last executing test programs: 7m49.485005612s ago: executing program 0 (id=53): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xe80c6, 0x4) 7m48.316751333s ago: executing program 0 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x4014, &(0x7f0000001000)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d4e3a", @ANYRESDEC]) 7m47.95433406s ago: executing program 0 (id=55): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20100, 0x44) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, 0x0) 7m45.266013708s ago: executing program 0 (id=56): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2f}]}}}]}, 0x40}}, 0x0) 7m45.14485449s ago: executing program 0 (id=57): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000100)={0x5, 0x7d, 0xc4, 0x3, 0xe, "0060f60000000200"}) 7m44.960097543s ago: executing program 0 (id=58): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r5) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) 6m59.55100172s ago: executing program 32 (id=58): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r5) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) 3m45.356921835s ago: executing program 1 (id=365): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000380)={0x2, 0x2000000}) 3m45.275293376s ago: executing program 1 (id=366): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/145) 3m44.961388962s ago: executing program 1 (id=367): socket$netlink(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 3m40.64247588s ago: executing program 1 (id=368): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = getpid() prlimit64(r1, 0xb, 0x0, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0x406f, 0x9}}, 0x30) 3m40.092608309s ago: executing program 1 (id=369): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_disconnect(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0xe300c8aba57ec453, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x224) 3m39.545233899s ago: executing program 1 (id=370): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') 2m54.101428017s ago: executing program 33 (id=370): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') 1m45.54616452s ago: executing program 3 (id=453): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x4, 0x159}, @generic="7f6d"]}, 0x1c}}, 0x0) 1m45.372352244s ago: executing program 3 (id=454): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x12, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) readv(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)=""/186, 0xba}], 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port0\x00', 0x786520dbf34c80ff, 0x20a03, 0x122, 0x0, 0x0, 0xc, 0x400, 0x0, 0x0, 0x87}) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x123482, 0x0) 1m44.658965687s ago: executing program 3 (id=455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000030601010000000000000000070400050900020073797a31000000f0050001"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) 1m44.419696341s ago: executing program 3 (id=456): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000340)) 1m44.419496101s ago: executing program 3 (id=457): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x4e23, 0x6, @mcast1, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000080)=0x5, 0xffff) 1m44.303139643s ago: executing program 3 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_delrule={0x24, 0x21, 0x400, 0x70bd25, 0x25dfdbfc, {0x2, 0x20, 0x20, 0x86, 0x5, 0x0, 0x0, 0x0, 0xe}, [@FRA_FLOW={0x8, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r5) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x800a, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) memfd_create(0x0, 0x1) 58.503835827s ago: executing program 34 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_delrule={0x24, 0x21, 0x400, 0x70bd25, 0x25dfdbfc, {0x2, 0x20, 0x20, 0x86, 0x5, 0x0, 0x0, 0x0, 0xe}, [@FRA_FLOW={0x8, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r5) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x800a, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) memfd_create(0x0, 0x1) 23.664428204s ago: executing program 4 (id=547): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x12) 22.506713224s ago: executing program 4 (id=548): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) delete_module(0x0, 0x0) 22.282918638s ago: executing program 4 (id=549): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 19.605195436s ago: executing program 4 (id=550): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf2506"], 0x24}, 0x1, 0x0, 0x0, 0x2004c04c}, 0x4) 19.604929327s ago: executing program 4 (id=551): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000cf00)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1003}]}}]}, 0x40}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="85", 0x1}], 0x1}}], 0x1, 0x48800) 19.376356731s ago: executing program 4 (id=552): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) write$sndseq(r3, &(0x7f0000000080)=[{0x10, 0x81, 0xfc, 0xfd, @time={0x2, 0x25}, {0x10, 0x4a}, {0xe}, @raw8={"1f000e0700000100"}}], 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x38, 0xb, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xb000000}, 0x4880) 15.415479652s ago: executing program 2 (id=556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x20000000, 0x0, 0x8, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x28, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @multicast1}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x229, 0x4, 0x6}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x1, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mknod(0x0, 0x1000, 0x0) syz_usb_connect(0x2, 0x2f3, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000074ae8440f20c5062bd87010203010902e10201000000000904"], 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) 221.674856ms ago: executing program 2 (id=557): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) 112.280258ms ago: executing program 2 (id=558): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x100, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x10) 112.053078ms ago: executing program 2 (id=559): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x9, 0x20003}, 0x10, 0xffffffffffffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 330.34µs ago: executing program 2 (id=560): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) syz_emit_ethernet(0x46, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xfe94) 0s ago: executing program 2 (id=561): socket$igmp6(0xa, 0x3, 0x3a) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="756e6c6f636b20696f2b45fef24b6d"], 0xe) socket(0x400000000010, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r2, &(0x7f00000034c0)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/20, 0x14}, {&(0x7f0000000200)}], 0x2, &(0x7f0000000280)=""/205, 0xcd}, 0x6}, {{&(0x7f0000000380)=@hci, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)=""/77, 0x4d}, {&(0x7f0000000480)=""/32, 0x20}, {&(0x7f00000004c0)=""/59, 0x3b}, {&(0x7f00000005c0)=""/71, 0x47}], 0x4, &(0x7f00000006c0)=""/113, 0x71}, 0x77}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000007c0)=""/123, 0x7b}, {&(0x7f0000000840)=""/90, 0x5a}, {&(0x7f00000008c0)=""/36, 0x24}, {&(0x7f0000000900)=""/227, 0xe3}], 0x4, &(0x7f0000000a40)=""/246, 0xf6}, 0x3ff}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/233, 0xe9}, {&(0x7f0000000bc0)=""/104, 0x68}], 0x3, &(0x7f0000004900)=""/4097, 0x1001}, 0x3}], 0x4, 0x0, &(0x7f00000035c0)={0x0, 0x3938700}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), 0x0}, 0x20) recvmmsg(r6, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000140)={'comedi_parport\x00', [0x400, 0x2, 0x7fffffff, 0x84e1, 0x2f, 0x2006, 0x6, 0x8, 0xa0ffa, 0x0, 0x7, 0x2, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffbfffd, 0x1ff, 0xecd0, 0x10, 0x3fffe, 0x8, 0x7, 0x746f, 0x4, 0x5, 0x408, 0x4, 0x0, 0x7ffd]}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = io_uring_setup(0x1ad2, &(0x7f0000000040)={0x0, 0xae7b, 0x0, 0xfffffffe, 0x3d0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000004340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800001d}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [r9]}}], 0x18, 0x4084}}], 0x2, 0x8020) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): syzkaller login: [ 38.532474][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 38.532819][ T28] audit: type=1400 audit(38.470:56): avc: denied { read write } for pid=3084 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.532968][ T28] audit: type=1400 audit(38.470:57): avc: denied { open } for pid=3084 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:3434' (ED25519) to the list of known hosts. [ 57.801072][ T28] audit: type=1400 audit(57.730:58): avc: denied { name_bind } for pid=3092 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 59.934235][ T28] audit: type=1400 audit(59.870:59): avc: denied { execute } for pid=3093 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 59.937725][ T28] audit: type=1400 audit(59.870:60): avc: denied { execute_no_trans } for pid=3093 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 62.520043][ T28] audit: type=1400 audit(62.450:61): avc: denied { mounton } for pid=3093 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 62.524101][ T28] audit: type=1400 audit(62.460:62): avc: denied { mount } for pid=3093 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.534297][ T3093] cgroup: Unknown subsys name 'net' [ 62.538698][ T28] audit: type=1400 audit(62.470:63): avc: denied { unmount } for pid=3093 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.685121][ T3093] cgroup: Unknown subsys name 'cpuset' [ 62.690105][ T3093] cgroup: Unknown subsys name 'hugetlb' [ 62.692567][ T3093] cgroup: Unknown subsys name 'rlimit' [ 62.860752][ T28] audit: type=1400 audit(62.790:64): avc: denied { setattr } for pid=3093 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.862702][ T28] audit: type=1400 audit(62.800:65): avc: denied { mounton } for pid=3093 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 62.866093][ T28] audit: type=1400 audit(62.800:66): avc: denied { mount } for pid=3093 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 63.035575][ T3095] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 63.037947][ T28] audit: type=1400 audit(62.970:67): avc: denied { relabelto } for pid=3095 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 63.042863][ T28] audit: type=1400 audit(62.970:68): avc: denied { write } for pid=3095 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 63.067741][ T28] audit: type=1400 audit(63.000:69): avc: denied { read } for pid=3093 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 63.070222][ T28] audit: type=1400 audit(63.000:70): avc: denied { open } for pid=3093 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 70.987877][ T3093] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.980779][ T28] audit: type=1400 audit(72.910:71): avc: denied { execmem } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.036864][ T28] audit: type=1400 audit(72.970:72): avc: denied { read } for pid=3098 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.038909][ T28] audit: type=1400 audit(72.970:73): avc: denied { open } for pid=3098 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.047939][ T28] audit: type=1400 audit(72.980:74): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.074482][ T28] audit: type=1400 audit(73.010:76): avc: denied { module_request } for pid=3099 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.074816][ T28] audit: type=1400 audit(73.010:75): avc: denied { module_request } for pid=3098 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.156451][ T28] audit: type=1400 audit(73.090:77): avc: denied { sys_module } for pid=3099 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.564218][ T28] audit: type=1400 audit(73.500:78): avc: denied { ioctl } for pid=3098 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.517462][ T3098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.524976][ T3098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.646239][ T3099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.653510][ T3099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.078611][ T3098] hsr_slave_0: entered promiscuous mode [ 75.083242][ T3098] hsr_slave_1: entered promiscuous mode [ 75.382275][ T3099] hsr_slave_0: entered promiscuous mode [ 75.384177][ T3099] hsr_slave_1: entered promiscuous mode [ 75.385693][ T3099] debugfs: 'hsr0' already exists in 'hsr' [ 75.386235][ T3099] Cannot create hsr debugfs directory [ 75.444613][ T28] audit: type=1400 audit(75.380:79): avc: denied { create } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.446123][ T28] audit: type=1400 audit(75.380:80): avc: denied { write } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.454384][ T3098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.465075][ T3098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.468067][ T3098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.476362][ T3098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.479703][ T3098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.492755][ T3098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.496143][ T3098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.507061][ T3098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.774277][ T3099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.780317][ T3099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.787182][ T3099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.794066][ T3099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.799050][ T3099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.808621][ T3099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.813134][ T3099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.818257][ T3099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.267286][ T3098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.559465][ T3099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.485134][ T3098] veth0_vlan: entered promiscuous mode [ 78.510709][ T3098] veth1_vlan: entered promiscuous mode [ 78.585390][ T3098] veth0_macvtap: entered promiscuous mode [ 78.597548][ T3098] veth1_macvtap: entered promiscuous mode [ 78.675892][ T11] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.676567][ T11] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.676659][ T11] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.676737][ T11] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.809500][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 78.809909][ T28] audit: type=1400 audit(78.740:82): avc: denied { mount } for pid=3098 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.810146][ T28] audit: type=1400 audit(78.740:83): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/syzkaller.RTm3oV/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.819103][ T28] audit: type=1400 audit(78.750:84): avc: denied { mount } for pid=3098 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.836760][ T28] audit: type=1400 audit(78.770:85): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/syzkaller.RTm3oV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.843177][ T28] audit: type=1400 audit(78.780:86): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/syzkaller.RTm3oV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 78.864185][ T28] audit: type=1400 audit(78.800:87): avc: denied { unmount } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.868701][ T28] audit: type=1400 audit(78.800:88): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 78.878295][ T28] audit: type=1400 audit(78.800:89): avc: denied { mount } for pid=3098 comm="syz-executor" name="/" dev="gadgetfs" ino=2358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 78.878684][ T28] audit: type=1400 audit(78.810:90): avc: denied { mount } for pid=3098 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.884039][ T28] audit: type=1400 audit(78.810:91): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 78.954107][ T3098] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.181649][ T3099] veth0_vlan: entered promiscuous mode [ 79.216082][ T3099] veth1_vlan: entered promiscuous mode [ 79.315526][ T3099] veth0_macvtap: entered promiscuous mode [ 79.329219][ T3099] veth1_macvtap: entered promiscuous mode [ 79.412223][ T2397] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.415616][ T2397] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.419327][ T2397] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.439142][ T2397] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.054719][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 84.055934][ T28] audit: type=1400 audit(83.990:101): avc: denied { prog_load } for pid=3706 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.058966][ T28] audit: type=1400 audit(83.990:102): avc: denied { bpf } for pid=3706 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.063618][ T28] audit: type=1400 audit(84.000:103): avc: denied { perfmon } for pid=3706 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.239821][ T28] audit: type=1400 audit(85.170:104): avc: denied { name_bind } for pid=3706 comm="syz.1.2" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 85.245132][ T28] audit: type=1400 audit(85.180:105): avc: denied { node_bind } for pid=3706 comm="syz.1.2" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 85.771736][ T28] audit: type=1400 audit(85.670:106): avc: denied { prog_run } for pid=3717 comm="syz.1.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.979150][ T28] audit: type=1400 audit(85.910:107): avc: denied { create } for pid=3719 comm="syz.1.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.999980][ T28] audit: type=1400 audit(85.930:108): avc: denied { setopt } for pid=3719 comm="syz.1.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.022171][ T28] audit: type=1400 audit(85.950:109): avc: denied { getopt } for pid=3719 comm="syz.1.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.062614][ T28] audit: type=1400 audit(86.000:110): avc: denied { connect } for pid=3719 comm="syz.1.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.123839][ T3720] process 'syz.1.5' launched './file0' with NULL argv: empty string added [ 86.274066][ T3720] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5'. [ 88.417879][ T3727] syzkaller0: entered promiscuous mode [ 88.441658][ T3727] syzkaller0: entered allmulticast mode [ 89.821478][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 89.821858][ T28] audit: type=1400 audit(89.690:123): avc: denied { create } for pid=3743 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.822152][ T28] audit: type=1400 audit(89.700:124): avc: denied { bind } for pid=3743 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.886467][ T3742] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10'. [ 90.294915][ T28] audit: type=1400 audit(90.230:125): avc: denied { accept } for pid=3743 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.810295][ T3749] syzkaller0: entered promiscuous mode [ 90.823968][ T3749] syzkaller0: entered allmulticast mode [ 91.699301][ T28] audit: type=1400 audit(91.630:126): avc: denied { create } for pid=3755 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.719828][ T28] audit: type=1400 audit(91.650:127): avc: denied { write } for pid=3755 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.846741][ T28] audit: type=1400 audit(91.780:128): avc: denied { create } for pid=3755 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.883507][ T28] audit: type=1400 audit(91.820:129): avc: denied { create } for pid=3757 comm="syz.0.14" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.899011][ T28] audit: type=1400 audit(91.830:130): avc: denied { ioctl } for pid=3757 comm="syz.0.14" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=2445 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.955338][ T28] audit: type=1400 audit(91.880:131): avc: denied { write } for pid=3755 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.956965][ T28] audit: type=1400 audit(91.880:132): avc: denied { nlmsg_write } for pid=3755 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.322757][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.593114][ T23] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.596478][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.597269][ T23] usb 1-1: Product: syz [ 94.597748][ T23] usb 1-1: Manufacturer: syz [ 94.598149][ T23] usb 1-1: SerialNumber: syz [ 95.361161][ T3779] comedi: valid board names for 8255 driver are: [ 95.362591][ T3779] 8255 [ 95.363503][ T3779] comedi: valid board names for vmk80xx driver are: [ 95.364411][ T3779] vmk80xx [ 95.365126][ T3779] comedi: valid board names for usbduxsigma driver are: [ 95.366680][ T3779] usbduxsigma [ 95.367362][ T3779] comedi: valid board names for usbduxfast driver are: [ 95.368223][ T3779] usbduxfast [ 95.368899][ T3779] comedi: valid board names for usbdux driver are: [ 95.369731][ T3779] usbdux [ 95.377430][ T3779] comedi: valid board names for ni6501 driver are: [ 95.378680][ T3779] ni6501 [ 95.379645][ T3779] comedi: valid board names for dt9812 driver are: [ 95.380855][ T3779] dt9812 [ 95.381469][ T3779] comedi: valid board names for ni_labpc_cs driver are: [ 95.382315][ T3779] ni_labpc_cs [ 95.382937][ T3779] comedi: valid board names for ni_daq_700 driver are: [ 95.383694][ T3779] ni_daq_700 [ 95.384318][ T3779] comedi: valid board names for labpc_pci driver are: [ 95.385285][ T3779] labpc_pci [ 95.385948][ T3779] comedi: valid board names for adl_pci9118 driver are: [ 95.386913][ T3779] pci9118dg [ 95.388246][ T3779] pci9118hg [ 95.389168][ T3779] pci9118hr [ 95.398547][ T3779] comedi: valid board names for 8255_pci driver are: [ 95.398788][ T3779] 8255_pci [ 95.398944][ T3779] comedi: valid board names for comedi_parport driver are: [ 95.399084][ T3779] comedi_parport [ 95.399221][ T3779] comedi: valid board names for comedi_test driver are: [ 95.399355][ T3779] comedi_test [ 95.399486][ T3779] comedi: valid board names for comedi_bond driver are: [ 95.399623][ T3779] comedi_bond [ 96.140838][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 96.144552][ T28] audit: type=1400 audit(96.040:135): avc: denied { watch watch_reads } for pid=3781 comm="syz.1.19" path="pipe:[499]" dev="pipefs" ino=499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 96.691475][ T28] audit: type=1400 audit(96.610:136): avc: denied { create } for pid=3783 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 97.100488][ T3784] Zero length message leads to an empty skb [ 99.070241][ T28] audit: type=1400 audit(98.980:137): avc: denied { create } for pid=3787 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 99.201260][ T28] audit: type=1400 audit(99.130:138): avc: denied { allowed } for pid=3787 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 99.212526][ T28] audit: type=1400 audit(99.130:139): avc: denied { map } for pid=3787 comm="syz.1.21" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.427133][ T28] audit: type=1400 audit(99.310:140): avc: denied { read write } for pid=3787 comm="syz.1.21" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 101.093246][ T3791] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.048577][ T23] usb 1-1: USB disconnect, device number 2 [ 104.349718][ T3801] syzkaller0: entered promiscuous mode [ 104.353658][ T3801] syzkaller0: entered allmulticast mode [ 106.233283][ T28] audit: type=1400 audit(106.150:141): avc: denied { read } for pid=3806 comm="syz.0.24" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 106.233509][ T28] audit: type=1400 audit(106.150:142): avc: denied { open } for pid=3806 comm="syz.0.24" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 106.965391][ T28] audit: type=1400 audit(106.880:143): avc: denied { create } for pid=3806 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.967407][ T28] audit: type=1400 audit(106.880:144): avc: denied { connect } for pid=3806 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.196881][ T3813] comedi: valid board names for 8255 driver are: [ 111.197120][ T3813] 8255 [ 111.197299][ T3813] comedi: valid board names for vmk80xx driver are: [ 111.197380][ T3813] vmk80xx [ 111.197450][ T3813] comedi: valid board names for usbduxsigma driver are: [ 111.197694][ T3813] usbduxsigma [ 111.197769][ T3813] comedi: valid board names for usbduxfast driver are: [ 111.197850][ T3813] usbduxfast [ 111.197920][ T3813] comedi: valid board names for usbdux driver are: [ 111.197987][ T3813] usbdux [ 111.198054][ T3813] comedi: valid board names for ni6501 driver are: [ 111.198120][ T3813] ni6501 [ 111.198186][ T3813] comedi: valid board names for dt9812 driver are: [ 111.198251][ T3813] dt9812 [ 111.198315][ T3813] comedi: valid board names for ni_labpc_cs driver are: [ 111.198381][ T3813] ni_labpc_cs [ 111.198447][ T3813] comedi: valid board names for ni_daq_700 driver are: [ 111.198511][ T3813] ni_daq_700 [ 111.198576][ T3813] comedi: valid board names for labpc_pci driver are: [ 111.198641][ T3813] labpc_pci [ 111.198717][ T3813] comedi: valid board names for adl_pci9118 driver are: [ 111.198796][ T3813] pci9118dg [ 111.198883][ T3813] pci9118hg [ 111.198955][ T3813] pci9118hr [ 111.199024][ T3813] comedi: valid board names for 8255_pci driver are: [ 111.199091][ T3813] 8255_pci [ 111.199177][ T3813] comedi: valid board names for comedi_parport driver are: [ 111.199247][ T3813] comedi_parport [ 111.199314][ T3813] comedi: valid board names for comedi_test driver are: [ 111.199381][ T3813] comedi_test [ 111.199446][ T3813] comedi: valid board names for comedi_bond driver are: [ 111.199511][ T3813] comedi_bond [ 112.803538][ T28] audit: type=1400 audit(112.710:145): avc: denied { unmount } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 112.920486][ T3818] syz.0.28 uses obsolete (PF_INET,SOCK_PACKET) [ 112.922646][ T28] audit: type=1400 audit(112.840:146): avc: denied { ioctl } for pid=3817 comm="syz.0.28" path="socket:[3202]" dev="sockfs" ino=3202 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.649979][ T28] audit: type=1400 audit(114.560:147): avc: denied { ioctl } for pid=3817 comm="syz.0.28" path="socket:[3225]" dev="sockfs" ino=3225 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.523130][ T28] audit: type=1400 audit(115.440:148): avc: denied { read append } for pid=3832 comm="syz.1.31" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 115.523569][ T28] audit: type=1400 audit(115.440:149): avc: denied { open } for pid=3832 comm="syz.1.31" path="/16/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 115.690375][ T28] audit: type=1400 audit(115.620:150): avc: denied { unmount } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 115.859902][ T3844] netlink: 'syz.1.33': attribute type 10 has an invalid length. [ 116.026638][ T28] audit: type=1400 audit(115.910:151): avc: denied { ioctl } for pid=3845 comm="syz.1.34" path="socket:[3248]" dev="sockfs" ino=3248 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 119.769931][ T3876] netlink: 'syz.1.42': attribute type 1 has an invalid length. [ 119.772736][ T3876] netlink: 'syz.1.42': attribute type 2 has an invalid length. [ 120.148031][ T28] audit: type=1400 audit(120.070:152): avc: denied { setopt } for pid=3877 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 120.794526][ T3046] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.228058][ T3046] usb 1-1: config 0 has no interfaces? [ 123.041035][ T3899] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 123.195393][ T3046] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=17.a2 [ 123.195822][ T3046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.196171][ T3046] usb 1-1: Product: syz [ 123.196342][ T3046] usb 1-1: Manufacturer: syz [ 123.196503][ T3046] usb 1-1: SerialNumber: syz [ 123.201696][ T3046] usb 1-1: config 0 descriptor?? [ 123.762020][ T3711] usb 1-1: USB disconnect, device number 3 [ 125.446912][ T3916] tmpfs: Unsupported parameter 'mpol' [ 128.324777][ T3923] IPv6: sit1: Disabled Multicast RS [ 149.127065][ T3949] fuse: Bad value for 'fd' [ 149.239776][ T3951] netlink: 44 bytes leftover after parsing attributes in process `syz.1.66'. [ 157.607011][ T3961] fuse: Bad value for 'fd' [ 157.974949][ T3780] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 158.197818][ T3780] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 158.199150][ T3780] usb 2-1: config 0 has no interface number 0 [ 158.202173][ T3780] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.211250][ T3780] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 158.212524][ T3780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.215312][ T3780] usb 2-1: Product: syz [ 158.217148][ T3780] usb 2-1: Manufacturer: syz [ 158.218585][ T3780] usb 2-1: SerialNumber: syz [ 158.224083][ T3780] usb 2-1: config 0 descriptor?? [ 158.246123][ T3780] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 158.470205][ T3780] usb 2-1: USB disconnect, device number 2 [ 158.476065][ T3780] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 166.475196][ T3989] fuse: Bad value for 'fd' [ 178.064672][ T3999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.076509][ T3999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.694103][ T4167] syzkaller0: entered promiscuous mode [ 178.695242][ T4167] syzkaller0: entered allmulticast mode [ 179.028701][ T3999] hsr_slave_0: entered promiscuous mode [ 179.035932][ T3999] hsr_slave_1: entered promiscuous mode [ 179.043146][ T3999] debugfs: 'hsr0' already exists in 'hsr' [ 179.044107][ T3999] Cannot create hsr debugfs directory [ 179.444043][ T3999] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.474054][ T3999] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.476936][ T3999] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.485524][ T3999] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.490965][ T3999] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.498470][ T3999] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.503764][ T3999] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.511979][ T3999] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.094869][ T3999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.386714][ T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.733330][ T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.847967][ T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.977018][ T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.393835][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.400860][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.426213][ T54] bond0 (unregistering): Released all slaves [ 181.737709][ T54] hsr_slave_0: left promiscuous mode [ 181.743732][ T54] hsr_slave_1: left promiscuous mode [ 181.784263][ T54] veth1_macvtap: left promiscuous mode [ 181.791203][ T54] veth0_macvtap: left promiscuous mode [ 181.792612][ T54] veth1_vlan: left promiscuous mode [ 181.794467][ T54] veth0_vlan: left promiscuous mode [ 182.805159][ T2954] 8021q: adding VLAN 0 to HW filter on device eth1 [ 183.841785][ T2954] 8021q: adding VLAN 0 to HW filter on device eth2 [ 185.137534][ T3999] veth0_vlan: entered promiscuous mode [ 185.196055][ T3999] veth1_vlan: entered promiscuous mode [ 185.287612][ T3999] veth0_macvtap: entered promiscuous mode [ 185.308597][ T3999] veth1_macvtap: entered promiscuous mode [ 185.324957][ T2954] 8021q: adding VLAN 0 to HW filter on device eth3 [ 185.497436][ T2397] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.497810][ T2397] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.498128][ T2397] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.498346][ T2397] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.698732][ T2954] 8021q: adding VLAN 0 to HW filter on device eth4 [ 189.123518][ T28] audit: type=1400 audit(189.030:153): avc: denied { create } for pid=4379 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.124035][ T28] audit: type=1400 audit(189.030:154): avc: denied { ioctl } for pid=4379 comm="syz.2.86" path="socket:[3664]" dev="sockfs" ino=3664 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.124122][ T28] audit: type=1400 audit(189.030:155): avc: denied { bind } for pid=4379 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.124171][ T28] audit: type=1400 audit(189.030:156): avc: denied { setopt } for pid=4379 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.133600][ T28] audit: type=1400 audit(189.030:157): avc: denied { write } for pid=4379 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.228696][ T4380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 189.545607][ T28] audit: type=1400 audit(189.450:158): avc: denied { mounton } for pid=4385 comm="syz.1.87" path="/55/file0" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 199.699381][ T4431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.702502][ T4431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.784127][ T28] audit: type=1400 audit(200.570:159): avc: denied { append } for pid=4438 comm="syz.2.95" name="pcmC0D0p" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.472917][ T4452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.476176][ T4452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.497160][ T4452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.499882][ T4452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.198798][ T28] audit: type=1400 audit(205.130:160): avc: denied { listen } for pid=4460 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 205.209364][ T4461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.214841][ T4461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.385251][ T28] audit: type=1400 audit(216.290:161): avc: denied { create } for pid=4514 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 217.218615][ T28] audit: type=1400 audit(217.100:162): avc: denied { write } for pid=4527 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 217.567733][ T28] audit: type=1400 audit(217.500:163): avc: denied { setopt } for pid=4533 comm="syz.2.120" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.593253][ T4534] pimreg: entered allmulticast mode [ 217.751162][ T28] audit: type=1400 audit(217.680:164): avc: denied { create } for pid=4537 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 217.769055][ T28] audit: type=1400 audit(217.680:165): avc: denied { bind } for pid=4537 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 218.422148][ T28] audit: type=1400 audit(218.340:166): avc: denied { read } for pid=4539 comm="syz.2.122" name="file0" dev="fuse" ino=67108864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 218.424666][ T28] audit: type=1400 audit(218.340:167): avc: denied { open } for pid=4539 comm="syz.2.122" path="/24/file0/file0" dev="fuse" ino=67108864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 221.972470][ T4558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.974428][ T4558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.355291][ T4558] mmap: syz.2.128 (4558) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 228.931614][ T4586] comedi: valid board names for 8255 driver are: [ 228.932778][ T4586] 8255 [ 229.034766][ T4586] comedi: valid board names for vmk80xx driver are: [ 229.037978][ T4586] vmk80xx [ 229.040759][ T4586] comedi: valid board names for usbduxsigma driver are: [ 229.043235][ T4586] usbduxsigma [ 229.046057][ T4586] comedi: valid board names for usbduxfast driver are: [ 229.048603][ T4586] usbduxfast [ 229.051067][ T4586] comedi: valid board names for usbdux driver are: [ 229.053420][ T4586] usbdux [ 229.053665][ T4586] comedi: valid board names for ni6501 driver are: [ 229.053710][ T4586] ni6501 [ 229.053724][ T4586] comedi: valid board names for dt9812 driver are: [ 229.053739][ T4586] dt9812 [ 229.053752][ T4586] comedi: valid board names for ni_labpc_cs driver are: [ 229.053766][ T4586] ni_labpc_cs [ 229.053779][ T4586] comedi: valid board names for ni_daq_700 driver are: [ 229.053793][ T4586] ni_daq_700 [ 229.053849][ T4586] comedi: valid board names for labpc_pci driver are: [ 229.053889][ T4586] labpc_pci [ 229.053906][ T4586] comedi: valid board names for adl_pci9118 driver are: [ 229.053929][ T4586] pci9118dg [ 229.053942][ T4586] pci9118hg [ 229.053955][ T4586] pci9118hr [ 229.053969][ T4586] comedi: valid board names for 8255_pci driver are: [ 229.053984][ T4586] 8255_pci [ 229.053997][ T4586] comedi: valid board names for comedi_parport driver are: [ 229.054011][ T4586] comedi_parport [ 229.054025][ T4586] comedi: valid board names for comedi_test driver are: [ 229.054039][ T4586] comedi_test [ 229.054053][ T4586] comedi: valid board names for comedi_bond driver are: [ 229.054066][ T4586] comedi_bond [ 229.621379][ T28] audit: type=1400 audit(229.550:168): avc: denied { write } for pid=4591 comm="syz.2.140" name="raw" dev="proc" ino=4026532982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 236.774162][ T4615] ip6tnl1: entered promiscuous mode [ 236.774526][ T4615] ip6tnl1: entered allmulticast mode [ 237.199976][ T28] audit: type=1400 audit(237.110:169): avc: denied { write } for pid=4622 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 237.202120][ T28] audit: type=1400 audit(237.110:170): avc: denied { read } for pid=4622 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 246.737089][ T4684] netlink: 'syz.1.175': attribute type 1 has an invalid length. [ 246.907358][ T4684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.572508][ T4684] bond1: (slave veth0_to_bond): making interface the new active one [ 247.603800][ T4684] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 251.820812][ T4744] netlink: 'syz.2.181': attribute type 1 has an invalid length. [ 252.143228][ T4744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.157193][ T4744] bond1: (slave erspan1): making interface the new active one [ 252.159343][ T4744] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 277.602899][ T4880] netlink: 'syz.2.215': attribute type 4 has an invalid length. [ 280.514000][ T28] audit: type=1326 audit(280.430:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.2.218" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 280.515947][ T28] audit: type=1326 audit(280.430:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.2.218" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 280.518176][ T28] audit: type=1326 audit(280.430:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.2.218" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 280.520036][ T28] audit: type=1326 audit(280.430:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.2.218" exe="/syz-executor" sig=0 arch=40000028 syscall=426 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 280.522513][ T28] audit: type=1326 audit(280.430:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.2.218" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 280.524348][ T28] audit: type=1326 audit(280.430:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.2.218" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 280.526147][ T28] audit: type=1326 audit(280.430:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.2.218" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 280.527943][ T28] audit: type=1326 audit(280.430:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.2.218" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 280.529873][ T28] audit: type=1326 audit(280.430:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.2.218" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 280.532223][ T28] audit: type=1326 audit(280.430:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.2.218" exe="/syz-executor" sig=0 arch=40000028 syscall=6 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 299.341867][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 299.345534][ T28] audit: type=1400 audit(299.240:187): avc: denied { attach_queue } for pid=4961 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 300.008320][ T4976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.248'. [ 300.011464][ T4976] netlink: 60 bytes leftover after parsing attributes in process `syz.1.248'. [ 300.078095][ T4976] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 300.090104][ T4976] bond2 (unregistering): Released all slaves [ 301.571333][ T5061] netlink: 84 bytes leftover after parsing attributes in process `syz.1.253'. [ 302.464931][ T5076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 302.798785][ T28] audit: type=1400 audit(302.730:188): avc: denied { mounton } for pid=5083 comm="syz.1.261" path="/157/file0" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 305.443139][ T5101] fuse: Unknown parameter 'group_i00000000000000000000' [ 307.024911][ T5112] fuse: Unknown parameter 'group_i00000000000000000000' [ 308.063237][ T5123] fuse: Unknown parameter 'group_i00000000000000000000' [ 309.024339][ T5134] binfmt_misc: register: failed to install interpreter file ./file2 [ 310.434190][ T28] audit: type=1400 audit(310.350:189): avc: denied { block_suspend } for pid=5145 comm="syz.2.289" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 313.148341][ T5166] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 314.207295][ T5178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 314.581616][ T5181] 8021q: adding VLAN 0 to HW filter on device bond2 [ 314.634426][ T5181] bond2: (slave vlan0): Enslaving as an active interface with an up link [ 320.795599][ T5234] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 325.158401][ T28] audit: type=1400 audit(325.070:190): avc: denied { name_bind } for pid=5253 comm="syz.2.315" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 332.505096][ T5300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'. [ 339.479373][ T41] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 340.195332][ T41] usb 2-1: Using ep0 maxpacket: 16 [ 340.879225][ T41] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.879565][ T41] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 341.834193][ T41] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 341.834555][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.834814][ T41] usb 2-1: Product: syz [ 341.834982][ T41] usb 2-1: Manufacturer: syz [ 341.835134][ T41] usb 2-1: SerialNumber: syz [ 341.842545][ T41] usb 2-1: config 0 descriptor?? [ 342.278416][ T3711] usb 2-1: USB disconnect, device number 3 [ 352.970058][ T28] audit: type=1400 audit(352.890:191): avc: denied { create } for pid=5380 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 359.173226][ T5398] netlink: 44 bytes leftover after parsing attributes in process `syz.1.357'. [ 365.619527][ T5409] netlink: 3 bytes leftover after parsing attributes in process `syz.2.360'. [ 365.680944][ T5409] : entered promiscuous mode [ 367.481848][ T28] audit: type=1400 audit(367.390:192): avc: denied { ioctl } for pid=5448 comm="syz.1.363" path="socket:[6257]" dev="sockfs" ino=6257 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 373.111060][ T28] audit: type=1400 audit(373.000:193): avc: denied { mounton } for pid=5460 comm="syz.1.368" path="/proc/474/task" dev="proc" ino=5964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 377.281595][ T28] audit: type=1400 audit(377.170:194): avc: denied { ioctl } for pid=5471 comm="syz.2.371" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 380.689898][ T28] audit: type=1400 audit(380.590:195): avc: denied { create } for pid=5479 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 380.695190][ T28] audit: type=1400 audit(380.590:196): avc: denied { write } for pid=5479 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 387.172260][ T5501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.174727][ T5501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.183628][ T5501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.185269][ T5501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.799906][ T28] audit: type=1400 audit(396.710:197): avc: denied { ioctl } for pid=5510 comm="syz.2.383" path="socket:[6031]" dev="sockfs" ino=6031 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 405.196891][ T5526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.200575][ T5526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.249992][ T5526] input: syz1 as /devices/virtual/input/input4 [ 416.390836][ T5558] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 416.393567][ T5558] block device autoloading is deprecated and will be removed. [ 416.400032][ T28] audit: type=1400 audit(416.300:198): avc: denied { ioctl } for pid=5555 comm="syz.2.396" path="/163/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 421.276237][ T5570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.292424][ T5570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.079377][ T5570] hsr_slave_0: entered promiscuous mode [ 423.089091][ T5570] hsr_slave_1: entered promiscuous mode [ 423.598338][ T5570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 423.615311][ T5570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.619538][ T5570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 423.626025][ T5570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.629632][ T5570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 423.635686][ T5570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.639225][ T5570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 423.668665][ T5570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.142592][ T5570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.884356][ T5570] veth0_vlan: entered promiscuous mode [ 429.919100][ T5570] veth1_vlan: entered promiscuous mode [ 430.037221][ T5570] veth0_macvtap: entered promiscuous mode [ 430.063603][ T5570] veth1_macvtap: entered promiscuous mode [ 430.192161][ T2499] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.193755][ T2499] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.197752][ T2499] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.211022][ T2499] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.992690][ T28] audit: type=1400 audit(435.890:199): avc: denied { create } for pid=5911 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 436.035681][ T28] audit: type=1400 audit(435.950:200): avc: denied { write } for pid=5911 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 440.932009][ T5903] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 441.036428][ T28] audit: type=1400 audit(440.930:201): avc: denied { create } for pid=5923 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 441.044118][ T28] audit: type=1400 audit(440.930:202): avc: denied { sys_admin } for pid=5923 comm="syz.3.408" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 443.365008][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 443.373740][ T12] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 446.492522][ T28] audit: type=1400 audit(446.410:203): avc: denied { map } for pid=5955 comm="syz.2.417" path="/proc/414/net/route" dev="proc" ino=4026532973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 446.511624][ T5959] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 447.000637][ C1] sched: DL replenish lagged too much [ 451.514018][ T28] audit: type=1400 audit(451.420:204): avc: denied { bind } for pid=5960 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 451.517596][ T28] audit: type=1400 audit(451.420:205): avc: denied { node_bind } for pid=5960 comm="syz.3.418" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 456.816648][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.820369][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.936345][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 463.938250][ T41] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 464.042009][ T6015] ======================================================= [ 464.042009][ T6015] WARNING: The mand mount option has been deprecated and [ 464.042009][ T6015] and is ignored by this kernel. Remove the mand [ 464.042009][ T6015] option from the mount to silence this warning. [ 464.042009][ T6015] ======================================================= [ 464.057536][ T28] audit: type=1400 audit(463.980:206): avc: denied { mount } for pid=6001 comm="syz.2.431" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 464.064133][ T28] audit: type=1400 audit(463.980:207): avc: denied { mounton } for pid=6001 comm="syz.2.431" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 470.285914][ T6033] batadv_slave_1: entered promiscuous mode [ 470.287779][ T6032] batadv_slave_1: left promiscuous mode [ 470.471632][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 470.474782][ T12] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 477.959520][ T28] audit: type=1400 audit(477.880:208): avc: denied { unmount } for pid=3999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 478.147092][ T6053] bond0: (slave bond_slave_0): Releasing backup interface [ 478.164787][ T6053] bond0: (slave bond_slave_1): Releasing backup interface [ 478.187870][ T6053] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 481.995054][ T6068] syzkaller0: entered promiscuous mode [ 481.999062][ T6068] syzkaller0: entered allmulticast mode [ 484.044960][ T28] audit: type=1400 audit(483.970:209): avc: denied { name_bind } for pid=6086 comm="syz.2.451" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 488.031067][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 493.257803][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.260770][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.332750][ T6120] ªªªªªª: renamed from vlan0 (while UP) [ 493.340285][ T28] audit: type=1400 audit(493.250:210): avc: denied { execute } for pid=6119 comm="syz.2.461" path="/proc/472/task/473/net/vlan/vlan0" dev="proc" ino=4026532652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 494.657038][ T6134] syzkaller0: entered promiscuous mode [ 494.657489][ T6134] syzkaller0: entered allmulticast mode [ 497.352967][ T6163] capability: warning: `syz.2.477' uses 32-bit capabilities (legacy support in use) [ 497.432735][ T28] audit: type=1400 audit(497.330:211): avc: denied { wake_alarm } for pid=6164 comm="syz.2.478" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 498.456895][ T6174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.458499][ T6174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.524282][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.526331][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.355518][ T6187] comedi: valid board names for 8255 driver are: [ 499.360710][ T6187] 8255 [ 499.364031][ T6187] comedi: valid board names for vmk80xx driver are: [ 499.366995][ T6187] vmk80xx [ 499.369149][ T6187] comedi: valid board names for usbduxsigma driver are: [ 499.371930][ T6187] usbduxsigma [ 499.373954][ T6187] comedi: valid board names for usbduxfast driver are: [ 499.376903][ T6187] usbduxfast [ 499.379342][ T6187] comedi: valid board names for usbdux driver are: [ 499.381922][ T6187] usbdux [ 499.383948][ T6187] comedi: valid board names for ni6501 driver are: [ 499.387405][ T6187] ni6501 [ 499.390110][ T6187] comedi: valid board names for dt9812 driver are: [ 499.398019][ T6187] dt9812 [ 499.400822][ T6187] comedi: valid board names for ni_labpc_cs driver are: [ 499.403157][ T6187] ni_labpc_cs [ 499.405427][ T6187] comedi: valid board names for ni_daq_700 driver are: [ 499.410687][ T6187] ni_daq_700 [ 499.413037][ T6187] comedi: valid board names for labpc_pci driver are: [ 499.415356][ T6187] labpc_pci [ 499.417354][ T6187] comedi: valid board names for adl_pci9118 driver are: [ 499.421533][ T6187] pci9118dg [ 499.430186][ T6187] pci9118hg [ 499.433104][ T6187] pci9118hr [ 499.435155][ T6187] comedi: valid board names for 8255_pci driver are: [ 499.437856][ T6187] 8255_pci [ 499.439892][ T6187] comedi: valid board names for comedi_parport driver are: [ 499.443417][ T6187] comedi_parport [ 499.445503][ T6187] comedi: valid board names for comedi_test driver are: [ 499.447708][ T6187] comedi_test [ 499.450097][ T6187] comedi: valid board names for comedi_bond driver are: [ 499.453898][ T6187] comedi_bond [ 505.943950][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.944998][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.833750][ T28] audit: type=1400 audit(513.730:212): avc: denied { create } for pid=6229 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 516.860190][ T6242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.861213][ T6242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.522253][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.524792][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.933892][ T6265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.943935][ T6265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.296972][ T6265] hsr_slave_0: entered promiscuous mode [ 539.299840][ T6265] hsr_slave_1: entered promiscuous mode [ 539.304832][ T6265] debugfs: 'hsr0' already exists in 'hsr' [ 539.307257][ T6265] Cannot create hsr debugfs directory [ 539.666050][ T6265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 539.681629][ T6265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 539.684692][ T6265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 539.702268][ T6265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 539.704874][ T6265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 539.727936][ T6265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 539.732225][ T6265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 539.735871][ T6265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 540.829402][ T6265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.684700][ T6265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 541.685216][ T6265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.338842][ T6265] veth0_vlan: entered promiscuous mode [ 545.349149][ T6265] veth1_vlan: entered promiscuous mode [ 545.420947][ T6265] veth0_macvtap: entered promiscuous mode [ 545.427518][ T6265] veth1_macvtap: entered promiscuous mode [ 545.487477][ T54] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.488775][ T54] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.492986][ T54] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.495929][ T54] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.667140][ T28] audit: type=1400 audit(545.570:213): avc: denied { recv } for pid=3093 comm="syz-executor" saddr=127.0.0.1 src=57092 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 545.668471][ T28] audit: type=1400 audit(545.570:214): avc: denied { recv } for pid=3092 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57092 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 545.768012][ T6578] serio: Serial port pts0 [ 548.570987][ T6595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.573072][ T6595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.437937][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.993186][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.566928][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.812132][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.814421][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.849858][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.351782][ T37] bond0 (unregistering): Released all slaves [ 552.916962][ T37] hsr_slave_0: left promiscuous mode [ 552.935221][ T37] hsr_slave_1: left promiscuous mode [ 552.961330][ T6623] netlink: 32 bytes leftover after parsing attributes in process `syz.2.525'. [ 552.965701][ T37] veth1_macvtap: left promiscuous mode [ 552.966841][ T37] veth0_macvtap: left promiscuous mode [ 552.976822][ T37] veth1_vlan: left promiscuous mode [ 552.985036][ T37] veth0_vlan: left promiscuous mode [ 553.239347][ T41] SELinux: failure in sel_netif_sid_slow(), invalid network interface (32) [ 553.241121][ T41] SELinux: failure in sel_netif_sid_slow(), invalid network interface (34) [ 555.178695][ T2954] 8021q: adding VLAN 0 to HW filter on device eth5 [ 558.044039][ T2954] 8021q: adding VLAN 0 to HW filter on device eth6 [ 560.057811][ T28] audit: type=1400 audit(559.960:215): avc: denied { name_bind } for pid=6655 comm="syz.2.531" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 560.422450][ T28] audit: type=1400 audit(560.320:216): avc: denied { write } for pid=6660 comm="syz.2.532" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 560.999110][ T2954] 8021q: adding VLAN 0 to HW filter on device eth7 [ 563.476204][ T2954] 8021q: adding VLAN 0 to HW filter on device eth8 [ 566.005082][ T28] audit: type=1400 audit(565.890:217): avc: denied { create } for pid=6680 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 566.048763][ T28] audit: type=1400 audit(565.950:218): avc: denied { recv } for pid=15 comm="rcu_preempt" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57092 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 566.758582][ T6693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.759478][ T6693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.466252][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.468248][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.862210][ T6739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.550'. [ 576.569059][ T6755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.569740][ T6755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.783233][ T6767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.784172][ T6767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.504870][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.507817][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.320628][ T28] audit: type=1400 audit(591.240:219): avc: denied { recv } for pid=0 comm="swapper/0" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 593.392224][ T6799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 593.392499][ T6799] IPv6: NLM_F_CREATE should be set when creating new route [ 593.463735][ T6801] netlink: 'syz.2.560': attribute type 4 has an invalid length. [ 593.537412][ T28] audit: type=1400 audit(593.450:220): avc: denied { read } for pid=6802 comm="syz.2.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 596.986941][ T6807] 8<--- cut here --- [ 596.987232][ T6807] Unable to handle kernel paging request at virtual address fee00400 when write [ 596.987637][ T6807] [fee00400] *pgd=80000080007003, *pmd=00000000 [ 596.988796][ T6807] Internal error: Oops: a06 [#1] SMP ARM [ 596.992425][ T6807] Modules linked in: [ 596.993276][ T6807] CPU: 1 UID: 0 PID: 6807 Comm: syz.2.561 Not tainted syzkaller #0 PREEMPT [ 596.993696][ T6807] Hardware name: ARM-Versatile Express [ 596.994037][ T6807] PC is at parport_attach+0x184/0x1e0 [ 596.994820][ T6807] LR is at parport_attach+0x174/0x1e0 [ 596.995059][ T6807] pc : [<8144d584>] lr : [<8144d574>] psr: 60000013 [ 596.995331][ T6807] sp : dfd81d30 ip : dfd81d30 fp : dfd81d54 [ 596.995568][ T6807] r10: 82d2bd44 r9 : 00000003 r8 : 8301b180 [ 596.995833][ T6807] r7 : dfd81d90 r6 : 8301b180 r5 : 00000000 r4 : 00000000 [ 596.996129][ T6807] r3 : fee00400 r2 : 81e274c8 r1 : 00000001 r0 : 8144d1e4 [ 596.996501][ T6807] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 596.996818][ T6807] Control: 30c5387d Table: 85167700 DAC: 00000000 [ 596.997156][ T6807] Register r0 information: non-slab/vmalloc memory [ 596.997745][ T6807] Register r1 information: non-paged memory [ 596.998016][ T6807] Register r2 information: non-slab/vmalloc memory [ 596.998289][ T6807] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 596.999067][ T6807] Register r4 information: NULL pointer [ 596.999503][ T6807] Register r5 information: NULL pointer [ 596.999787][ T6807] Register r6 information: slab kmalloc-192 start 8301b180 pointer offset 0 size 192 [ 597.000879][ T6807] Register r7 information: 2-page vmalloc region starting at 0xdfd80000 allocated at kernel_clone+0xbc/0x438 [ 597.001346][ T6807] Register r8 information: slab kmalloc-192 start 8301b180 pointer offset 0 size 192 [ 597.001827][ T6807] Register r9 information: non-paged memory [ 597.002085][ T6807] Register r10 information: non-slab/vmalloc memory [ 597.002352][ T6807] Register r11 information: 2-page vmalloc region starting at 0xdfd80000 allocated at kernel_clone+0xbc/0x438 [ 597.002845][ T6807] Register r12 information: 2-page vmalloc region starting at 0xdfd80000 allocated at kernel_clone+0xbc/0x438 [ 597.003318][ T6807] Process syz.2.561 (pid: 6807, stack limit = 0xdfd80000) [ 597.003736][ T6807] Stack: (0xdfd81d30 to 0xdfd82000) [ 597.004105][ T6807] 1d20: 824ba448 8301b180 00000000 82bd26a0 [ 597.004496][ T6807] 1d40: 81e27988 00000000 dfd81d8c dfd81d58 814490e4 8144d40c 40946400 00000000 [ 597.004864][ T28] audit: type=1400 audit(596.890:221): avc: denied { read } for pid=2905 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 597.006023][ T6807] 1d60: dfd81d7c 20000140 8301b180 b5403587 40946400 00000001 0000000c 85976200 [ 597.006522][ T6807] 1d80: dfd81e4c dfd81d90 814448f0 81448fe8 656d6f63 705f6964 6f707261 00007472 [ 597.007097][ T6807] 1da0: 00000000 00000400 00000002 7fffffff 000084e1 0000002f 00002006 00000006 [ 597.007438][ T28] audit: type=1400 audit(596.890:222): avc: denied { search } for pid=2905 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.007458][ T6807] 1dc0: 00000008 000a0ffa 00000000 00000007 00000002 00001003 01000004 0000000f [ 597.007788][ T28] audit: type=1400 audit(596.890:223): avc: denied { search } for pid=2905 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.008062][ T28] audit: type=1400 audit(596.890:224): avc: denied { add_name } for pid=2905 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.008360][ T28] audit: type=1400 audit(596.890:225): avc: denied { create } for pid=2905 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 597.008646][ T28] audit: type=1400 audit(596.890:226): avc: denied { append open } for pid=2905 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 597.008920][ T28] audit: type=1400 audit(596.890:227): avc: denied { getattr } for pid=2905 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 597.012222][ T6807] 1de0: 00010000 ffffffa8 7ffbfffd 000001ff 0000ecd0 00000010 0003fffe 00000008 [ 597.012553][ T6807] 1e00: 00000007 0000746f 00000004 00000005 00000408 00000004 00000000 00007ffd [ 597.012868][ T6807] 1e20: 00000000 53ad9daa 00000000 85c7d700 8301b180 20000140 40946400 00000001 [ 597.013244][ T6807] 1e40: dfd81f14 dfd81e50 81445c14 81444828 00000000 53ad9daa 00000000 00000000 [ 597.013584][ T6807] 1e60: 8252e804 dfd81ea4 0000005f 8472ed40 00000064 8301b1b0 dfd81ee4 dfd81e88 [ 597.013977][ T6807] 1e80: 807ded9c 807d50cc 00000064 00000001 00000000 dfd81ea4 8335d310 834e9088 [ 597.014289][ T6807] 1ea0: 00006400 0000000b dfd81e98 00000000 00000000 53ad9daa 00000000 85c7d700 [ 597.014595][ T6807] 1ec0: 40946400 20000140 20000140 85c7d700 0000000c 85976200 dfd81ef4 dfd81ee8 [ 597.014949][ T6807] 1ee0: 807deed0 53ad9daa dfd81f14 00000000 85c7d701 40946400 20000140 85c7d700 [ 597.015332][ T6807] 1f00: 0000000c 85976200 dfd81fa4 dfd81f18 8059c2bc 814458cc ecac8b10 85976200 [ 597.015786][ T6807] 1f20: dfd81f3c dfd81f30 81b05914 81b057e0 dfd81f54 dfd81f40 8025a4dc 8028c2bc [ 597.016206][ T6807] 1f40: dfd81fb0 40000000 dfd81f84 dfd81f58 80220be0 8025a498 00000000 82a1c33c [ 597.016599][ T6807] 1f60: dfd81fb0 0013e940 ecac8b10 80220b34 00000000 53ad9daa dfd81fac 00000000 [ 597.017044][ T6807] 1f80: 00000000 00346590 00000036 8020029c 85976200 00000036 00000000 dfd81fa8 [ 597.017374][ T6807] 1fa0: 80200060 8059c084 00000000 00000000 0000000c 40946400 20000140 00000000 [ 597.017790][ T6807] 1fc0: 00000000 00000000 00346590 00000036 00346558 00000000 00000001 76ee60dc [ 597.018201][ T6807] 1fe0: 76ee5e88 76ee5e78 00018e58 001307a0 60000010 0000000c 00000000 00000000 [ 597.018650][ T6807] Call trace: [ 597.019149][ T6807] [<8144d400>] (parport_attach) from [<814490e4>] (comedi_device_attach+0x108/0x244) [ 597.019942][ T6807] r6:00000000 r5:81e27988 r4:82bd26a0 [ 597.020350][ T6807] [<81448fdc>] (comedi_device_attach) from [<814448f0>] (do_devconfig_ioctl+0xd4/0x21c) [ 597.020792][ T6807] r10:85976200 r9:0000000c r8:00000001 r7:40946400 r6:b5403587 r5:8301b180 [ 597.021126][ T6807] r4:20000140 [ 597.021286][ T6807] [<8144481c>] (do_devconfig_ioctl) from [<81445c14>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 597.021693][ T6807] r8:00000001 r7:40946400 r6:20000140 r5:8301b180 r4:85c7d700 [ 597.022006][ T6807] [<814458c0>] (comedi_unlocked_ioctl) from [<8059c2bc>] (sys_ioctl+0x244/0xb5c) [ 597.022436][ T6807] r10:85976200 r9:0000000c r8:85c7d700 r7:20000140 r6:40946400 r5:85c7d701 [ 597.022758][ T6807] r4:00000000 [ 597.022912][ T6807] [<8059c078>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 597.023289][ T6807] Exception stack(0xdfd81fa8 to 0xdfd81ff0) [ 597.023582][ T6807] 1fa0: 00000000 00000000 0000000c 40946400 20000140 00000000 [ 597.023994][ T6807] 1fc0: 00000000 00000000 00346590 00000036 00346558 00000000 00000001 76ee60dc [ 597.024391][ T6807] 1fe0: 76ee5e88 76ee5e78 00018e58 001307a0 [ 597.024734][ T6807] r10:00000036 r9:85976200 r8:8020029c r7:00000036 r6:00346590 r5:00000000 [ 597.025074][ T6807] r4:00000000 [ 597.025500][ T6807] Code: e5963064 e3a04000 e7f33053 e2433612 (e5c34000) [ 597.027163][ T6807] ---[ end trace 0000000000000000 ]--- [ 597.028718][ T6807] Kernel panic - not syncing: Fatal exception [ 597.032556][ T6807] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:05:06 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=7effffff R02=00000000 R03=00000000 R04=85959880 R05=ec079fb0 R06=00000000 R07=00000000 R08=8020029c R09=85959880 R10=00000003 R11=00000000 R12=ec079fb0 R13=ec079fb0 R14=802000b4 R15=802000cc PSR=600e0093 -ZC- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=6b636f73 s03=70207465 d01=702074656b636f73 s04=5049205d s05=203a3676 d02=203a36765049205d s06=5f4d4c4e s07=52435f46 d03=52435f465f4d4c4e s08=45544145 s09=6f687320 d04=6f68732045544145 s10=20646c75 s11=73206562 d05=7320656220646c75 s12=77207465 s13=206e6568 d06=206e656877207465 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=00000000 R02=00000000 R03=85976200 R04=82b591c8 R05=00000000 R06=0000057c R07=82a26068 R08=0000057c R09=00000001 R10=00000000 R11=dfd81af4 R12=00000000 R13=dfd81a98 R14=3fffdfff R15=802e6d78 PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000