last executing test programs: 25m54.235301416s ago: executing program 0 (id=949): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)='7', 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) 25m51.457183436s ago: executing program 0 (id=950): syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x3, 0x0, 0x28, 0x0, @wg=@data={0x220, 0x4, 0x80000000000003ff, "204200000000000000fbffffff000000"}}}}}}, 0x0) 25m50.528236243s ago: executing program 0 (id=951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 25m49.490255334s ago: executing program 0 (id=952): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x10, 0x4, 0x8, 0x5, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 25m48.814877863s ago: executing program 0 (id=953): bpf$MAP_CREATE(0x0, 0x0, 0xfffffef3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) clock_nanosleep(0x9, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$packet(0x11, 0x2, 0x300) 25m43.09667063s ago: executing program 0 (id=957): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 24m54.519024093s ago: executing program 32 (id=957): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 17.498856538s ago: executing program 1 (id=2165): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={r1, 0x0, 0x10}, 0xc) 17.498541097s ago: executing program 2 (id=2166): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x0) 16.788060558s ago: executing program 1 (id=2167): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)) 16.522046325s ago: executing program 1 (id=2168): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000200060c10000000010000000000", 0x58}], 0x1) 16.35682892s ago: executing program 2 (id=2169): openat$drirender128(0xffffffffffffff9c, 0x0, 0x20000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x6e}], 0x1, 0x2, 0x0) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x52, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 16.00737121s ago: executing program 2 (id=2170): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) 15.879066414s ago: executing program 1 (id=2171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x20000000) faccessat2(0xffffffffffffffff, 0x0, 0x4, 0x1300) 14.049962097s ago: executing program 2 (id=2172): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x40, 0x8b}) r0 = syz_open_dev$loop(0x0, 0x75f, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x125f, 0x0) 13.471297403s ago: executing program 2 (id=2173): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)) 12.296975717s ago: executing program 2 (id=2174): socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="310300000000000002140b00000008000300", @ANYRES32=r4], 0x1c}}, 0x0) 599.976413ms ago: executing program 1 (id=2175): r0 = socket(0x11, 0xa, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x52, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 0s ago: executing program 1 (id=2176): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) lseek(r0, 0x851, 0x0) kernel console output (not intermixed with test programs): 0:579): avc: denied { map } for pid=5832 comm="syz.0.914" path="socket:[17147]" dev="sockfs" ino=17147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1268.884095][ T31] audit: type=1400 audit(1268.180:580): avc: denied { create } for pid=5842 comm="syz.1.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1268.933065][ T31] audit: type=1400 audit(1268.210:581): avc: denied { setopt } for pid=5842 comm="syz.1.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1268.934703][ T31] audit: type=1400 audit(1268.220:582): avc: denied { create } for pid=5842 comm="syz.1.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1269.062422][ T31] audit: type=1400 audit(1268.340:583): avc: denied { connect } for pid=5842 comm="syz.1.918" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1269.107288][ T31] audit: type=1400 audit(1268.350:584): avc: denied { write } for pid=5842 comm="syz.1.918" path="socket:[16190]" dev="sockfs" ino=16190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1270.116362][ T31] audit: type=1326 audit(1269.410:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5844 comm="syz.1.919" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1270.117541][ T31] audit: type=1326 audit(1269.410:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5844 comm="syz.1.919" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1270.129860][ T31] audit: type=1326 audit(1269.420:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5844 comm="syz.1.919" exe="/syz-executor" sig=0 arch=c00000b7 syscall=76 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1270.131657][ T31] audit: type=1326 audit(1269.430:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5844 comm="syz.1.919" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1270.132938][ T31] audit: type=1326 audit(1269.430:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5844 comm="syz.1.919" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1275.653691][ T31] audit: type=1400 audit(1274.750:590): avc: denied { read } for pid=5848 comm="syz.1.921" dev="nsfs" ino=4026532626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1275.656117][ T31] audit: type=1400 audit(1274.780:591): avc: denied { open } for pid=5848 comm="syz.1.921" path="ipc:[4026532626]" dev="nsfs" ino=4026532626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1275.661475][ T31] audit: type=1400 audit(1274.940:592): avc: denied { setopt } for pid=5848 comm="syz.1.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1277.552804][ T31] audit: type=1400 audit(1276.750:593): avc: denied { write } for pid=5854 comm="syz.0.923" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1282.998191][ T31] audit: type=1400 audit(1282.290:594): avc: denied { create } for pid=5865 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1283.048216][ T31] audit: type=1400 audit(1282.340:595): avc: denied { write } for pid=5865 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1283.065316][ T31] audit: type=1400 audit(1282.360:596): avc: denied { read } for pid=5865 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1283.110938][ T31] audit: type=1400 audit(1282.400:597): avc: denied { ioctl } for pid=5865 comm="syz.0.928" path="socket:[17218]" dev="sockfs" ino=17218 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1283.114666][ T31] audit: type=1400 audit(1282.410:598): avc: denied { module_request } for pid=5865 comm="syz.0.928" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1283.706848][ T31] audit: type=1400 audit(1283.000:599): avc: denied { sys_module } for pid=5865 comm="syz.0.928" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1284.793334][ T31] audit: type=1400 audit(1284.090:600): avc: denied { read write } for pid=5870 comm="syz.1.929" name="raw-gadget" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1284.810014][ T31] audit: type=1400 audit(1284.090:601): avc: denied { open } for pid=5870 comm="syz.1.929" path="/dev/raw-gadget" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1284.810862][ T31] audit: type=1400 audit(1284.090:602): avc: denied { ioctl } for pid=5870 comm="syz.1.929" path="/dev/raw-gadget" dev="devtmpfs" ino=701 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1284.827194][ T5871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.877167][ T5871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.076524][ T31] audit: type=1326 audit(1285.370:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.1.932" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1288.810655][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1288.811543][ T31] audit: type=1400 audit(1287.910:608): avc: denied { read } for pid=5884 comm="syz.0.934" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1288.822436][ T31] audit: type=1400 audit(1287.950:609): avc: denied { open } for pid=5884 comm="syz.0.934" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1290.942142][ T5891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.944716][ T5891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.377875][ T31] audit: type=1326 audit(1314.670:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.1.939" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1315.384777][ T31] audit: type=1326 audit(1314.680:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.1.939" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1315.386851][ T31] audit: type=1326 audit(1314.680:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.1.939" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1315.407184][ T31] audit: type=1326 audit(1314.690:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.1.939" exe="/syz-executor" sig=0 arch=c00000b7 syscall=179 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1315.407519][ T31] audit: type=1326 audit(1314.700:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.1.939" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1315.412708][ T31] audit: type=1326 audit(1314.710:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.1.939" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1323.111269][ T5910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.132164][ T5910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.475728][ T31] audit: type=1400 audit(1323.770:616): avc: denied { read write } for pid=5914 comm="syz.1.943" name="fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1324.490110][ T31] audit: type=1400 audit(1323.780:617): avc: denied { open } for pid=5914 comm="syz.1.943" path="/dev/fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1324.563959][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.566568][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.855051][ T31] audit: type=1400 audit(1329.029:618): avc: denied { create } for pid=5922 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1329.951288][ T31] audit: type=1400 audit(1329.142:619): avc: denied { connect } for pid=5922 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1330.003203][ T31] audit: type=1400 audit(1329.179:620): avc: denied { write } for pid=5922 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1332.818357][ T31] audit: type=1400 audit(1331.826:621): avc: denied { write } for pid=5927 comm="syz.0.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1336.448861][ T31] audit: type=1400 audit(1335.203:622): avc: denied { wake_alarm } for pid=5936 comm="syz.0.953" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1337.289422][ T31] audit: type=1400 audit(1336.007:623): avc: denied { read } for pid=5936 comm="syz.0.953" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1337.295867][ T31] audit: type=1400 audit(1336.007:624): avc: denied { open } for pid=5936 comm="syz.0.953" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1337.497781][ T31] audit: type=1400 audit(1336.129:625): avc: denied { ioctl } for pid=5936 comm="syz.0.953" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1340.859529][ T31] audit: type=1400 audit(1339.347:626): avc: denied { validate_trans } for pid=5940 comm="syz.1.954" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1341.794842][ T31] audit: type=1400 audit(1339.974:627): avc: denied { audit_read } for pid=5944 comm="syz.1.956" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1342.196434][ T31] audit: type=1326 audit(1340.591:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.1.958" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1342.225906][ T31] audit: type=1326 audit(1340.628:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.1.958" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1342.293211][ T31] audit: type=1326 audit(1340.684:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.1.958" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1342.300129][ T31] audit: type=1326 audit(1340.694:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.1.958" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1342.318543][ T31] audit: type=1326 audit(1340.703:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.1.958" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1342.361326][ T31] audit: type=1326 audit(1340.741:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.1.958" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1342.374201][ T31] audit: type=1326 audit(1340.759:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.1.958" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1342.397648][ T31] audit: type=1326 audit(1340.778:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.1.958" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1342.429207][ T31] audit: type=1326 audit(1340.787:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.1.958" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1342.431098][ T31] audit: type=1326 audit(1340.806:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.1.958" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1342.724242][ T5949] xt_hashlimit: size too large, truncated to 1048576 [ 1365.801131][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1365.801327][ T31] audit: type=1400 audit(1362.676:641): avc: denied { ioctl } for pid=5962 comm="syz.1.963" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17379 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1365.871647][ T31] audit: type=1326 audit(1362.741:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.1.963" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1365.895315][ T31] audit: type=1326 audit(1362.741:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.1.963" exe="/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1365.906464][ T31] audit: type=1326 audit(1362.779:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.1.963" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1365.919712][ T31] audit: type=1326 audit(1362.788:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.1.963" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1365.930129][ T31] audit: type=1326 audit(1362.797:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.1.963" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1365.946526][ T31] audit: type=1326 audit(1362.797:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.1.963" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1365.948125][ T31] audit: type=1326 audit(1362.807:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.1.963" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1365.962401][ T31] audit: type=1326 audit(1362.825:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.1.963" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1365.990820][ T31] audit: type=1326 audit(1362.844:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.1.963" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1374.625904][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 1374.626027][ T31] audit: type=1400 audit(1370.935:681): avc: denied { mount } for pid=5966 comm="syz.1.964" name="/" dev="ramfs" ino=16303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1374.967699][ T31] audit: type=1326 audit(1371.225:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5968 comm="syz.1.965" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1374.973698][ T31] audit: type=1326 audit(1371.253:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5968 comm="syz.1.965" exe="/syz-executor" sig=0 arch=c00000b7 syscall=440 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1374.991028][ T31] audit: type=1326 audit(1371.263:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5968 comm="syz.1.965" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1375.795829][ T31] audit: type=1400 audit(1371.992:685): avc: denied { create } for pid=5970 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1390.936800][ T31] audit: type=1400 audit(1386.136:686): avc: denied { execute } for pid=5981 comm="syz-executor" name="syz-executor" dev="vda" ino=1735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1390.939046][ T31] audit: type=1400 audit(1386.182:687): avc: denied { execute_no_trans } for pid=5981 comm="syz-executor" path="/syz-executor" dev="vda" ino=1735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1392.960239][ T31] audit: type=1400 audit(1388.053:688): avc: denied { mounton } for pid=5984 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1394.371791][ T31] audit: type=1400 audit(1389.391:689): avc: denied { execute } for pid=5986 comm="syz.1.972" path="/468/blkio.bfq.io_serviced" dev="tmpfs" ino=2378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1400.767430][ T31] audit: type=1400 audit(1395.387:690): avc: denied { read write } for pid=5993 comm="syz.1.974" name="uinput" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1400.814850][ T31] audit: type=1400 audit(1395.424:691): avc: denied { open } for pid=5993 comm="syz.1.974" path="/dev/uinput" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1409.476911][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.479131][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.325900][ T31] audit: type=1400 audit(1405.255:692): avc: denied { mount } for pid=6013 comm="syz.1.979" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1411.382028][ T31] audit: type=1400 audit(1405.311:693): avc: denied { create } for pid=6013 comm="syz.1.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1420.147449][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.149996][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.300356][ T31] audit: type=1400 audit(1416.452:694): avc: denied { ioctl } for pid=6042 comm="syz.1.987" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1424.567533][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.589626][ T31] audit: type=1400 audit(1417.668:695): avc: denied { ioctl } for pid=6044 comm="syz.1.988" path="/dev/input/event0" dev="devtmpfs" ino=747 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1424.679844][ T6045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.683587][ T6045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.877984][ T1083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.250638][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.541857][ T1083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.114050][ T1083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.691606][ T1083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.334808][ T31] audit: type=1400 audit(1421.148:696): avc: denied { read } for pid=3127 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1432.893832][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.998864][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1433.093098][ T1083] bond0 (unregistering): Released all slaves [ 1434.195775][ T1083] hsr_slave_0: left promiscuous mode [ 1434.430621][ T1083] hsr_slave_1: left promiscuous mode [ 1434.857378][ T1083] veth1_macvtap: left promiscuous mode [ 1434.858886][ T1083] veth0_macvtap: left promiscuous mode [ 1434.860824][ T1083] veth1_vlan: left promiscuous mode [ 1434.878243][ T1083] veth0_vlan: left promiscuous mode [ 1439.510209][ T31] audit: type=1400 audit(1431.615:697): avc: denied { mounton } for pid=6062 comm="syz.1.992" path="/488/file0" dev="tmpfs" ino=2482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1439.669470][ T31] audit: type=1400 audit(1431.774:698): avc: denied { mount } for pid=6062 comm="syz.1.992" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1445.027027][ T31] audit: type=1400 audit(1436.778:699): avc: denied { search } for pid=3127 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1445.033347][ T31] audit: type=1400 audit(1436.787:700): avc: denied { read } for pid=3127 comm="dhcpcd" name="n18" dev="tmpfs" ino=2561 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1445.037664][ T31] audit: type=1400 audit(1436.797:701): avc: denied { open } for pid=3127 comm="dhcpcd" path="/run/udev/data/n18" dev="tmpfs" ino=2561 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1445.065729][ T31] audit: type=1400 audit(1436.816:702): avc: denied { getattr } for pid=3127 comm="dhcpcd" path="/run/udev/data/n18" dev="tmpfs" ino=2561 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1447.291302][ T5984] hsr_slave_0: entered promiscuous mode [ 1447.348725][ T5984] hsr_slave_1: entered promiscuous mode [ 1447.427813][ T31] audit: type=1400 audit(1439.023:703): avc: denied { read } for pid=6073 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=704 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1447.431814][ T31] audit: type=1400 audit(1439.032:704): avc: denied { open } for pid=6073 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=704 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1447.470522][ T31] audit: type=1400 audit(1439.032:705): avc: denied { getattr } for pid=6073 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=704 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1447.615631][ T31] audit: type=1400 audit(1439.201:706): avc: denied { write } for pid=6071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=703 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1447.616647][ T31] audit: type=1400 audit(1439.201:707): avc: denied { add_name } for pid=6071 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1447.617393][ T31] audit: type=1400 audit(1439.201:708): avc: denied { create } for pid=6071 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1449.563620][ T5984] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1449.720232][ T5984] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1449.794645][ T5984] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1449.868203][ T5984] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1452.239318][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1452.239569][ T31] audit: type=1400 audit(1443.513:713): avc: denied { unmount } for pid=3277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1452.637620][ T31] audit: type=1400 audit(1443.906:714): avc: denied { create } for pid=6086 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1452.663645][ T31] audit: type=1400 audit(1443.925:715): avc: denied { setopt } for pid=6086 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1455.163808][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1457.050036][ T31] audit: type=1400 audit(1447.956:716): avc: denied { sys_chroot } for pid=6102 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1457.114086][ T31] audit: type=1400 audit(1448.087:717): avc: denied { setgid } for pid=6102 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1457.157123][ T31] audit: type=1400 audit(1448.124:718): avc: denied { setuid } for pid=6102 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1457.359733][ T31] audit: type=1400 audit(1448.293:719): avc: denied { setrlimit } for pid=6102 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 1469.886293][ T31] audit: type=1400 audit(1460.032:720): avc: denied { create } for pid=6116 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1469.930748][ T31] audit: type=1400 audit(1460.079:721): avc: denied { write } for pid=6116 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1471.178977][ T31] audit: type=1326 audit(1461.229:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.1.999" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1471.185276][ T31] audit: type=1326 audit(1461.258:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.1.999" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1471.200716][ T31] audit: type=1326 audit(1461.267:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.1.999" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1471.210623][ T31] audit: type=1326 audit(1461.267:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.1.999" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1471.212514][ T31] audit: type=1326 audit(1461.276:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.1.999" exe="/syz-executor" sig=0 arch=c00000b7 syscall=5 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1471.230055][ T31] audit: type=1326 audit(1461.276:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.1.999" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1472.039441][ T31] audit: type=1326 audit(1462.043:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.1.1000" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1472.044384][ T31] audit: type=1326 audit(1462.053:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.1.1000" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1472.417877][ T6131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.420069][ T6131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.598434][ T6143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.618603][ T6143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.958311][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 1478.958512][ T31] audit: type=1326 audit(1468.498:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.1007" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1479.002549][ T31] audit: type=1326 audit(1468.526:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.1007" exe="/syz-executor" sig=0 arch=c00000b7 syscall=41 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1479.004239][ T31] audit: type=1326 audit(1468.563:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.1007" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1479.005581][ T31] audit: type=1326 audit(1468.563:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.1007" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1480.735044][ T31] audit: type=1400 audit(1470.181:744): avc: denied { relabelfrom } for pid=6174 comm="syz.1.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1480.744510][ T31] audit: type=1400 audit(1470.181:745): avc: denied { relabelto } for pid=6174 comm="syz.1.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1481.941439][ T5984] veth0_vlan: entered promiscuous mode [ 1482.322054][ T5984] veth1_vlan: entered promiscuous mode [ 1483.537904][ T5984] veth0_macvtap: entered promiscuous mode [ 1483.674075][ T5984] veth1_macvtap: entered promiscuous mode [ 1484.305869][ T5984] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.306691][ T5984] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.307119][ T5984] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.307676][ T5984] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.796092][ T31] audit: type=1400 audit(1473.951:746): avc: denied { mounton } for pid=5984 comm="syz-executor" path="/syzkaller.NDeInP/syz-tmp" dev="vda" ino=1747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 1484.820267][ T31] audit: type=1400 audit(1473.998:747): avc: denied { mount } for pid=5984 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1484.850749][ T31] audit: type=1400 audit(1474.035:748): avc: denied { mounton } for pid=5984 comm="syz-executor" path="/syzkaller.NDeInP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1487.378101][ T31] audit: type=1400 audit(1476.346:749): avc: denied { mount } for pid=5984 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1487.379285][ T31] audit: type=1400 audit(1476.364:750): avc: denied { mounton } for pid=5984 comm="syz-executor" path="/syzkaller.NDeInP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1487.380431][ T31] audit: type=1400 audit(1476.374:751): avc: denied { mounton } for pid=5984 comm="syz-executor" path="/syzkaller.NDeInP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1487.381598][ T31] audit: type=1400 audit(1476.392:752): avc: denied { unmount } for pid=5984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1487.859629][ T31] audit: type=1400 audit(1476.795:753): avc: denied { mounton } for pid=5984 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=1512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1487.860688][ T31] audit: type=1400 audit(1476.813:754): avc: denied { mount } for pid=5984 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1487.861592][ T31] audit: type=1400 audit(1476.823:755): avc: denied { mounton } for pid=5984 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1490.879494][ T31] audit: type=1400 audit(1479.676:756): avc: denied { audit_write } for pid=6190 comm="syz.2.970" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1490.928145][ T31] audit: type=1107 audit(1479.722:757): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1492.558184][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.569843][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.472632][ T6226] ip6gre2: entered allmulticast mode [ 1502.121525][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1502.131745][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1502.428521][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1502.435386][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1503.656957][ T31] audit: type=1400 audit(1491.621:758): avc: denied { read write } for pid=6242 comm="syz.1.1025" name="uhid" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1503.658751][ T31] audit: type=1400 audit(1491.621:759): avc: denied { open } for pid=6242 comm="syz.1.1025" path="/dev/uhid" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1503.722828][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1503.752690][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1503.788918][ T8] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1504.961005][ T31] audit: type=1326 audit(1492.668:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.1.1028" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1504.979510][ T31] audit: type=1326 audit(1492.734:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.1.1028" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1504.981217][ T31] audit: type=1326 audit(1492.743:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.1.1028" exe="/syz-executor" sig=0 arch=c00000b7 syscall=88 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1504.982687][ T31] audit: type=1326 audit(1492.743:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.1.1028" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1504.991537][ T31] audit: type=1326 audit(1492.743:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.1.1028" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1506.260188][ T31] audit: type=1400 audit(1494.062:765): avc: denied { bind } for pid=6254 comm="syz.2.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1514.443469][ T31] audit: type=1326 audit(1501.714:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.1.1040" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1514.505448][ T31] audit: type=1326 audit(1501.751:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.1.1040" exe="/syz-executor" sig=0 arch=c00000b7 syscall=137 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1514.507776][ T31] audit: type=1326 audit(1501.779:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.1.1040" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1514.534559][ T31] audit: type=1326 audit(1501.807:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.1.1040" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b4a2a8 code=0x7ffc0000 [ 1514.551822][ T31] audit: type=1326 audit(1501.816:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.2.1041" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4a2a8 code=0x7ffc0000 [ 1514.558052][ T31] audit: type=1326 audit(1501.826:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.2.1041" exe="/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb1b48844 code=0x7ffc0000 [ 1514.588563][ T31] audit: type=1326 audit(1501.835:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.2.1041" exe="/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb1b48844 code=0x7ffc0000 [ 1514.589659][ T31] audit: type=1326 audit(1501.845:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.2.1041" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4a2a8 code=0x7ffc0000 [ 1514.601229][ T31] audit: type=1326 audit(1501.854:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.2.1041" exe="/syz-executor" sig=0 arch=c00000b7 syscall=67 compat=0 ip=0xffffb1b4a2a8 code=0x7ffc0000 [ 1514.602075][ T31] audit: type=1326 audit(1501.854:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.2.1041" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4a2a8 code=0x7ffc0000 [ 1547.475103][ T6350] syzkaller0: entered promiscuous mode [ 1547.475926][ T6350] syzkaller0: entered allmulticast mode [ 1587.773849][ T6446] fuse: Bad value for 'group_id' [ 1587.774739][ T6446] fuse: Bad value for 'group_id' [ 1590.358593][ T6456] fuse: Bad value for 'group_id' [ 1590.359560][ T6456] fuse: Bad value for 'group_id' [ 1607.641714][ T6467] fuse: Bad value for 'group_id' [ 1607.642298][ T6467] fuse: Bad value for 'group_id' [ 1611.379749][ T6488] cgroup: fork rejected by pids controller in /syz1 [ 1613.062429][ T5980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.662604][ T6503] tap0: tun_chr_ioctl cmd 1074025698 [ 1614.245110][ T5980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.690209][ T5980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.326825][ T5980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.285212][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1621.285313][ T31] audit: type=1400 audit(1601.652:777): avc: denied { create } for pid=6529 comm="syz.2.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1621.323820][ T31] audit: type=1400 audit(1601.698:778): avc: denied { bind } for pid=6529 comm="syz.2.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1623.310618][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1623.509203][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1623.707573][ T5980] bond0 (unregistering): Released all slaves [ 1623.905496][ T6536] netlink: 'syz.2.1149': attribute type 3 has an invalid length. [ 1624.010291][ T5980] hsr_slave_0: left promiscuous mode [ 1624.064855][ T5980] hsr_slave_1: left promiscuous mode [ 1624.243041][ T5980] veth1_macvtap: left promiscuous mode [ 1624.243969][ T5980] veth0_macvtap: left promiscuous mode [ 1624.245063][ T5980] veth1_vlan: left promiscuous mode [ 1624.245988][ T5980] veth0_vlan: left promiscuous mode [ 1624.382269][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.386027][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.821953][ T6542] capability: warning: `syz.2.1151' uses deprecated v2 capabilities in a way that may be insecure [ 1635.242782][ T31] audit: type=1400 audit(1614.579:779): avc: denied { write } for pid=6551 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1637.680563][ T6566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1157'. [ 1648.416449][ T6499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1648.727741][ T6499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1656.026300][ T31] audit: type=1400 audit(1634.157:780): avc: denied { read write } for pid=6599 comm="syz.2.1161" name="rtc0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1656.027404][ T31] audit: type=1400 audit(1634.157:781): avc: denied { open } for pid=6599 comm="syz.2.1161" path="/dev/rtc0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1656.079446][ T31] audit: type=1400 audit(1634.204:782): avc: denied { ioctl } for pid=6599 comm="syz.2.1161" path="/dev/rtc0" dev="devtmpfs" ino=707 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1657.067874][ T31] audit: type=1400 audit(1635.130:783): avc: denied { ioctl } for pid=6607 comm="syz.2.1163" path="pid:[4026532665]" dev="nsfs" ino=4026532665 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1660.311076][ T6499] hsr_slave_0: entered promiscuous mode [ 1660.418129][ T6499] hsr_slave_1: entered promiscuous mode [ 1660.594567][ T6499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1660.595917][ T6499] Cannot create hsr debugfs directory [ 1663.977653][ T31] audit: type=1400 audit(1641.537:784): avc: denied { create } for pid=6613 comm="syz.2.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1674.649234][ T31] audit: type=1400 audit(1651.574:785): avc: denied { write } for pid=6629 comm="syz.2.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1675.100916][ T6499] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1675.158727][ T6499] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1675.271540][ T6499] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1675.378103][ T6499] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1676.150806][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1168'. [ 1679.863019][ T6499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1687.455860][ T31] audit: type=1400 audit(1663.528:786): avc: denied { write } for pid=6683 comm="syz.2.1179" name="fib_trie" dev="proc" ino=4026532716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1694.011182][ T31] audit: type=1400 audit(1669.683:787): avc: denied { getopt } for pid=6705 comm="syz.2.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1696.843092][ T6717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1184'. [ 1708.056593][ T6499] veth0_vlan: entered promiscuous mode [ 1708.201656][ T6499] veth1_vlan: entered promiscuous mode [ 1709.749252][ T6499] veth0_macvtap: entered promiscuous mode [ 1710.048684][ T6499] veth1_macvtap: entered promiscuous mode [ 1710.761629][ T6499] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.762750][ T6499] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.763561][ T6499] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.764324][ T6499] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.160714][ T31] audit: type=1400 audit(1696.847:788): avc: denied { read } for pid=6736 comm="syz.2.1187" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1727.533355][ T6749] binder: 6748:6749 BC_FREE_BUFFER u0000000000000000 no match [ 1727.645300][ T6750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.662356][ T6750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.564260][ T6771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1746.585559][ T6771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1763.104947][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1763.107032][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1767.762917][ T31] audit: type=1400 audit(1738.678:789): avc: denied { create } for pid=6809 comm="syz.2.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1767.779752][ T31] audit: type=1400 audit(1738.688:790): avc: denied { write } for pid=6809 comm="syz.2.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1775.223985][ T31] audit: type=1400 audit(1745.647:791): avc: denied { watch_reads } for pid=6823 comm="syz.1.1218" path="/12" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1775.266611][ T6824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.268827][ T6824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.433450][ T31] audit: type=1400 audit(1753.327:792): avc: denied { name_bind } for pid=6838 comm="syz.1.1225" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1785.537136][ T31] audit: type=1400 audit(1755.291:793): avc: denied { write } for pid=6848 comm="syz.2.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1789.154668][ T31] audit: type=1400 audit(1758.612:794): avc: denied { nlmsg_write } for pid=6858 comm="syz.1.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1789.441976][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.446767][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1790.086958][ T31] audit: type=1400 audit(1759.557:795): avc: denied { read write } for pid=5984 comm="syz-executor" name="loop2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1790.089439][ T31] audit: type=1400 audit(1759.557:796): avc: denied { open } for pid=5984 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1790.098594][ T31] audit: type=1400 audit(1759.566:797): avc: denied { ioctl } for pid=5984 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1790.169087][ T31] audit: type=1400 audit(1759.566:798): avc: denied { read } for pid=3082 comm="syslogd" name="log" dev="vda" ino=1726 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1790.170294][ T31] audit: type=1400 audit(1759.575:799): avc: denied { search } for pid=3082 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1790.171498][ T31] audit: type=1400 audit(1759.594:800): avc: denied { append } for pid=3082 comm="syslogd" name="messages" dev="tmpfs" ino=4 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1790.172818][ T31] audit: type=1400 audit(1759.594:801): avc: denied { open } for pid=3082 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=4 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1790.174263][ T31] audit: type=1400 audit(1759.622:802): avc: denied { getattr } for pid=3082 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=4 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1790.269556][ T31] audit: type=1400 audit(1759.725:803): avc: denied { create } for pid=6866 comm="syz.2.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1792.279283][ T6877] netlink: 'syz.1.1241': attribute type 63 has an invalid length. [ 1795.008815][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 1795.009037][ T31] audit: type=1400 audit(1764.121:822): avc: denied { mount } for pid=6889 comm="syz.1.1248" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1795.195864][ T31] audit: type=1400 audit(1764.327:823): avc: denied { setopt } for pid=6892 comm="syz.2.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1795.264143][ T31] audit: type=1400 audit(1764.383:824): avc: denied { map } for pid=6892 comm="syz.2.1249" path="socket:[20973]" dev="sockfs" ino=20973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1795.265911][ T31] audit: type=1400 audit(1764.383:825): avc: denied { read } for pid=6892 comm="syz.2.1249" path="socket:[20973]" dev="sockfs" ino=20973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1795.325017][ T31] audit: type=1400 audit(1764.458:826): avc: denied { bind } for pid=6892 comm="syz.2.1249" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1795.661162][ T31] audit: type=1400 audit(1764.739:827): avc: denied { read write } for pid=6894 comm="syz.1.1250" name="fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1795.668561][ T31] audit: type=1400 audit(1764.748:828): avc: denied { open } for pid=6894 comm="syz.1.1250" path="/dev/fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1796.248062][ T31] audit: type=1400 audit(1765.309:829): avc: denied { getopt } for pid=6898 comm="syz.1.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1796.792061][ T31] audit: type=1400 audit(1765.824:830): avc: denied { read } for pid=6900 comm="syz.1.1253" name="event0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1796.794209][ T31] audit: type=1400 audit(1765.824:831): avc: denied { open } for pid=6900 comm="syz.1.1253" path="/dev/input/event0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1803.164858][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1803.165650][ T31] audit: type=1400 audit(1771.782:838): avc: denied { module_request } for pid=6926 comm="syz.1.1265" kmod="net-pf-16-proto-16-family-nl80211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1803.746821][ T31] audit: type=1400 audit(1772.334:839): avc: denied { ioctl } for pid=6926 comm="syz.1.1265" path="socket:[21057]" dev="sockfs" ino=21057 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1803.924678][ T31] audit: type=1400 audit(1772.493:840): avc: denied { read } for pid=6926 comm="syz.1.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1804.425694][ T31] audit: type=1400 audit(1772.961:841): avc: denied { sys_module } for pid=6926 comm="syz.1.1265" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1804.967826][ T31] audit: type=1400 audit(1773.475:842): avc: denied { create } for pid=6933 comm="syz.2.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1804.975875][ T31] audit: type=1400 audit(1773.485:843): avc: denied { bind } for pid=6933 comm="syz.2.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1804.982799][ T31] audit: type=1400 audit(1773.485:844): avc: denied { accept } for pid=6933 comm="syz.2.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1805.549476][ T6937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6937 comm=syz.2.1266 [ 1805.550889][ T31] audit: type=1400 audit(1774.018:845): avc: denied { create } for pid=6935 comm="syz.1.1267" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1805.571587][ T31] audit: type=1400 audit(1774.037:846): avc: denied { ioctl } for pid=6935 comm="syz.1.1267" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21058 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1806.650333][ T31] audit: type=1400 audit(1775.037:847): avc: denied { setattr } for pid=6940 comm="syz.1.1269" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1809.486984][ T31] audit: type=1400 audit(1777.694:848): avc: denied { read write } for pid=6952 comm="syz.1.1272" name="raw-gadget" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1809.488765][ T31] audit: type=1400 audit(1777.694:849): avc: denied { open } for pid=6952 comm="syz.1.1272" path="/dev/raw-gadget" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1809.489591][ T31] audit: type=1400 audit(1777.694:850): avc: denied { ioctl } for pid=6952 comm="syz.1.1272" path="/dev/raw-gadget" dev="devtmpfs" ino=701 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1809.497074][ T6953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1809.499343][ T6953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1811.061597][ T31] audit: type=1400 audit(1779.172:851): avc: denied { create } for pid=6962 comm="syz.1.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1811.098115][ T31] audit: type=1400 audit(1779.209:852): avc: denied { connect } for pid=6962 comm="syz.1.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1811.498850][ T31] audit: type=1400 audit(1779.583:853): avc: denied { write } for pid=6967 comm="syz.1.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1811.935129][ T31] audit: type=1400 audit(1779.986:854): avc: denied { name_bind } for pid=6969 comm="syz.2.1278" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1811.940045][ T31] audit: type=1400 audit(1779.995:855): avc: denied { node_bind } for pid=6969 comm="syz.2.1278" saddr=2001:: src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1812.688370][ T31] audit: type=1400 audit(1780.687:856): avc: denied { ioctl } for pid=6974 comm="syz.2.1280" path="socket:[21127]" dev="sockfs" ino=21127 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1814.213892][ T31] audit: type=1400 audit(1782.118:857): avc: denied { setopt } for pid=6978 comm="syz.2.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1814.954315][ T31] audit: type=1400 audit(1782.811:858): avc: denied { create } for pid=6986 comm="syz.1.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1815.045590][ T31] audit: type=1400 audit(1782.895:859): avc: denied { write } for pid=6986 comm="syz.1.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1817.624826][ T7004] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1289'. [ 1820.497470][ T31] audit: type=1400 audit(1787.993:860): avc: denied { read } for pid=7009 comm="syz.2.1291" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1820.502103][ T31] audit: type=1400 audit(1788.002:861): avc: denied { open } for pid=7009 comm="syz.2.1291" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1820.521340][ T31] audit: type=1400 audit(1788.011:862): avc: denied { ioctl } for pid=7009 comm="syz.2.1291" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1820.812112][ T7012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1820.814016][ T7012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.315981][ T31] audit: type=1400 audit(1790.631:863): avc: denied { read } for pid=7016 comm="syz.2.1294" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1827.207581][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1827.209522][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1827.709068][ T31] audit: type=1400 audit(1794.746:864): avc: denied { ioctl } for pid=7031 comm="syz.1.1301" path="socket:[21205]" dev="sockfs" ino=21205 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1827.738840][ T7032] netlink: 'syz.1.1301': attribute type 4 has an invalid length. [ 1828.969167][ T31] audit: type=1400 audit(1795.925:865): avc: denied { name_bind } for pid=7036 comm="syz.1.1303" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1831.457373][ T31] audit: type=1400 audit(1798.245:866): avc: denied { write } for pid=7059 comm="syz.2.1311" name="tcp" dev="proc" ino=4026532750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1832.163603][ T31] audit: type=1400 audit(1798.909:867): avc: denied { read append } for pid=7062 comm="syz.2.1312" name="rtc0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1832.165672][ T31] audit: type=1400 audit(1798.918:868): avc: denied { open } for pid=7062 comm="syz.2.1312" path="/dev/rtc0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1832.197707][ T31] audit: type=1400 audit(1798.937:869): avc: denied { ioctl } for pid=7062 comm="syz.2.1312" path="/dev/rtc0" dev="devtmpfs" ino=707 ioctlcmd=0x7006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1833.790863][ T7074] veth1_macvtap: left promiscuous mode [ 1834.274308][ T7078] xt_SECMARK: invalid security context 'system_u:object_r:lib_t:s0' [ 1834.316713][ T31] audit: type=1400 audit(1800.929:870): avc: denied { create } for pid=7077 comm="syz.1.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1834.331763][ T31] audit: type=1400 audit(1800.939:871): avc: denied { write } for pid=7077 comm="syz.1.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1836.266464][ T31] audit: type=1400 audit(1802.744:872): avc: denied { execmem } for pid=7092 comm="syz.1.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1838.236430][ T7097] team_slave_0: entered allmulticast mode [ 1839.689149][ T7093] mmap: syz.1.1325 (7093) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1839.698313][ T31] audit: type=1400 audit(1805.952:873): avc: denied { connect } for pid=7092 comm="syz.1.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1842.176466][ T31] audit: type=1400 audit(1808.272:874): avc: denied { bind } for pid=7109 comm="syz.1.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1842.184249][ T31] audit: type=1400 audit(1808.282:875): avc: denied { listen } for pid=7109 comm="syz.1.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1842.260827][ T31] audit: type=1400 audit(1808.356:876): avc: denied { write } for pid=7109 comm="syz.1.1332" path="socket:[21334]" dev="sockfs" ino=21334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1843.233551][ T31] audit: type=1400 audit(1809.264:877): avc: denied { write } for pid=7113 comm="syz.1.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1843.493160][ T7117] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1335'. [ 1845.292730][ T31] audit: type=1400 audit(1811.181:878): avc: denied { mount } for pid=7125 comm="syz.1.1339" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1852.810055][ T31] audit: type=1400 audit(1818.225:879): avc: denied { setopt } for pid=7154 comm="syz.2.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1857.852087][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1362'. [ 1860.217403][ T31] audit: type=1400 audit(1825.156:880): avc: denied { nlmsg_write } for pid=7195 comm="syz.1.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1860.612107][ T31] audit: type=1400 audit(1825.502:881): avc: denied { read } for pid=7193 comm="syz.2.1365" path="socket:[21843]" dev="sockfs" ino=21843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1861.639940][ T31] audit: type=1400 audit(1826.484:882): avc: denied { read write } for pid=7204 comm="syz.1.1370" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1861.643690][ T31] audit: type=1400 audit(1826.484:883): avc: denied { open } for pid=7204 comm="syz.1.1370" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1862.279596][ T31] audit: type=1400 audit(1827.074:884): avc: denied { ioctl } for pid=7204 comm="syz.1.1370" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1862.284837][ T7206] binder: 7204:7206 ioctl 400c620e 0 returned -14 [ 1866.043053][ T31] audit: type=1400 audit(1830.610:885): avc: denied { write } for pid=7223 comm="syz.1.1378" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1866.608229][ T7226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1379'. [ 1878.622906][ T31] audit: type=1400 audit(1841.853:886): avc: denied { write } for pid=7230 comm="syz.1.1381" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1886.042485][ T7247] xt_NFQUEUE: number of total queues is 0 [ 1886.865715][ T7249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.878446][ T7249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.399553][ T7258] tap0: tun_chr_ioctl cmd 1074025677 [ 1889.406643][ T7258] tap0: linktype set to 270 [ 1890.267410][ T7259] syzkaller0: entered promiscuous mode [ 1890.270763][ T7259] syzkaller0: entered allmulticast mode [ 1890.298710][ T31] audit: type=1400 audit(1853.284:887): avc: denied { relabelfrom } for pid=7257 comm="syz.1.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1890.300294][ T31] audit: type=1400 audit(1853.284:888): avc: denied { relabelto } for pid=7257 comm="syz.1.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1916.408214][ T31] audit: type=1400 audit(1877.716:889): avc: denied { create } for pid=7273 comm="syz.1.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1916.441041][ T31] audit: type=1400 audit(1877.744:890): avc: denied { create } for pid=7274 comm="syz.2.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1916.458063][ T31] audit: type=1400 audit(1877.763:891): avc: denied { connect } for pid=7273 comm="syz.1.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1916.467057][ T31] audit: type=1400 audit(1877.763:892): avc: denied { setopt } for pid=7273 comm="syz.1.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1916.489004][ T31] audit: type=1400 audit(1877.791:893): avc: denied { bind } for pid=7273 comm="syz.1.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1916.506983][ T31] audit: type=1400 audit(1877.800:894): avc: denied { write } for pid=7273 comm="syz.1.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1916.574726][ T31] audit: type=1400 audit(1877.857:895): avc: denied { create } for pid=7274 comm="syz.2.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1916.596503][ T31] audit: type=1400 audit(1877.894:896): avc: denied { setopt } for pid=7274 comm="syz.2.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1916.622981][ T31] audit: type=1400 audit(1877.903:897): avc: denied { bind } for pid=7274 comm="syz.2.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1916.659953][ T31] audit: type=1400 audit(1877.941:898): avc: denied { name_bind } for pid=7274 comm="syz.2.1396" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1918.556056][ T7283] tap0: tun_chr_ioctl cmd 1074025677 [ 1918.558084][ T7283] tap0: linktype set to 1 [ 1919.718264][ T7286] raw_sendmsg: syz.1.1400 forgot to set AF_INET. Fix it! [ 1924.171603][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1924.178834][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1938.731837][ T7415] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1418'. [ 1955.654772][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 1955.654937][ T31] audit: type=1400 audit(1914.421:906): avc: denied { create } for pid=7443 comm="syz.1.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1957.274614][ T7450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1432'. [ 1970.907422][ T7473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1441'. [ 1973.708414][ T31] audit: type=1400 audit(1931.315:907): avc: denied { mounton } for pid=7482 comm="syz.1.1445" path="/proc/286/task" dev="proc" ino=22902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1974.122267][ T31] audit: type=1400 audit(1931.623:908): avc: denied { write } for pid=7485 comm="syz.1.1445" name="task" dev="proc" ino=22902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1974.123908][ T31] audit: type=1400 audit(1931.680:909): avc: denied { add_name } for pid=7485 comm="syz.1.1445" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1974.125134][ T31] audit: type=1400 audit(1931.680:910): avc: denied { create } for pid=7485 comm="syz.1.1445" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 1974.126443][ T31] audit: type=1400 audit(1931.680:911): avc: denied { associate } for pid=7485 comm="syz.1.1445" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1976.490943][ T7501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1976.493548][ T7501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1977.320454][ T7507] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1993.731286][ T7542] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1467'. [ 1994.154722][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'. [ 1994.949266][ T31] audit: type=1326 audit(1951.183:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.1470" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 1994.954482][ T31] audit: type=1326 audit(1951.183:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.1470" exe="/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 1994.970977][ T31] audit: type=1326 audit(1951.201:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.1470" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 1994.979783][ T31] audit: type=1326 audit(1951.201:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.1470" exe="/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 1994.981570][ T31] audit: type=1326 audit(1951.211:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.1470" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 1994.990152][ T31] audit: type=1326 audit(1951.211:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.1470" exe="/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 1994.991866][ T31] audit: type=1326 audit(1951.211:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.1470" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 1994.993197][ T31] audit: type=1326 audit(1951.211:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.1470" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 1995.028561][ T31] audit: type=1326 audit(1951.248:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.1470" exe="/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 1995.030130][ T31] audit: type=1326 audit(1951.248:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.1470" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2011.412425][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 2011.412655][ T31] audit: type=1400 audit(1966.579:938): avc: denied { module_load } for pid=7582 comm="syz.1.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2022.289126][ T31] audit: type=1400 audit(1976.747:939): avc: denied { create } for pid=7598 comm="syz.1.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2022.403768][ T31] audit: type=1400 audit(1976.822:940): avc: denied { write } for pid=7598 comm="syz.1.1487" path="socket:[23136]" dev="sockfs" ino=23136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2022.405360][ T31] audit: type=1400 audit(1976.859:941): avc: denied { nlmsg_read } for pid=7598 comm="syz.1.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2023.253107][ T31] audit: type=1400 audit(1977.654:942): avc: denied { write } for pid=7602 comm="syz.2.1489" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2026.425448][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1494'. [ 2026.427800][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1494'. [ 2037.882966][ T7628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.887060][ T7628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2039.255650][ T7635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1502'. [ 2039.256843][ T7635] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1502'. [ 2044.772383][ T7664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=7664 comm=syz.2.1513 [ 2045.709098][ T31] audit: type=1400 audit(1998.664:943): avc: denied { write } for pid=7668 comm="syz.1.1516" name="uinput" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2045.751868][ T31] audit: type=1400 audit(1998.682:944): avc: denied { ioctl } for pid=7668 comm="syz.1.1516" path="/dev/uinput" dev="devtmpfs" ino=706 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2046.440277][ T31] audit: type=1400 audit(1999.337:945): avc: denied { set_context_mgr } for pid=7673 comm="syz.1.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2046.547523][ T31] audit: type=1400 audit(1999.449:946): avc: denied { map } for pid=7673 comm="syz.1.1518" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2046.612434][ T7675] binder: 7673:7675 tried to acquire reference to desc 0, got 1 instead [ 2046.641134][ T31] audit: type=1400 audit(1999.524:947): avc: denied { call } for pid=7673 comm="syz.1.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2046.662272][ T7675] binder: 7673:7675 got transaction with unaligned buffers size, 4095 [ 2046.675483][ T7675] binder: 7673:7675 transaction call to 7673:0 failed 5/29201/-22, size 0-24 line 3389 [ 2046.709172][ T6729] binder: undelivered TRANSACTION_ERROR: 29201 [ 2046.883883][ T31] audit: type=1400 audit(1999.711:948): avc: denied { mount } for pid=7671 comm="syz.2.1517" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2047.539234][ T31] audit: type=1400 audit(2000.375:949): avc: denied { name_bind } for pid=7677 comm="syz.1.1519" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2048.892715][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.932101][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2049.316272][ T7688] xt_addrtype: ipv6 does not support BROADCAST matching [ 2049.603253][ T7690] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1524'. [ 2049.603915][ T7690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1524'. [ 2055.453045][ T7715] netlink: 'syz.1.1535': attribute type 46 has an invalid length. [ 2055.667060][ T31] audit: type=1400 audit(2007.971:950): avc: denied { read write } for pid=7717 comm="syz.1.1537" name="uhid" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2055.677636][ T31] audit: type=1400 audit(2007.989:951): avc: denied { open } for pid=7717 comm="syz.1.1537" path="/dev/uhid" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2055.692313][ T6537] hid (null): global environment stack underflow [ 2055.706796][ T6537] hid-generic 0008:0001:0004.0005: global environment stack underflow [ 2055.707919][ T6537] hid-generic 0008:0001:0004.0005: item 0 2 1 11 parsing failed [ 2055.736919][ T6537] hid-generic 0008:0001:0004.0005: probe with driver hid-generic failed with error -22 [ 2056.068754][ T31] audit: type=1400 audit(2008.345:952): avc: denied { block_suspend } for pid=7716 comm="syz.2.1536" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2056.568209][ T31] audit: type=1400 audit(2008.813:953): avc: denied { mounton } for pid=7721 comm="syz.1.1538" path="/166/file0" dev="tmpfs" ino=852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2056.848619][ T31] audit: type=1400 audit(2009.075:954): avc: denied { unmount } for pid=6499 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2058.458759][ T7736] syzkaller0: entered promiscuous mode [ 2058.464859][ T7736] syzkaller0: entered allmulticast mode [ 2060.327075][ T7746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2060.329765][ T7746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2061.290788][ T7754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2061.298917][ T7754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2067.761088][ T7769] sit0: entered promiscuous mode [ 2068.031878][ T7769] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1558'. [ 2072.580259][ T7778] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 2072.580259][ T7778] The task syz.2.1561 (7778) triggered the difference, watch for misbehavior. [ 2074.386641][ T31] audit: type=1326 audit(2025.481:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.1563" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2074.395469][ T31] audit: type=1326 audit(2025.500:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.1563" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2074.400747][ T31] audit: type=1326 audit(2025.500:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.1563" exe="/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2074.503267][ T31] audit: type=1326 audit(2025.594:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.1563" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2074.538599][ T31] audit: type=1326 audit(2025.622:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.1.1563" exe="/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff87374398 code=0x7ffc0000 [ 2074.540736][ T31] audit: type=1326 audit(2025.594:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.1563" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2074.542455][ T31] audit: type=1326 audit(2025.622:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.1563" exe="/syz-executor" sig=0 arch=c00000b7 syscall=95 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2075.453538][ T7787] binder: 7786:7787 tried to acquire reference to desc 0, got 1 instead [ 2075.473243][ T31] audit: type=1400 audit(2026.501:962): avc: denied { transfer } for pid=7786 comm="syz.2.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2075.483309][ T7787] binder: tried to use weak ref as strong ref [ 2075.485876][ T7787] binder: 7786:7787 got transaction with invalid handle, 0 [ 2075.487065][ T7787] binder: 7787:7786 translate handle failed [ 2075.497376][ T7787] binder: 7786:7787 transaction call to 7786:0 failed 10/29201/-22, size 80-24 line 3496 [ 2075.516562][ T8] binder: undelivered TRANSACTION_ERROR: 29201 [ 2076.152585][ T31] audit: type=1326 audit(2027.137:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.1.1563" exe="/syz-executor" sig=0 arch=c00000b7 syscall=93 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2076.228727][ T31] audit: type=1326 audit(2027.203:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.1563" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff88051804 code=0x7ffc0000 [ 2076.753028][ T7795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2076.765752][ T7795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2079.675056][ T7814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2079.676839][ T7814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2080.516450][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 2080.516691][ T31] audit: type=1326 audit(2031.197:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1579" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4a2a8 code=0x7ffc0000 [ 2080.518782][ T31] audit: type=1326 audit(2031.197:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1579" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4a2a8 code=0x7ffc0000 [ 2080.558465][ T31] audit: type=1326 audit(2031.253:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1579" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb1b4c84c code=0x7ffc0000 [ 2080.592662][ T31] audit: type=1326 audit(2031.272:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1579" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4a2a8 code=0x7ffc0000 [ 2080.593630][ T31] audit: type=1326 audit(2031.272:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1579" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4a2a8 code=0x7ffc0000 [ 2080.607555][ T31] audit: type=1326 audit(2031.309:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1579" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb1b4a2a8 code=0x7ffc0000 [ 2080.622412][ T31] audit: type=1326 audit(2031.309:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1579" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4a2a8 code=0x7ffc0000 [ 2080.638128][ T31] audit: type=1326 audit(2031.337:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1579" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb1b4a2a8 code=0x7ffc0000 [ 2081.274406][ T31] audit: type=1400 audit(2031.926:978): avc: denied { read } for pid=7817 comm="syz.2.1579" name="usbmon0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2081.276145][ T31] audit: type=1400 audit(2031.926:979): avc: denied { open } for pid=7817 comm="syz.2.1579" path="/dev/usbmon0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2081.910868][ T7827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2081.920202][ T7827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2082.721416][ T7831] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2084.253175][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2084.305996][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2086.767661][ T7855] tun0: tun_chr_ioctl cmd 1074025698 [ 2092.536163][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 2092.940513][ T31] audit: type=1400 audit(2042.459:997): avc: denied { compute_member } for pid=7867 comm="syz.1.1601" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2101.206185][ T31] audit: type=1400 audit(2050.569:998): avc: denied { search } for pid=7874 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2101.483283][ T31] audit: type=1400 audit(2050.831:999): avc: denied { read } for pid=7875 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=704 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2101.485205][ T31] audit: type=1400 audit(2050.831:1000): avc: denied { open } for pid=7875 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=704 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2101.662047][ T31] audit: type=1400 audit(2050.831:1001): avc: denied { getattr } for pid=7875 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=704 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2102.378822][ T31] audit: type=1400 audit(2051.663:1002): avc: denied { write } for pid=7874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=703 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2102.389244][ T31] audit: type=1400 audit(2051.673:1003): avc: denied { add_name } for pid=7874 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2102.391161][ T31] audit: type=1400 audit(2051.673:1004): avc: denied { create } for pid=7874 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2102.425696][ T31] audit: type=1400 audit(2051.719:1005): avc: denied { write open } for pid=7874 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.ra" dev="tmpfs" ino=2841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2102.459788][ T31] audit: type=1400 audit(2051.747:1006): avc: denied { append } for pid=7874 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" dev="tmpfs" ino=2841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2102.503043][ T31] audit: type=1400 audit(2051.785:1007): avc: denied { getattr } for pid=7874 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=3 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2105.924378][ T7894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2105.940735][ T7894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2119.707176][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2119.709496][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2123.956649][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 2123.956896][ T31] audit: type=1400 audit(2071.859:1011): avc: denied { setopt } for pid=7927 comm="syz.1.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2143.281433][ T31] audit: type=1400 audit(2089.921:1012): avc: denied { nlmsg_tty_audit } for pid=7969 comm="syz.1.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 2144.441357][ T31] audit: type=1400 audit(2091.016:1013): avc: denied { mounton } for pid=7977 comm="syz.1.1635" path="/215/file0" dev="tmpfs" ino=1101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2144.520114][ T31] audit: type=1400 audit(2091.081:1014): avc: denied { mount } for pid=7977 comm="syz.1.1635" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2147.243444][ T31] audit: type=1400 audit(2093.635:1015): avc: denied { unmount } for pid=6499 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2147.325800][ T31] audit: type=1400 audit(2093.719:1016): avc: denied { watch_mount } for pid=7995 comm="syz.2.1643" path="/364" dev="tmpfs" ino=1848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2150.556564][ T8011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2153.834004][ T8034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2153.845394][ T8034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2154.935057][ T8039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2154.938610][ T8039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.063116][ T8043] syzkaller0: entered promiscuous mode [ 2156.063680][ T8043] syzkaller0: entered allmulticast mode [ 2180.616865][ T8066] IPv6: NLM_F_CREATE should be specified when creating new route [ 2180.635351][ T8066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2180.638121][ T8066] IPv6: NLM_F_CREATE should be set when creating new route [ 2180.640032][ T8066] IPv6: NLM_F_CREATE should be set when creating new route [ 2186.573785][ T31] audit: type=1400 audit(2130.424:1017): avc: denied { create } for pid=8077 comm="syz.2.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2186.638096][ T31] audit: type=1400 audit(2130.489:1018): avc: denied { write } for pid=8077 comm="syz.2.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2189.026030][ T31] audit: type=1326 audit(2132.716:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.1.1678" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2189.030747][ T31] audit: type=1326 audit(2132.725:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.1.1678" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2189.039278][ T31] audit: type=1326 audit(2132.734:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.1.1678" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2189.050435][ T31] audit: type=1326 audit(2132.744:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.1.1678" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2189.055125][ T31] audit: type=1326 audit(2132.744:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.1.1678" exe="/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2189.065920][ T31] audit: type=1326 audit(2132.753:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.1.1678" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2189.075206][ T31] audit: type=1326 audit(2132.762:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.1.1678" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2189.081429][ T31] audit: type=1326 audit(2132.762:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.1.1678" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2193.596512][ T8118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1693'. [ 2195.442963][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 2195.443070][ T31] audit: type=1400 audit(2138.721:1055): avc: denied { create } for pid=8125 comm="syz.2.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2200.285024][ T31] audit: type=1400 audit(2143.258:1056): avc: denied { create } for pid=8146 comm="syz.1.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 2202.565108][ T31] audit: type=1400 audit(2145.381:1057): avc: denied { bind } for pid=8156 comm="syz.2.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2202.608087][ T31] audit: type=1400 audit(2145.428:1058): avc: denied { setopt } for pid=8156 comm="syz.2.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2203.196647][ T31] audit: type=1400 audit(2145.961:1059): avc: denied { create } for pid=8159 comm="syz.1.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2204.744012][ T8170] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 2204.943526][ T31] audit: type=1326 audit(2147.607:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.1.1714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2204.956129][ T31] audit: type=1326 audit(2147.626:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.1.1714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2204.982200][ T31] audit: type=1326 audit(2147.645:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.1.1714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2205.071342][ T31] audit: type=1326 audit(2147.682:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.1.1714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2205.072491][ T31] audit: type=1326 audit(2147.682:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.1.1714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2205.073229][ T31] audit: type=1326 audit(2147.691:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.1.1714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2205.073986][ T31] audit: type=1326 audit(2147.691:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.1.1714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x7ffc0000 [ 2207.380532][ T8188] lo speed is unknown, defaulting to 1000 [ 2207.427181][ T8188] lo speed is unknown, defaulting to 1000 [ 2207.452684][ T8188] lo speed is unknown, defaulting to 1000 [ 2208.915934][ T4424] lo speed is unknown, defaulting to 1000 [ 2208.928089][ T8188] infiniband syz0: set active [ 2208.932068][ T8188] infiniband syz0: added lo [ 2209.546596][ T8188] RDS/IB: syz0: added [ 2209.599917][ T8188] smc: adding ib device syz0 with port count 1 [ 2209.658157][ T8188] smc: ib device syz0 port 1 has pnetid [ 2209.686284][ T4424] lo speed is unknown, defaulting to 1000 [ 2209.865114][ T8188] lo speed is unknown, defaulting to 1000 [ 2212.493751][ T8188] lo speed is unknown, defaulting to 1000 [ 2219.732229][ T8233] syzkaller0: tun_chr_ioctl cmd 35108 [ 2220.869600][ T8243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2220.886877][ T8243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2222.050756][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 2222.050970][ T31] audit: type=1400 audit(2163.612:1084): avc: denied { create } for pid=8249 comm="syz.2.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2224.213962][ T8255] process 'syz.2.1748' launched './file1' with NULL argv: empty string added [ 2224.235430][ T31] audit: type=1400 audit(2165.651:1085): avc: denied { execute_no_trans } for pid=8254 comm="syz.2.1748" path="/415/file1" dev="tmpfs" ino=2112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2225.935789][ T8260] ALSA: seq fatal error: cannot create timer (-19) [ 2226.582526][ T8263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2226.641120][ T8263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2230.401968][ T8281] binder: 8280:8281 ioctl 40046205 0 returned -22 [ 2230.420736][ T8281] binder: 8280:8281 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 2230.422259][ T8281] binder: 8281 RLIMIT_NICE not set [ 2234.578569][ T8305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2234.582718][ T8305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2235.129222][ T31] audit: type=1400 audit(2175.847:1086): avc: denied { read } for pid=8307 comm="syz.1.1771" name="fb0" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2235.144656][ T31] audit: type=1400 audit(2175.856:1087): avc: denied { open } for pid=8307 comm="syz.1.1771" path="/dev/fb0" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2245.013458][ T8329] loop2: detected capacity change from 0 to 7 [ 2251.913360][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1784'. [ 2251.914939][ T8350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1784'. [ 2261.602871][ T31] audit: type=1400 audit(2200.598:1088): avc: denied { ioctl } for pid=8379 comm="syz.2.1794" path="socket:[24560]" dev="sockfs" ino=24560 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2261.605825][ T8380] : renamed from bond0 (while UP) [ 2263.410470][ T31] audit: type=1400 audit(2202.291:1089): avc: denied { create } for pid=8384 comm="syz.2.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2263.428145][ T31] audit: type=1400 audit(2202.309:1090): avc: denied { connect } for pid=8384 comm="syz.2.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2263.487999][ T31] audit: type=1400 audit(2202.375:1091): avc: denied { setopt } for pid=8384 comm="syz.2.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2265.730184][ T31] audit: type=1400 audit(2204.461:1092): avc: denied { append } for pid=8390 comm="syz.2.1800" name="fb0" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2267.850244][ T31] audit: type=1400 audit(2206.453:1093): avc: denied { bind } for pid=8404 comm="syz.1.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2268.185370][ T8407] vlan2: entered promiscuous mode [ 2268.186114][ T8407] erspan0: entered promiscuous mode [ 2272.386987][ T31] audit: type=1400 audit(2210.691:1094): avc: denied { write } for pid=8426 comm="syz.1.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2274.103496][ T8437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2274.105278][ T8437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2274.881811][ T31] audit: type=1400 audit(2213.029:1095): avc: denied { name_connect } for pid=8440 comm="syz.2.1819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 2280.435027][ T31] audit: type=1400 audit(2218.221:1096): avc: denied { read } for pid=8457 comm="syz.1.1826" name="card0" dev="devtmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2280.438664][ T31] audit: type=1400 audit(2218.221:1097): avc: denied { open } for pid=8457 comm="syz.1.1826" path="/dev/dri/card0" dev="devtmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2280.488261][ T31] audit: type=1400 audit(2218.277:1098): avc: denied { ioctl } for pid=8457 comm="syz.1.1826" path="/dev/dri/card0" dev="devtmpfs" ino=617 ioctlcmd=0x6407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2280.531157][ T31] audit: type=1400 audit(2218.314:1099): avc: denied { create } for pid=8457 comm="syz.1.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2287.398327][ T31] audit: type=1400 audit(2224.731:1100): avc: denied { append } for pid=8474 comm="syz.2.1832" name="system" dev="devtmpfs" ino=674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2306.061347][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2306.067587][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2316.729847][ T31] audit: type=1400 audit(2252.176:1101): avc: denied { ioctl } for pid=8578 comm="syz.1.1872" path="/dev/fb0" dev="devtmpfs" ino=619 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2317.508215][ T31] audit: type=1400 audit(2252.905:1102): avc: denied { listen } for pid=8582 comm="syz.1.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2318.973117][ T8593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1878'. [ 2318.976538][ T8593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1878'. [ 2318.977489][ T8593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1878'. [ 2319.045581][ T8593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1878'. [ 2322.103527][ T31] audit: type=1400 audit(2257.133:1103): avc: denied { connect } for pid=8610 comm="syz.1.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2322.244514][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1887'. [ 2327.443344][ T8639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2327.461736][ T8639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2329.022577][ T8646] input: syz1 as /devices/virtual/input/input4 [ 2334.273000][ T8664] input: syz0 as /devices/virtual/input/input5 [ 2335.373251][ T8667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2335.377081][ T8667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2341.617095][ T31] audit: type=1400 audit(2275.458:1104): avc: denied { read } for pid=8688 comm="syz.1.1919" name="nullb0" dev="devtmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2341.619877][ T31] audit: type=1400 audit(2275.458:1105): avc: denied { open } for pid=8688 comm="syz.1.1919" path="/dev/nullb0" dev="devtmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2341.659178][ T31] audit: type=1400 audit(2275.495:1106): avc: denied { map } for pid=8688 comm="syz.1.1919" path="/dev/nullb0" dev="devtmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2341.660914][ T31] audit: type=1400 audit(2275.495:1107): avc: denied { execute } for pid=8688 comm="syz.1.1919" path="/dev/nullb0" dev="devtmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2346.925587][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1923'. [ 2346.926392][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1923'. [ 2347.014965][ T8703] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2347.057136][ T8703] syz_tun: entered promiscuous mode [ 2352.493256][ T31] audit: type=1400 audit(2285.626:1108): avc: denied { read } for pid=8715 comm="syz.1.1928" name="snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2352.518125][ T31] audit: type=1400 audit(2285.644:1109): avc: denied { open } for pid=8715 comm="syz.1.1928" path="/dev/snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2352.682568][ T31] audit: type=1400 audit(2285.803:1110): avc: denied { ioctl } for pid=8715 comm="syz.1.1928" path="/dev/snapshot" dev="devtmpfs" ino=85 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2353.228793][ T31] audit: type=1400 audit(2286.318:1111): avc: denied { getopt } for pid=8717 comm="syz.1.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2359.896614][ T8738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2359.915432][ T8738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2365.314416][ T8758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2365.320204][ T8758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2369.098208][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1942'. [ 2369.552220][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 2371.912289][ T8787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2371.914485][ T8787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2372.693012][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1951'. [ 2372.694081][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1951'. [ 2373.787966][ T31] audit: type=1400 audit(2305.550:1112): avc: denied { bind } for pid=8797 comm="syz.2.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2373.850478][ T8799] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2375.235191][ T31] audit: type=1400 audit(2306.897:1113): avc: denied { create } for pid=8802 comm="syz.1.1956" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2375.256129][ T31] audit: type=1400 audit(2306.925:1114): avc: denied { create } for pid=8802 comm="syz.1.1956" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2375.512155][ T31] audit: type=1400 audit(2307.158:1115): avc: denied { unlink } for pid=6499 comm="syz-executor" name="file0" dev="tmpfs" ino=1973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2375.513942][ T31] audit: type=1400 audit(2307.168:1116): avc: denied { unlink } for pid=6499 comm="syz-executor" name="file7" dev="tmpfs" ino=1974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2375.699242][ T8808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2375.741060][ T8808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2376.860222][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1961'. [ 2390.709763][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2390.725776][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2404.983508][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1981'. [ 2404.986427][ T8874] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1981'. [ 2405.035465][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1981'. [ 2405.036118][ T8874] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1981'. [ 2447.573389][ T8913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2447.575590][ T8913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2448.915548][ T8919] syzkaller0: entered promiscuous mode [ 2472.941064][ T31] audit: type=1400 audit(2398.294:1117): avc: denied { create } for pid=8934 comm="syz.1.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2473.011538][ T31] audit: type=1400 audit(2398.332:1118): avc: denied { setopt } for pid=8934 comm="syz.1.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2474.252596][ T8942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2474.255533][ T8942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2474.306944][ T8942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2474.319274][ T8942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2478.622534][ T8954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2478.638320][ T8954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2478.965570][ T8954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2478.980868][ T8954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2492.822287][ T8963] could not allocate digest TFM handle sha384-avx [ 2520.997674][ T9019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2521.003300][ T9019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2535.266414][ C0] vkms_vblank_simulate: vblank timer overrun [ 2566.010950][ T9093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2566.013162][ T9093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2568.000962][ T9107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2568.011233][ T9107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2592.708109][ T9142] netlink: 'syz.2.2069': attribute type 10 has an invalid length. [ 2598.382844][ T9156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2598.387948][ T9156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2598.612132][ T31] audit: type=1326 audit(2515.584:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.2.2075" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4a2a8 code=0x7ffc0000 [ 2598.618278][ T31] audit: type=1326 audit(2515.603:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.2.2075" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4a2a8 code=0x7ffc0000 [ 2598.619718][ T31] audit: type=1326 audit(2515.603:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.2.2075" exe="/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb1b48844 code=0x7ffc0000 [ 2598.621058][ T31] audit: type=1326 audit(2515.612:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.2.2075" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb1b49dd0 code=0x7ffc0000 [ 2598.622391][ T31] audit: type=1326 audit(2515.612:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.2.2075" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb1b49dd0 code=0x7ffc0000 [ 2598.626812][ T31] audit: type=1326 audit(2515.640:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.2.2075" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4a2a8 code=0x7ffc0000 [ 2601.155309][ T9161] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2077'. [ 2601.157040][ T9161] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2077'. [ 2608.926631][ T31] audit: type=1400 audit(2525.500:1125): avc: denied { map } for pid=9170 comm="syz.1.2081" path="socket:[28682]" dev="sockfs" ino=28682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2683.981691][ T9233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2683.985778][ T9233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2685.531985][ T31] audit: type=1400 audit(2597.142:1126): avc: denied { accept } for pid=9237 comm="syz.1.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2691.740655][ T31] audit: type=1400 audit(2602.923:1127): avc: denied { setopt } for pid=9243 comm="syz.1.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2693.013867][ T31] audit: type=1400 audit(2603.418:1128): avc: denied { bind } for pid=9243 comm="syz.1.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2703.286902][ T9249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2703.291658][ T9249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2716.019132][ T9263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2716.027282][ T9263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2723.512998][ T31] audit: type=1400 audit(2632.668:1129): avc: denied { execute } for pid=9270 comm="syz-executor" name="syz-executor" dev="vda" ino=1735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 2723.590226][ T31] audit: type=1400 audit(2632.752:1130): avc: denied { execute_no_trans } for pid=9270 comm="syz-executor" path="/syz-executor" dev="vda" ino=1735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 2724.725610][ T31] audit: type=1400 audit(2633.791:1131): avc: denied { mounton } for pid=9271 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2725.054242][ T7361] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2725.713325][ T7361] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2726.266485][ T7361] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2726.711279][ T7361] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 2729.053584][ T7361] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2733.341590][ T31] audit: type=1400 audit(2641.873:1132): avc: denied { read } for pid=3127 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 2734.392336][ T7361] erspan0: left promiscuous mode [ 2740.547899][ T7361]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 2740.665581][ T7361]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 2740.813634][ T7361]  (unregistering): Released all slaves [ 2743.902568][ T9298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2743.908374][ T9298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2745.921254][ T7361] hsr_slave_0: left promiscuous mode [ 2746.126503][ T7361] hsr_slave_1: left promiscuous mode [ 2746.491607][ T7361] veth1_macvtap: left promiscuous mode [ 2746.492520][ T7361] veth0_macvtap: left promiscuous mode [ 2746.502140][ T7361] veth1_vlan: left promiscuous mode [ 2746.503812][ T7361] veth0_vlan: left promiscuous mode [ 2750.242622][ T31] audit: type=1400 audit(2657.297:1133): avc: denied { read write } for pid=9302 comm="syz.1.2118" name="vhost-net" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2750.252586][ T31] audit: type=1400 audit(2657.316:1134): avc: denied { open } for pid=9302 comm="syz.1.2118" path="/dev/vhost-net" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2750.257226][ T31] audit: type=1400 audit(2657.372:1135): avc: denied { ioctl } for pid=9302 comm="syz.1.2118" path="/dev/vhost-net" dev="devtmpfs" ino=713 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2753.743467][ T7361] infiniband syz0: set down [ 2765.072468][ T7379] smc: removing ib device syz0 [ 2765.178764][ T6729] lo speed is unknown, defaulting to 1000 [ 2769.057687][ C1] vkms_vblank_simulate: vblank timer overrun [ 2778.085787][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2778.103237][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2780.188464][ T31] audit: type=1400 audit(2685.687:1136): avc: denied { sys_chroot } for pid=9356 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 2780.209199][ T31] audit: type=1400 audit(2685.715:1137): avc: denied { setgid } for pid=9356 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 2780.237685][ T31] audit: type=1400 audit(2685.734:1138): avc: denied { setuid } for pid=9356 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 2780.258317][ T31] audit: type=1400 audit(2685.752:1139): avc: denied { setrlimit } for pid=9356 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 2780.580892][ T9271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2780.672338][ T9271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2787.694787][ T9271] hsr_slave_0: entered promiscuous mode [ 2787.804442][ T9271] hsr_slave_1: entered promiscuous mode [ 2794.260600][ T9271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2794.340781][ T9271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2794.439188][ T9271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2794.521650][ T9271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2800.465444][ T9406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2800.479236][ T9406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2801.108783][ T9271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2824.488508][ T9466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2824.599713][ T9271] veth0_vlan: entered promiscuous mode [ 2824.629882][ T9466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2824.880826][ T9271] veth1_vlan: entered promiscuous mode [ 2825.701430][ T9271] veth0_macvtap: entered promiscuous mode [ 2825.796379][ T9271] veth1_macvtap: entered promiscuous mode [ 2826.276217][ T9271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2826.278107][ T9271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2826.279020][ T9271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2826.288711][ T9271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2827.680035][ T31] audit: type=1400 audit(2730.118:1140): avc: denied { mounton } for pid=9271 comm="syz-executor" path="/syzkaller.6U29dD/syz-tmp" dev="vda" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 2827.811047][ T31] audit: type=1400 audit(2730.212:1141): avc: denied { mount } for pid=9271 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2827.917642][ T31] audit: type=1400 audit(2730.324:1142): avc: denied { mounton } for pid=9271 comm="syz-executor" path="/syzkaller.6U29dD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2828.113091][ T31] audit: type=1400 audit(2730.352:1143): avc: denied { mounton } for pid=9271 comm="syz-executor" path="/syzkaller.6U29dD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2828.115328][ T31] audit: type=1400 audit(2730.436:1144): avc: denied { unmount } for pid=9271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2828.116859][ T31] audit: type=1400 audit(2730.474:1145): avc: denied { mounton } for pid=9271 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=1512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2828.118254][ T31] audit: type=1400 audit(2730.492:1146): avc: denied { mount } for pid=9271 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2828.121483][ T31] audit: type=1400 audit(2730.492:1147): avc: denied { mounton } for pid=9271 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2830.741337][ T31] audit: type=1400 audit(2732.971:1148): avc: denied { accept } for pid=9475 comm="syz.2.2137" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2830.807404][ T9477] binder: 9474:9477 context manager tried to acquire desc 0 [ 2830.811043][ T9477] binder: 9474:9477 ioctl c0306201 200003c0 returned -22 [ 2845.015016][ T31] audit: type=1400 audit(2746.319:1149): avc: denied { unmount } for pid=6499 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2846.034006][ T9501] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2144'. [ 2854.975104][ T31] audit: type=1400 audit(2755.645:1150): avc: denied { create } for pid=9508 comm="syz.1.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 2855.007736][ T31] audit: type=1400 audit(2755.673:1151): avc: denied { sys_admin } for pid=9508 comm="syz.1.2149" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 2869.105175][ T31] audit: type=1400 audit(2768.863:1152): avc: denied { open } for pid=9575 comm="syz.2.2170" path="/dev/ptyq8" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2869.141257][ T31] audit: type=1400 audit(2768.891:1153): avc: denied { ioctl } for pid=9575 comm="syz.2.2170" path="/dev/ptyq8" dev="devtmpfs" ino=119 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2885.105917][ T9598] binder: 9597:9598 tried to acquire reference to desc 0, got 1 instead [ 2885.109046][ T9598] binder: 9597:9598 unknown command 0 [ 2885.109718][ T9598] binder: 9597:9598 ioctl c0306201 200001c0 returned -22 [ 2885.134890][ T7762] ================================================================== [ 2885.136120][ T7762] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x154/0x198 [ 2885.137598][ T7762] Read of size 8 at addr ffff000016037408 by task kworker/0:1/7762 [ 2885.138433][ T7762] [ 2885.139309][ T7762] CPU: 0 UID: 0 PID: 7762 Comm: kworker/0:1 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 2885.139910][ T7762] Hardware name: linux,dummy-virt (DT) [ 2885.141664][ T7762] Workqueue: events binder_deferred_func [ 2885.143890][ T7762] Call trace: [ 2885.144099][ T7762] dump_backtrace+0x9c/0x11c [ 2885.144472][ T7762] show_stack+0x18/0x24 [ 2885.144748][ T7762] dump_stack_lvl+0xa4/0xf4 [ 2885.144980][ T7762] print_report+0xf4/0x5a4 [ 2885.145444][ T7762] kasan_report+0xc8/0x108 [ 2885.145859][ T7762] __asan_report_load8_noabort+0x20/0x2c [ 2885.146283][ T7762] __list_del_entry_valid_or_report+0x154/0x198 [ 2885.147184][ T7762] binder_release_work+0x94/0x414 [ 2885.147662][ T7762] binder_deferred_func+0xbac/0x10d0 [ 2885.147900][ T7762] process_one_work+0x7b8/0x189c [ 2885.148161][ T7762] worker_thread+0x730/0xb74 [ 2885.148367][ T7762] kthread+0x27c/0x300 [ 2885.148627][ T7762] ret_from_fork+0x10/0x20 [ 2885.149083][ T7762] [ 2885.149281][ T7762] Allocated by task 9598: [ 2885.149708][ T7762] kasan_save_stack+0x3c/0x64 [ 2885.150134][ T7762] kasan_save_track+0x20/0x3c [ 2885.150344][ T7762] kasan_save_alloc_info+0x40/0x54 [ 2885.150557][ T7762] __kasan_kmalloc+0xb8/0xbc [ 2885.150877][ T7762] __kmalloc_cache_noprof+0x188/0x2f8 [ 2885.151157][ T7762] binder_thread_write+0xd60/0x4b40 [ 2885.151425][ T7762] binder_ioctl+0x2120/0x2f64 [ 2885.151659][ T7762] __arm64_sys_ioctl+0x124/0x190 [ 2885.151906][ T7762] invoke_syscall+0x6c/0x258 [ 2885.152112][ T7762] el0_svc_common.constprop.0+0xac/0x230 [ 2885.152377][ T7762] do_el0_svc+0x40/0x58 [ 2885.152591][ T7762] el0_svc+0x50/0x180 [ 2885.152805][ T7762] el0t_64_sync_handler+0x100/0x12c [ 2885.153218][ T7762] el0t_64_sync+0x190/0x194 [ 2885.153469][ T7762] [ 2885.153692][ T7762] Freed by task 7762: [ 2885.154043][ T7762] kasan_save_stack+0x3c/0x64 [ 2885.154538][ T7762] kasan_save_track+0x20/0x3c [ 2885.154804][ T7762] kasan_save_free_info+0x4c/0x74 [ 2885.155061][ T7762] __kasan_slab_free+0x50/0x6c [ 2885.155309][ T7762] kfree+0x130/0x460 [ 2885.155602][ T7762] binder_deferred_func+0xb3c/0x10d0 [ 2885.155866][ T7762] process_one_work+0x7b8/0x189c [ 2885.156121][ T7762] worker_thread+0x730/0xb74 [ 2885.156406][ T7762] kthread+0x27c/0x300 [ 2885.156693][ T7762] ret_from_fork+0x10/0x20 [ 2885.157128][ T7762] [ 2885.157486][ T7762] The buggy address belongs to the object at ffff000016037400 [ 2885.157486][ T7762] which belongs to the cache kmalloc-64 of size 64 [ 2885.158342][ T7762] The buggy address is located 8 bytes inside of [ 2885.158342][ T7762] freed 64-byte region [ffff000016037400, ffff000016037440) [ 2885.159108][ T7762] [ 2885.159542][ T7762] The buggy address belongs to the physical page: [ 2885.160302][ T7762] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56037 [ 2885.160898][ T7762] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 2885.161893][ T7762] page_type: f5(slab) [ 2885.162555][ T7762] raw: 01ffc00000000000 ffff00000d4018c0 fffffdffc05947c0 dead000000000002 [ 2885.162974][ T7762] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 2885.163619][ T7762] page dumped because: kasan: bad access detected [ 2885.164471][ T7762] [ 2885.164765][ T7762] Memory state around the buggy address: [ 2885.165438][ T7762] ffff000016037300: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 2885.165885][ T7762] ffff000016037380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2885.166290][ T7762] >ffff000016037400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2885.166697][ T7762] ^ [ 2885.167075][ T7762] ffff000016037480: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 2885.167514][ T7762] ffff000016037500: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 2885.167993][ T7762] ================================================================== [ 2885.173453][ T7762] Disabling lock debugging due to kernel taint [ 2885.175529][ T7762] Unable to handle kernel paging request at virtual address e0e1c066000003ca [ 2885.176420][ T7762] KASAN: maybe wild-memory-access in range [0x0712033000001e50-0x0712033000001e57] [ 2885.176962][ T7762] Mem abort info: [ 2885.177255][ T7762] ESR = 0x0000000096000004 [ 2885.177613][ T7762] EC = 0x25: DABT (current EL), IL = 32 bits [ 2885.177958][ T7762] SET = 0, FnV = 0 [ 2885.178228][ T7762] EA = 0, S1PTW = 0 [ 2885.178524][ T7762] FSC = 0x04: level 0 translation fault [ 2885.178891][ T7762] Data abort info: [ 2885.179423][ T7762] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 2885.179813][ T7762] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 2885.180170][ T7762] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 2885.180654][ T7762] [e0e1c066000003ca] address between user and kernel address ranges [ 2885.181607][ T7762] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 2885.182115][ T7762] Modules linked in: [ 2885.182904][ T7762] CPU: 0 UID: 0 PID: 7762 Comm: kworker/0:1 Tainted: G B 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 2885.183338][ T7762] Tainted: [B]=BAD_PAGE [ 2885.183577][ T7762] Hardware name: linux,dummy-virt (DT) [ 2885.183779][ T7762] Workqueue: events binder_deferred_func [ 2885.184285][ T7762] pstate: 00000005 (nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2885.184613][ T7762] pc : __list_del_entry_valid_or_report+0x7c/0x198 [ 2885.185158][ T7762] lr : __list_del_entry_valid_or_report+0x168/0x198 [ 2885.185511][ T7762] sp : ffff8000a1c579b0 [ 2885.185728][ T7762] x29: ffff8000a1c579b0 x28: ffff800085de12a0 x27: ffff800085de12e0 [ 2885.186376][ T7762] x26: 0000000000000002 x25: 1fffe00002e0391b x24: ffff00001701cad0 [ 2885.186805][ T7762] x23: ffff00001701c8d8 x22: ffff800085de3420 x21: ffff800085de1220 [ 2885.187177][ T7762] x20: dfff800000000000 x19: ffff000012347f00 x18: 00000000397b8e18 [ 2885.187701][ T7762] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 2885.188160][ T7762] x14: 0000000000000000 x13: 205d323637375420 x12: ffff70001438af34 [ 2885.188552][ T7762] x11: 1ffff0001438af33 x10: ffff70001438af33 x9 : dfff800000000000 [ 2885.189001][ T7762] x8 : ffff8000a1c579a0 x7 : 0000000000000000 x6 : ffff70001438af28 [ 2885.189311][ T7762] x5 : ffff8000a1c57940 x4 : 0000000000000000 x3 : 0712033000001e52 [ 2885.189666][ T7762] x2 : 00e24066000003ca x1 : ffff000016037400 x0 : dfff800000000000 [ 2885.190022][ T7762] Call trace: [ 2885.190271][ T7762] __list_del_entry_valid_or_report+0x7c/0x198 [ 2885.190540][ T7762] binder_release_work+0x94/0x414 [ 2885.190882][ T7762] binder_deferred_func+0xbac/0x10d0 [ 2885.191106][ T7762] process_one_work+0x7b8/0x189c [ 2885.191423][ T7762] worker_thread+0x730/0xb74 [ 2885.191785][ T7762] kthread+0x27c/0x300 [ 2885.192106][ T7762] ret_from_fork+0x10/0x20 [ 2885.192667][ T7762] Code: 540004e0 d343fc62 d2d00000 f2fbffe0 (38e06840) [ 2885.193787][ T7762] ---[ end trace 0000000000000000 ]--- [ 2885.194934][ T7762] Kernel panic - not syncing: Oops: Fatal exception [ 2885.195990][ T7762] SMP: stopping secondary CPUs [ 2885.197872][ T7762] Kernel Offset: disabled [ 2885.198218][ T7762] CPU features: 0x08,80002003,40200000,0200421b [ 2885.198991][ T7762] Memory Limit: none [ 2885.199639][ T7762] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:26:15 Registers: info registers vcpu 0 CPU#0 PC=ffff8000801f3520 X00=0000000000000000 X01=0000000000000000 X02=0000000000000000 X03=1fffe00002f53a3a X04=1fffe00002f53785 X05=ffff70001438aec2 X06=00000000f1f1f1f1 X07=1fffe00002f53785 X08=00000000f3f3f3f3 X09=00000000f2f2f2f2 X10=ffff700010d93288 X11=1ffff00010d93288 X12=ffff700010d93289 X13=00000000f3f3f3f3 X14=000000000000f1f1 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=00000000397b8e18 X19=1ffff0001438aed8 X20=ffff800086640288 X21=ffff000013141600 X22=ffff8000a1c57740 X23=ffff8000a1c57780 X24=0000000000000000 X25=0000000000000000 X26=0000000000001e52 X27=ffff8000861930a0 X28=ffff800085de12a0 X29=ffff8000a1c57670 X30=ffff8000801f3520 SP=ffff8000a1c57670 PSTATE=100000c5 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=0000ffffc8dcf3c0:a97551bb7d582500 Q02=0000ffff874ce000:ffffff80ffffffd8 Q03=0000ffffc8dcf450:0000ffffc8dcf450 Q04=0000ffffc8dcf450:0000ffffc8dcf408 Q05=0000ffffc8dcf420:0000ffffc8dcf450 Q06=6edc4d3a2914b135:d8e9c869e2695c88 Q07=b20fae707afde253:388e9c6c4fa85ca0 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffc8dcf660:0000ffffc8dcf660 Q17=ffffff80ffffffd0:0000ffffc8dcf630 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff8000851af0c4 X00=ffff8000851af0c0 X01=0000000000000004 X02=ffff800083b5a790 X03=ffff8000803dcbdc X04=ffff700010dc4fa1 X05=ffff800086e27d00 X06=ffff700010dc4fa0 X07=0000000000000001 X08=ffff800086e27d03 X09=dfff800000000000 X10=ffff700010dc4fa0 X11=1ffff00010dc4fa0 X12=ffff700010dc4fa1 X13=1fffe000023d2519 X14=1fffe000023d250f X15=ffff000011e92880 X16=ffff80008cd90000 X17=ffff7fffe3413000 X18=00000000cbc89d95 X19=ffff800086e27d00 X20=ffff800086e27d38 X21=dfff800000000000 X22=1ffff00010dc4fa7 X23=0000000000086bd6 X24=1ffff00010dc4fa8 X25=1ffff00010dc4fa9 X26=ffff700010dc4fa9 X27=ffff800086e27d48 X28=ffff800086e27d40 X29=ffff80008cd97cf0 X30=ffff800083b5a7a8 SP=ffff80008cd97cf0 PSTATE=600000c5 -ZC- EL1h FPCR=00000000 FPSR=00000000 Q00=2525252525252525:2525252525252525 Q01=730073250a0d0a0d:7525203a6874676e Q02=f00ff00ff00ff00f:f00ff00ff00ff00f Q03=000f000f00000000:000f000000000000 Q04=f00ff00ff00ff00f:f00ff00ff00ff00f Q05=0f0f00000f000000:0f0f00000f000000 Q06=cccccccccc00c300:cccccccccc00c300 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000