][ T6090] ? search_process_keyrings_rcu+0x280/0x280 [ 355.475550][ T6090] __se_sys_add_key+0x311/0x410 [ 355.480604][ T6090] ? __x64_sys_add_key+0xd0/0xd0 [ 355.485810][ T6090] ? ksys_write+0x1fa/0x260 [ 355.490440][ T6090] ? __kasan_check_write+0x14/0x20 [ 355.495675][ T6100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1992'. [ 355.495775][ T6090] __x64_sys_add_key+0xbf/0xd0 [ 355.510713][ T6090] x64_sys_call+0x713/0x9a0 [ 355.515750][ T6090] do_syscall_64+0x4c/0xa0 [ 355.520582][ T6090] ? clear_bhb_loop+0x50/0xa0 [ 355.525703][ T6090] ? clear_bhb_loop+0x50/0xa0 [ 355.530644][ T6090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 355.536742][ T6090] RIP: 0033:0x7fb6b36451d9 [ 355.542229][ T6090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.562939][ T6090] RSP: 002b:00007fb6b209e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 355.571695][ T6090] RAX: ffffffffffffffda RBX: 00007fb6b38ccfa0 RCX: 00007fb6b36451d9 [ 355.579816][ T6090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 355.588151][ T6090] RBP: 00007fb6b36dc888 R08: fffffffffffffffe R09: 0000000000000000 [ 355.596585][ T6090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.604764][ T6090] R13: 00007fb6b38cd038 R14: 00007fb6b38ccfa0 R15: 00007ffde81807a8 [ 355.613028][ T6090] [ 356.385072][ T6123] netlink: 'syz.2.2001': attribute type 12 has an invalid length. [ 356.580718][ T6137] xt_hashlimit: size too large, truncated to 1048576 [ 356.588010][ T6137] xt_hashlimit: max too large, truncated to 1048576 [ 356.887937][ T6160] input: syz1 as /devices/virtual/input/input8 [ 357.339533][ T6] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 357.714873][ T6190] Illegal XDP return value 3568923330, expect packet loss! [ 357.784004][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 357.827403][ T6] usb 2-1: not running at top speed; connect to a high speed hub [ 358.076710][ T30] audit: type=1326 audit(1793144754.285:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.0.2023" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad25f4a1d9 code=0x7fc00000 [ 358.384786][ T30] audit: type=1326 audit(1793144754.285:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.0.2023" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad25f4a1d9 code=0x7fc00000 [ 358.578236][ T6206] xt_hashlimit: size too large, truncated to 1048576 [ 358.766559][ T30] audit: type=1326 audit(1793144754.285:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.0.2023" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad25f4a1d9 code=0x7fc00000 [ 358.875561][ T30] audit: type=1326 audit(1793144754.285:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.0.2023" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad25f4a1d9 code=0x7fc00000 [ 358.950743][ T6] usb 2-1: config index 0 descriptor too short (expected 61365, got 181) [ 358.960771][ T6] usb 2-1: config 1 has an invalid interface number: 1 but max is 0 [ 358.969072][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.979482][ T6] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 358.989090][ T30] audit: type=1326 audit(1793144754.285:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.0.2023" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad25f4a1d9 code=0x7fc00000 [ 359.018990][ T30] audit: type=1326 audit(1793144754.285:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.0.2023" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad25f4a1d9 code=0x7fc00000 [ 359.065367][ T30] audit: type=1326 audit(1793144754.295:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.0.2023" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad25f4a1d9 code=0x7fc00000 [ 359.107163][ T30] audit: type=1326 audit(1793144754.295:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.0.2023" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad25f4a1d9 code=0x7fc00000 [ 359.133081][ T6] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 359.145718][ T30] audit: type=1326 audit(1793144754.295:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.0.2023" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad25f4a1d9 code=0x7fc00000 [ 359.179906][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 359.188477][ T6] usb 2-1: Product: syz [ 359.193716][ T6] usb 2-1: Manufacturer: syz [ 359.550173][ T6] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 359.557152][ T6] usb 2-1: No streaming interface found for terminal 2. [ 359.573190][ T6] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input9 [ 359.615050][ T6] usb 2-1: USB disconnect, device number 11 [ 359.703023][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'. [ 359.888964][ T6275] FAULT_INJECTION: forcing a failure. [ 359.888964][ T6275] name failslab, interval 1, probability 0, space 0, times 0 [ 359.902308][ T6275] CPU: 1 PID: 6275 Comm: syz.3.2063 Not tainted syzkaller #0 [ 359.909830][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 359.919913][ T6275] Call Trace: [ 359.923221][ T6275] [ 359.926347][ T6275] __dump_stack+0x21/0x30 [ 359.931446][ T6275] dump_stack_lvl+0x110/0x170 [ 359.936441][ T6275] ? show_regs_print_info+0x20/0x20 [ 359.941853][ T6275] dump_stack+0x15/0x20 [ 359.946049][ T6275] should_fail+0x3ab/0x500 [ 359.950689][ T6275] __should_failslab+0xa4/0xe0 [ 359.955838][ T6275] should_failslab+0x9/0x20 [ 359.960615][ T6275] slab_pre_alloc_hook+0x39/0xd0 [ 359.965934][ T6275] ? copy_fs_struct+0x4c/0x220 [ 359.970807][ T6275] kmem_cache_alloc+0x44/0x260 [ 359.975603][ T6275] copy_fs_struct+0x4c/0x220 [ 359.980972][ T6275] ksys_unshare+0x394/0x810 [ 359.985870][ T6275] ? sighand_ctor+0x60/0x60 [ 359.990607][ T6275] ? __kasan_check_write+0x14/0x20 [ 359.996755][ T6275] ? switch_fpu_return+0x15d/0x2c0 [ 360.002751][ T6275] __x64_sys_unshare+0x38/0x40 [ 360.007845][ T6275] x64_sys_call+0x442/0x9a0 [ 360.012482][ T6275] do_syscall_64+0x4c/0xa0 [ 360.017461][ T6275] ? clear_bhb_loop+0x50/0xa0 [ 360.022435][ T6275] ? clear_bhb_loop+0x50/0xa0 [ 360.027312][ T6275] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 360.033333][ T6275] RIP: 0033:0x7fbcf7f321d9 [ 360.037859][ T6275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.058590][ T6275] RSP: 002b:00007fbcf698b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 360.068154][ T6275] RAX: ffffffffffffffda RBX: 00007fbcf81b9fa0 RCX: 00007fbcf7f321d9 [ 360.076441][ T6275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 360.084455][ T6275] RBP: 00007fbcf7fc9888 R08: 0000000000000000 R09: 0000000000000000 [ 360.092534][ T6275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.100663][ T6275] R13: 00007fbcf81ba038 R14: 00007fbcf81b9fa0 R15: 00007ffc2c758f08 [ 360.108755][ T6275] [ 360.564113][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 360.564131][ T30] audit: type=1400 audit(1793144756.592:938): avc: denied { ioctl } for pid=6324 comm="syz.1.2085" path="socket:[51875]" dev="sockfs" ino=51875 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 360.613699][ T6323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2084'. [ 360.644916][ T6323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2084'. [ 360.670898][ T30] audit: type=1400 audit(1793144756.657:939): avc: denied { map } for pid=6331 comm="syz.4.2088" path="socket:[51891]" dev="sockfs" ino=51891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 360.722398][ T6336] FAULT_INJECTION: forcing a failure. [ 360.722398][ T6336] name fail_futex, interval 1, probability 0, space 0, times 1 [ 360.735717][ T6336] CPU: 0 PID: 6336 Comm: syz.1.2090 Not tainted syzkaller #0 [ 360.743323][ T6336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 360.753867][ T6336] Call Trace: [ 360.757438][ T6336] [ 360.760382][ T6336] __dump_stack+0x21/0x30 [ 360.764733][ T6336] dump_stack_lvl+0x110/0x170 [ 360.769411][ T6336] ? show_regs_print_info+0x20/0x20 [ 360.774717][ T6336] ? 0xffffffffa0016e28 [ 360.778985][ T6336] dump_stack+0x15/0x20 [ 360.783603][ T6336] should_fail+0x3ab/0x500 [ 360.788137][ T6336] get_futex_key+0x143/0xb60 [ 360.792845][ T6336] ? __kasan_check_write+0x14/0x20 [ 360.798069][ T6336] ? _raw_spin_lock+0xf0/0xf0 [ 360.805127][ T6336] ? futex_wait_restart+0x250/0x250 [ 360.810350][ T6336] futex_wake+0x133/0x8f0 [ 360.815207][ T6336] ? __kasan_kmalloc+0xe6/0x100 [ 360.820158][ T6336] ? futex_wait+0x8f0/0x8f0 [ 360.824826][ T6336] ? do_syscall_64+0x4c/0xa0 [ 360.829556][ T6336] do_futex+0xd8d/0x2800 [ 360.833904][ T6336] ? rwsem_write_trylock+0x136/0x300 [ 360.839785][ T6336] ? clear_nonspinnable+0x60/0x60 [ 360.844850][ T6336] ? futex_exit_release+0x1e0/0x1e0 [ 360.851136][ T6336] ? up_write+0x7b/0x290 [ 360.855489][ T6336] ? __kasan_check_write+0x14/0x20 [ 360.861354][ T6336] ? key_put+0xa3/0xc0 [ 360.865976][ T6336] ? keyctl_restrict_keyring+0x1d2/0x230 [ 360.871727][ T6336] ? keyctl_session_to_parent+0x710/0x710 [ 360.877689][ T6336] ? vfs_writev+0x3f6/0x570 [ 360.882486][ T6336] ? __se_sys_keyctl+0x743/0xdb0 [ 360.887439][ T6336] ? __x64_sys_keyctl+0xd0/0xd0 [ 360.892301][ T6336] __se_sys_futex+0x135/0x330 [ 360.896997][ T6336] ? __kasan_check_write+0x14/0x20 [ 360.902116][ T6336] ? __x64_sys_futex+0x100/0x100 [ 360.907184][ T6336] ? __x64_sys_pwritev+0x1d9/0x2b0 [ 360.912390][ T6336] __x64_sys_futex+0xe5/0x100 [ 360.917154][ T6336] x64_sys_call+0x251/0x9a0 [ 360.921660][ T6336] do_syscall_64+0x4c/0xa0 [ 360.926087][ T6336] ? clear_bhb_loop+0x50/0xa0 [ 360.930760][ T6336] ? clear_bhb_loop+0x50/0xa0 [ 360.935490][ T6336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 360.941517][ T6336] RIP: 0033:0x7fb6b36451d9 [ 360.946047][ T6336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.966543][ T6336] RSP: 002b:00007fb6b209e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 360.975594][ T6336] RAX: ffffffffffffffda RBX: 00007fb6b38ccfa8 RCX: 00007fb6b36451d9 [ 360.983568][ T6336] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb6b38ccfac [ 360.991540][ T6336] RBP: 00007fb6b38ccfa0 R08: 001482259c1c503c R09: 0000000000000000 [ 361.000141][ T6336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.008945][ T6336] R13: 00007fb6b38cd038 R14: 00007ffde81806c0 R15: 00007ffde81807a8 [ 361.017568][ T6336] [ 361.770502][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2103'. [ 361.872388][ T6384] xt_hashlimit: size too large, truncated to 1048576 [ 361.884588][ T30] audit: type=1400 audit(1793144757.810:940): avc: denied { associate } for pid=6383 comm="syz.4.2108" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 361.983721][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 362.073129][ T30] audit: type=1400 audit(1793144757.985:941): avc: denied { bind } for pid=6394 comm="syz.4.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 362.162733][ T1196] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 364.348775][ T6477] usb usb8: usbfs: process 6477 (syz.0.2147) did not claim interface 0 before use [ 364.359504][ T6476] xt_hashlimit: size too large, truncated to 1048576 [ 364.410594][ T30] audit: type=1400 audit(1793144760.145:942): avc: denied { mount } for pid=6478 comm="syz.0.2148" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 364.552104][ T30] audit: type=1400 audit(1793144760.274:943): avc: denied { write } for pid=6488 comm="syz.0.2152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 365.198315][ T30] audit: type=1400 audit(1793144760.873:944): avc: denied { bind } for pid=6517 comm="syz.1.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 365.278142][ T30] audit: type=1400 audit(1793144760.938:945): avc: denied { listen } for pid=6535 comm="syz.4.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.314378][ T6539] xt_hashlimit: size too large, truncated to 1048576 [ 365.412160][ T6554] overlayfs: failed to clone upperpath [ 365.603342][ T6562] xt_hashlimit: size too large, truncated to 1048576 [ 365.644114][ T6568] FAULT_INJECTION: forcing a failure. [ 365.644114][ T6568] name failslab, interval 1, probability 0, space 0, times 0 [ 365.657133][ T6568] CPU: 1 PID: 6568 Comm: syz.3.2182 Not tainted syzkaller #0 [ 365.664557][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 365.674631][ T6568] Call Trace: [ 365.678110][ T6568] [ 365.681094][ T6568] __dump_stack+0x21/0x30 [ 365.685450][ T6568] dump_stack_lvl+0x110/0x170 [ 365.690147][ T6568] ? show_regs_print_info+0x20/0x20 [ 365.695459][ T6568] dump_stack+0x15/0x20 [ 365.699634][ T6568] should_fail+0x3ab/0x500 [ 365.704349][ T6568] __should_failslab+0xa4/0xe0 [ 365.709136][ T6568] should_failslab+0x9/0x20 [ 365.713662][ T6568] slab_pre_alloc_hook+0x39/0xd0 [ 365.718796][ T6568] ? __d_alloc+0x2d/0x690 [ 365.723295][ T6568] kmem_cache_alloc+0x44/0x260 [ 365.728183][ T6568] __d_alloc+0x2d/0x690 [ 365.732378][ T6568] d_alloc_pseudo+0x1d/0x70 [ 365.736904][ T6568] alloc_file_pseudo+0xe0/0x200 [ 365.741773][ T6568] ? alloc_empty_file_noaccount+0x80/0x80 [ 365.747521][ T6568] ? alloc_fd+0x4c2/0x570 [ 365.751876][ T6568] sock_alloc_file+0xba/0x260 [ 365.756682][ T6568] __sys_socket+0x12b/0x190 [ 365.761301][ T6568] __x64_sys_socket+0x7a/0x90 [ 365.766135][ T6568] x64_sys_call+0x8c5/0x9a0 [ 365.770675][ T6568] do_syscall_64+0x4c/0xa0 [ 365.775109][ T6568] ? clear_bhb_loop+0x50/0xa0 [ 365.779992][ T6568] ? clear_bhb_loop+0x50/0xa0 [ 365.784955][ T6568] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 365.791139][ T6568] RIP: 0033:0x7fbcf7f321d9 [ 365.795576][ T6568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.815688][ T6568] RSP: 002b:00007fbcf698b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 365.824540][ T6568] RAX: ffffffffffffffda RBX: 00007fbcf81b9fa0 RCX: 00007fbcf7f321d9 [ 365.832514][ T6568] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 365.840879][ T6568] RBP: 00007fbcf7fc9888 R08: 0000000000000000 R09: 0000000000000000 [ 365.849067][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.857291][ T6568] R13: 00007fbcf81ba038 R14: 00007fbcf81b9fa0 R15: 00007ffc2c758f08 [ 365.865540][ T6568] [ 365.961656][ T6588] kvm: MONITOR instruction emulated as NOP! [ 366.161625][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 366.703420][ T299] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 366.949688][ T6622] device batadv_slave_0 entered promiscuous mode [ 366.956514][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2200'. [ 367.006245][ T6622] device batadv_slave_0 left promiscuous mode [ 367.081991][ T30] audit: type=1400 audit(1793144762.599:946): avc: denied { append } for pid=6625 comm="syz.0.2202" name="loop0" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.106404][ T30] audit: type=1400 audit(1793144762.608:947): avc: denied { map } for pid=6625 comm="syz.0.2202" path="/dev/loop0" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.184486][ T299] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.165201][ T299] usb 2-1: config 1 interface 0 has no altsetting 0 [ 368.539759][ T6653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2213'. [ 368.587905][ T6656] ip_tables: iptables: counters copy to user failed while replacing table [ 368.630879][ T6658] xt_hashlimit: size too large, truncated to 1048576 [ 368.730061][ T299] usb 2-1: string descriptor 0 read error: -22 [ 368.740491][ T299] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 368.760207][ T299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.052404][ T299] usbhid 2-1:1.0: can't add hid device: -71 [ 370.062868][ T299] usbhid: probe of 2-1:1.0 failed with error -71 [ 370.098145][ T299] usb 2-1: USB disconnect, device number 12 [ 370.609688][ T30] audit: type=1400 audit(1793144765.865:948): avc: denied { write } for pid=6703 comm="syz.3.2233" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 370.824723][ T30] audit: type=1400 audit(1793144766.059:949): avc: denied { watch } for pid=6709 comm="syz.4.2236" path="/520/file0" dev="tmpfs" ino=2783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 370.869589][ T6712] tipc: Started in network mode [ 370.874777][ T6712] tipc: Node identity ac14140f, cluster identity 4711 [ 370.882201][ T6712] tipc: Enabled bearer , priority 10 [ 372.089756][ T6] tipc: Node number set to 2886997007 [ 372.994537][ T30] audit: type=1326 audit(1793144768.061:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.0.2248" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad25f4a1d9 code=0x7fc00000 [ 373.791358][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 373.985803][ T30] audit: type=1400 audit(1793144768.975:951): avc: denied { read } for pid=6799 comm="syz.2.2272" name="/" dev="configfs" ino=13210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 374.009551][ T30] audit: type=1400 audit(1793144768.984:952): avc: denied { open } for pid=6799 comm="syz.2.2272" path="/" dev="configfs" ino=13210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 374.229363][ T6809] tipc: Enabled bearer , priority 10 [ 375.785006][ T6834] ================================================================== [ 375.793225][ T6834] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 375.801440][ T6834] Read of size 4 at addr ffff888128152400 by task syz.0.2286/6834 [ 375.809344][ T6834] [ 375.811723][ T6834] CPU: 1 PID: 6834 Comm: syz.0.2286 Not tainted syzkaller #0 [ 375.819437][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 375.829765][ T6834] Call Trace: [ 375.833062][ T6834] [ 375.836104][ T6834] __dump_stack+0x21/0x30 [ 375.840537][ T6834] dump_stack_lvl+0x110/0x170 [ 375.845420][ T6834] ? show_regs_print_info+0x20/0x20 [ 375.850619][ T6834] ? load_image+0x3f0/0x3f0 [ 375.855705][ T6834] print_address_description+0x7f/0x2c0 [ 375.861266][ T6834] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 375.867109][ T6834] kasan_report+0x10f/0x150 [ 375.871614][ T6834] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 375.877254][ T6834] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 375.883093][ T6834] __asan_report_load4_noabort+0x14/0x20 [ 375.888912][ T6834] pppol2tp_sock_to_session+0x1a0/0x1b0 [ 375.894588][ T6834] pppol2tp_release+0x150/0x2b0 [ 375.899444][ T6834] sock_close+0xb8/0x200 [ 375.903683][ T6834] ? sock_mmap+0xa0/0xa0 [ 375.908043][ T6834] __fput+0x22b/0x900 [ 375.912032][ T6834] ____fput+0x15/0x20 [ 375.916106][ T6834] task_work_run+0x127/0x190 [ 375.920772][ T6834] do_exit+0xb70/0x29a0 [ 375.925036][ T6834] ? __se_sys_clock_nanosleep+0x30b/0x3a0 [ 375.930882][ T6834] ? put_task_struct+0x90/0x90 [ 375.935808][ T6834] ? switch_fpu_return+0x15d/0x2c0 [ 375.941190][ T6834] __x64_sys_exit+0x40/0x40 [ 375.945691][ T6834] x64_sys_call+0x44/0x9a0 [ 375.950378][ T6834] do_syscall_64+0x4c/0xa0 [ 375.955237][ T6834] ? clear_bhb_loop+0x50/0xa0 [ 375.959915][ T6834] ? clear_bhb_loop+0x50/0xa0 [ 375.964685][ T6834] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 375.970578][ T6834] RIP: 0033:0x7fad25f4a1d9 [ 375.975081][ T6834] Code: Unable to access opcode bytes at RIP 0x7fad25f4a1af. [ 375.982541][ T6834] RSP: 002b:00007fad249a2ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 375.990971][ T6834] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fad25f4a1d9 [ 375.999742][ T6834] RDX: 00007fad249a39c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 376.008036][ T6834] RBP: 00007fad25fe1888 R08: 0000000000000000 R09: 0000000000000058 [ 376.016382][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.024513][ T6834] R13: 00007fad261d2038 R14: 00007fad261d1fa0 R15: 00007ffeab412448 [ 376.032789][ T6834] [ 376.035835][ T6834] [ 376.038478][ T6834] Allocated by task 6833: [ 376.043147][ T6834] __kasan_kmalloc+0xd4/0x100 [ 376.047851][ T6834] __kmalloc+0x13d/0x2c0 [ 376.052094][ T6834] l2tp_session_create+0x39/0xb60 [ 376.057449][ T6834] pppol2tp_connect+0xbf5/0x1640 [ 376.062916][ T6834] __sys_connect+0x3cb/0x450 [ 376.067737][ T6834] __x64_sys_connect+0x7a/0x90 [ 376.072614][ T6834] x64_sys_call+0x7c/0x9a0 [ 376.077406][ T6834] do_syscall_64+0x4c/0xa0 [ 376.081834][ T6834] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.088176][ T6834] [ 376.090526][ T6834] Freed by task 2766: [ 376.094503][ T6834] kasan_set_track+0x4a/0x70 [ 376.099275][ T6834] kasan_set_free_info+0x23/0x40 [ 376.104302][ T6834] ____kasan_slab_free+0x125/0x160 [ 376.109417][ T6834] __kasan_slab_free+0x11/0x20 [ 376.114453][ T6834] slab_free_freelist_hook+0xc2/0x190 [ 376.119942][ T6834] kfree+0xc4/0x270 [ 376.123788][ T6834] l2tp_session_put+0xaf/0x1a0 [ 376.128562][ T6834] l2tp_session_delete+0x3a9/0x4a0 [ 376.133677][ T6834] l2tp_tunnel_del_work+0x180/0x3d0 [ 376.139085][ T6834] process_one_work+0x6c8/0xbb0 [ 376.144008][ T6834] worker_thread+0xaa0/0x1250 [ 376.148909][ T6834] kthread+0x3f5/0x4f0 [ 376.153033][ T6834] ret_from_fork+0x1f/0x30 [ 376.157553][ T6834] [ 376.159899][ T6834] Last potentially related work creation: [ 376.165609][ T6834] kasan_save_stack+0x3a/0x60 [ 376.170469][ T6834] __kasan_record_aux_stack+0xd2/0x100 [ 376.175936][ T6834] kasan_record_aux_stack_noalloc+0xb/0x10 [ 376.181746][ T6834] call_rcu+0x10b/0xf60 [ 376.185971][ T6834] fib6_del+0xbf0/0xf00 [ 376.190563][ T6834] fib6_clean_node+0x2a1/0x540 [ 376.195382][ T6834] fib6_walk_continue+0x54b/0x740 [ 376.200772][ T6834] fib6_walk+0x153/0x290 [ 376.205061][ T6834] fib6_clean_all+0x1a1/0x270 [ 376.209751][ T6834] rt6_disable_ip+0x12a/0x840 [ 376.214424][ T6834] addrconf_ifdown+0x144/0x1910 [ 376.219423][ T6834] addrconf_notify+0x3bd/0xe00 [ 376.224246][ T6834] raw_notifier_call_chain+0x90/0x100 [ 376.229658][ T6834] __dev_notify_flags+0x276/0x5b0 [ 376.234704][ T6834] dev_change_flags+0xe3/0x1a0 [ 376.239825][ T6834] do_setlink+0xc95/0x2970 [ 376.245047][ T6834] rtnl_newlink+0xfd2/0x1900 [ 376.249633][ T6834] rtnetlink_rcv_msg+0x9fd/0xcb0 [ 376.254983][ T6834] netlink_rcv_skb+0x1e9/0x430 [ 376.260079][ T6834] rtnetlink_rcv+0x1c/0x20 [ 376.264525][ T6834] netlink_unicast+0x86c/0xa30 [ 376.269387][ T6834] netlink_sendmsg+0x879/0xb80 [ 376.274240][ T6834] ____sys_sendmsg+0x5be/0x8f0 [ 376.279008][ T6834] ___sys_sendmsg+0x236/0x2e0 [ 376.283682][ T6834] __x64_sys_sendmsg+0x201/0x2d0 [ 376.288629][ T6834] x64_sys_call+0x4b/0x9a0 [ 376.293342][ T6834] do_syscall_64+0x4c/0xa0 [ 376.297886][ T6834] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.304046][ T6834] [ 376.306366][ T6834] The buggy address belongs to the object at ffff888128152400 [ 376.306366][ T6834] which belongs to the cache kmalloc-512 of size 512 [ 376.320863][ T6834] The buggy address is located 0 bytes inside of [ 376.320863][ T6834] 512-byte region [ffff888128152400, ffff888128152600) [ 376.334066][ T6834] The buggy address belongs to the page: [ 376.339988][ T6834] page:ffffea0004a05400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128150 [ 376.350771][ T6834] head:ffffea0004a05400 order:2 compound_mapcount:0 compound_pincount:0 [ 376.359207][ T6834] flags: 0x4000000000010200(slab|head|zone=1) [ 376.365283][ T6834] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 376.373988][ T6834] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 376.382693][ T6834] page dumped because: kasan: bad access detected [ 376.389871][ T6834] page_owner tracks the page as allocated [ 376.395712][ T6834] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 284, ts 30246985554, free_ts 30246703376 [ 376.414851][ T6834] post_alloc_hook+0x192/0x1b0 [ 376.419741][ T6834] prep_new_page+0x1c/0x110 [ 376.424352][ T6834] get_page_from_freelist+0x2c3a/0x2cd0 [ 376.430128][ T6834] __alloc_pages+0x1a2/0x460 [ 376.435013][ T6834] new_slab+0xa0/0x4d0 [ 376.439162][ T6834] ___slab_alloc+0x3ac/0x840 [ 376.443749][ T6834] __slab_alloc+0x49/0x90 [ 376.448097][ T6834] __kmalloc+0x16a/0x2c0 [ 376.452557][ T6834] fib6_info_alloc+0x34/0xe0 [ 376.457524][ T6834] ip6_route_info_create+0x51b/0x14d0 [ 376.463044][ T6834] ip6_route_add+0x27/0x130 [ 376.467748][ T6834] addrconf_add_dev+0x385/0x4c0 [ 376.472693][ T6834] addrconf_init_auto_addrs+0x7ae/0xbd0 [ 376.478326][ T6834] addrconf_notify+0x95d/0xe00 [ 376.483108][ T6834] raw_notifier_call_chain+0x90/0x100 [ 376.488482][ T6834] __dev_notify_flags+0x2f4/0x5b0 [ 376.493986][ T6834] page last free stack trace: [ 376.499285][ T6834] free_unref_page_prepare+0x5fa/0x600 [ 376.504996][ T6834] free_unref_page+0xae/0x540 [ 376.509697][ T6834] __free_pages+0x6c/0x100 [ 376.514311][ T6834] free_pages+0x82/0x90 [ 376.518676][ T6834] __stack_depot_save+0x453/0x480 [ 376.523899][ T6834] __kasan_kmalloc+0xe6/0x100 [ 376.529231][ T6834] __kmalloc_track_caller+0x13c/0x2c0 [ 376.535085][ T6834] kmemdup+0x26/0x60 [ 376.539139][ T6834] neigh_sysctl_register+0xbf/0xa90 [ 376.544688][ T6834] addrconf_sysctl_register+0xb3/0x1a0 [ 376.551038][ T6834] ipv6_add_dev+0xc09/0x1150 [ 376.555624][ T6834] addrconf_notify+0x582/0xe00 [ 376.560575][ T6834] raw_notifier_call_chain+0x90/0x100 [ 376.566470][ T6834] call_netdevice_notifiers+0x119/0x190 [ 376.572475][ T6834] register_netdevice+0x110a/0x1490 [ 376.577898][ T6834] xfrmi_newlink+0x328/0x440 [ 376.582671][ T6834] [ 376.585012][ T6834] Memory state around the buggy address: [ 376.590834][ T6834] ffff888128152300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 376.599533][ T6834] ffff888128152380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 376.608218][ T6834] >ffff888128152400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 376.616314][ T6834] ^ [ 376.620430][ T6834] ffff888128152480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 376.628873][ T6834] ffff888128152500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 376.637781][ T6834] ================================================================== [ 376.645930][ T6834] Disabling lock debugging due to kernel taint [ 376.672203][ T6834] ------------[ cut here ]------------ [ 376.677847][ T6834] WARNING: CPU: 0 PID: 6834 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 376.688653][ T6834] Modules linked in: [ 376.692753][ T6834] CPU: 0 PID: 6834 Comm: syz.0.2286 Tainted: G B syzkaller #0 [ 376.714714][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 376.727470][ T6834] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 376.734287][ T6834] Code: 5d c3 e8 8c ab 0a fd be 02 00 00 00 eb 0a e8 80 ab 0a fd be 01 00 00 00 4c 89 f7 e8 73 2e f1 fd e9 0f ff ff ff e8 69 ab 0a fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ab 0a fd 4c 89 f7 be 03 [ 376.754442][ T30] audit: type=1400 audit(1793144771.512:953): avc: denied { read } for pid=82 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 376.756240][ T6834] RSP: 0018:ffffc90008e37bf0 EFLAGS: 00010293 [ 376.783891][ T30] audit: type=1400 audit(1793144771.512:954): avc: denied { search } for pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.783926][ T30] audit: type=1400 audit(1793144771.512:955): avc: denied { write } for pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.783949][ T30] audit: type=1400 audit(1793144771.512:956): avc: denied { add_name } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.783969][ T30] audit: type=1400 audit(1793144771.512:957): avc: denied { create } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 376.810477][ T6834] RAX: ffffffff845f2ff7 RBX: ffff88811b7fc000 RCX: ffff888113afa800 [ 376.829760][ T30] audit: type=1400 audit(1793144771.512:958): avc: denied { append open } for pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 376.850312][ T6834] RDX: 0000000000000000 RSI: 000000001af85380 RDI: 000000000c04eb7d [ 376.870989][ T30] audit: type=1400 audit(1793144771.512:959): avc: denied { getattr } for pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 376.879330][ T6834] RBP: ffffc90008e37c10 R08: 0000000000000003 R09: 0000000000000004 [ 376.942983][ T6834] R10: dffffc0000000000 R11: fffffbfff0e1904c R12: dffffc0000000000 [ 376.953140][ T6834] R13: dffffc0000000000 R14: 000000001af85380 R15: ffff888128152400 [ 376.962145][ T6834] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 376.971749][ T6834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.978657][ T6834] CR2: 00007fad2619d2f8 CR3: 000000010dd0b000 CR4: 00000000003506b0 [ 376.986806][ T6834] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 376.994922][ T6834] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 377.003100][ T6834] Call Trace: [ 377.006387][ T6834] [ 377.009355][ T6834] pppol2tp_release+0x150/0x2b0 [ 377.014715][ T6834] sock_close+0xb8/0x200 [ 377.019038][ T6834] ? sock_mmap+0xa0/0xa0 [ 377.023317][ T6834] __fput+0x22b/0x900 [ 377.027423][ T6834] ____fput+0x15/0x20 [ 377.031546][ T6834] task_work_run+0x127/0x190 [ 377.036756][ T6834] do_exit+0xb70/0x29a0 [ 377.041142][ T6834] ? __se_sys_clock_nanosleep+0x30b/0x3a0 [ 377.047191][ T6834] ? put_task_struct+0x90/0x90 [ 377.053347][ T6834] ? switch_fpu_return+0x15d/0x2c0 [ 377.059345][ T6834] __x64_sys_exit+0x40/0x40 [ 377.064046][ T6834] x64_sys_call+0x44/0x9a0 [ 377.068873][ T6834] do_syscall_64+0x4c/0xa0 [ 377.073498][ T6834] ? clear_bhb_loop+0x50/0xa0 [ 377.078330][ T6834] ? clear_bhb_loop+0x50/0xa0 [ 377.083809][ T6834] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.090017][ T6834] RIP: 0033:0x7fad25f4a1d9 [ 377.094480][ T6834] Code: Unable to access opcode bytes at RIP 0x7fad25f4a1af. [ 377.102246][ T6834] RSP: 002b:00007fad249a2ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 377.110801][ T6834] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fad25f4a1d9 [ 377.118907][ T6834] RDX: 00007fad249a39c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 377.126988][ T6834] RBP: 00007fad25fe1888 R08: 0000000000000000 R09: 0000000000000058 [ 377.135236][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.143348][ T6834] R13: 00007fad261d2038 R14: 00007fad261d1fa0 R15: 00007ffeab412448 [ 377.151402][ T6834] [ 377.154543][ T6834] ---[ end trace c0a1e84171704066 ]---