last executing test programs: 2m28.65083828s ago: executing program 0 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1b7f000001bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c) 2m18.101913346s ago: executing program 0 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000006580), 0x4) 2m17.984873369s ago: executing program 0 (id=63): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe80000000000000007af791950000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 2m17.521794492s ago: executing program 0 (id=64): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}}) 2m9.505116s ago: executing program 0 (id=69): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x0, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) 2m6.962509899s ago: executing program 0 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000c00)=0x11) socket$inet6(0xa, 0x80001, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='net/if_inet6\x00') read$FUSE(r3, &(0x7f00000041c0)={0x2020}, 0x2020) 1m21.239267082s ago: executing program 32 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000c00)=0x11) socket$inet6(0xa, 0x80001, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='net/if_inet6\x00') read$FUSE(r3, &(0x7f00000041c0)={0x2020}, 0x2020) 15.203573267s ago: executing program 1 (id=110): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @timestamp, @mss={0x2, 0x1008008}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0x5, 0x4000}, @mss={0x2, 0xa}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 15.09768258s ago: executing program 1 (id=111): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x185201, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) pipe(0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) r4 = geteuid() statx(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x6000, 0x400, &(0x7f0000002080)) lstat(&(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xf8, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xf8}}, 0x0) 13.837613944s ago: executing program 2 (id=113): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)=""/4067, 0xfe3}, {&(0x7f0000000100)=""/128, 0x80}], 0x2}, 0x12020) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x36, 0x0}, 0x120) recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x40002020) 13.523675333s ago: executing program 1 (id=114): socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 13.013178946s ago: executing program 1 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x3, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) 11.059279799s ago: executing program 2 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 9.349245236s ago: executing program 1 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) 6.580228251s ago: executing program 1 (id=118): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket(0x28, 0x5, 0x0) listen(r0, 0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget(0x1, 0x240) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a", 0xe) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4044) read$alg(0xffffffffffffffff, &(0x7f0000000180)=""/100, 0x64) read$alg(0xffffffffffffffff, &(0x7f0000003340)=""/4119, 0x1017) 971.863593ms ago: executing program 2 (id=119): socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 363.47715ms ago: executing program 2 (id=120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xefffffff, 0xf8ea}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x11) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55408040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @remote}, 0x14) 137.892536ms ago: executing program 2 (id=121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@remote, @private2, @empty, 0x4, 0x9, 0x5, 0x100, 0x401, 0x180084}) 0s ago: executing program 2 (id=122): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x8, 0x800) msgctl$IPC_RMID(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000440)={'8255\x00', [0xf000, 0xc0000000, 0x5, 0xffffffff, 0xe, 0x800005, 0x7, 0x4, 0x8, 0xfd, 0x7fffffff, 0x1, 0x1, 0xfffffffc, 0x10000b, 0xb2ce, 0x5, 0x4007a, 0x3, 0x3, 0x89, 0x12, 0x7f, 0x0, 0x5, 0xe66, 0x1, 0x2000008, 0x5f79, 0x0, 0x5]}) kernel console output (not intermixed with test programs): syzkaller login: [ 37.546078][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 37.546658][ T28] audit: type=1400 audit(37.470:88): avc: denied { write } for pid=3085 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.627865][ T28] audit: type=1400 audit(38.550:89): avc: denied { write } for pid=3090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.163263][ T28] audit: type=1400 audit(39.080:90): avc: denied { read write } for pid=3089 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.175568][ T28] audit: type=1400 audit(39.100:91): avc: denied { open } for pid=3089 comm="scp" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.273235][ T28] audit: type=1400 audit(39.190:92): avc: denied { write } for pid=3093 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:52084' (ED25519) to the list of known hosts. [ 57.034459][ T28] audit: type=1400 audit(56.960:93): avc: denied { name_bind } for pid=3098 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 58.553063][ T28] audit: type=1400 audit(58.470:94): avc: denied { execute } for pid=3099 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 58.606627][ T28] audit: type=1400 audit(58.520:95): avc: denied { execute_no_trans } for pid=3099 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.438797][ T28] audit: type=1400 audit(61.360:96): avc: denied { mounton } for pid=3099 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 61.444527][ T28] audit: type=1400 audit(61.360:97): avc: denied { mount } for pid=3099 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.460892][ T3099] cgroup: Unknown subsys name 'net' [ 61.469536][ T28] audit: type=1400 audit(61.390:98): avc: denied { unmount } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.632506][ T3099] cgroup: Unknown subsys name 'cpuset' [ 61.639492][ T3099] cgroup: Unknown subsys name 'hugetlb' [ 61.640516][ T3099] cgroup: Unknown subsys name 'rlimit' [ 61.841603][ T28] audit: type=1400 audit(61.760:99): avc: denied { setattr } for pid=3099 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.846173][ T28] audit: type=1400 audit(61.770:100): avc: denied { mounton } for pid=3099 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 61.848949][ T28] audit: type=1400 audit(61.770:101): avc: denied { mount } for pid=3099 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 62.048452][ T3101] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 62.051574][ T28] audit: type=1400 audit(61.970:102): avc: denied { relabelto } for pid=3101 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 62.057483][ T28] audit: type=1400 audit(61.980:103): avc: denied { write } for pid=3101 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 62.097115][ T28] audit: type=1400 audit(62.020:104): avc: denied { read } for pid=3099 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 62.097589][ T28] audit: type=1400 audit(62.020:105): avc: denied { open } for pid=3099 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 70.169613][ T3099] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.169843][ T28] audit: type=1400 audit(72.090:106): avc: denied { execmem } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.213161][ T28] audit: type=1400 audit(72.130:107): avc: denied { read } for pid=3104 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.216082][ T28] audit: type=1400 audit(72.140:108): avc: denied { open } for pid=3104 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.221322][ T28] audit: type=1400 audit(72.140:109): avc: denied { mounton } for pid=3104 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 72.239713][ T28] audit: type=1400 audit(72.160:110): avc: denied { module_request } for pid=3105 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.288477][ T28] audit: type=1400 audit(72.210:111): avc: denied { sys_module } for pid=3105 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.687309][ T28] audit: type=1400 audit(72.610:112): avc: denied { ioctl } for pid=3105 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=678 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.603109][ T3105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.625905][ T3105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.107751][ T3104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.135387][ T3104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.518991][ T3105] hsr_slave_0: entered promiscuous mode [ 74.522076][ T3105] hsr_slave_1: entered promiscuous mode [ 74.965210][ T3104] hsr_slave_0: entered promiscuous mode [ 74.967883][ T3104] hsr_slave_1: entered promiscuous mode [ 74.969995][ T3104] debugfs: 'hsr0' already exists in 'hsr' [ 74.971210][ T3104] Cannot create hsr debugfs directory [ 75.025028][ T28] audit: type=1400 audit(74.940:113): avc: denied { create } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.025451][ T28] audit: type=1400 audit(74.940:114): avc: denied { write } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.025829][ T28] audit: type=1400 audit(74.940:115): avc: denied { read } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.035848][ T3105] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.052011][ T3105] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.057386][ T3105] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.066519][ T3105] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.069390][ T3105] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.082423][ T3105] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.087789][ T3105] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.097023][ T3105] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.417877][ T3104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.429387][ T3104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.433488][ T3104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.444961][ T3104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.448350][ T3104] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.461441][ T3104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.465750][ T3104] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.472336][ T3104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.908357][ T3105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.211742][ T3104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.270724][ T3105] veth0_vlan: entered promiscuous mode [ 78.293266][ T3105] veth1_vlan: entered promiscuous mode [ 78.366275][ T3105] veth0_macvtap: entered promiscuous mode [ 78.382758][ T3105] veth1_macvtap: entered promiscuous mode [ 78.491189][ T2199] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.491963][ T2199] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.492055][ T2199] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.492121][ T2199] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.650819][ T28] audit: type=1400 audit(78.570:116): avc: denied { mount } for pid=3105 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.662962][ T28] audit: type=1400 audit(78.580:117): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/syzkaller.VwMvMQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.670643][ T28] audit: type=1400 audit(78.590:118): avc: denied { mount } for pid=3105 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.680212][ T28] audit: type=1400 audit(78.600:119): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/syzkaller.VwMvMQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.682999][ T28] audit: type=1400 audit(78.600:120): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/syzkaller.VwMvMQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 78.698751][ T28] audit: type=1400 audit(78.620:121): avc: denied { unmount } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.709797][ T28] audit: type=1400 audit(78.630:122): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 78.718822][ T28] audit: type=1400 audit(78.640:123): avc: denied { mount } for pid=3105 comm="syz-executor" name="/" dev="gadgetfs" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 78.732014][ T28] audit: type=1400 audit(78.650:124): avc: denied { mount } for pid=3105 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.740393][ T28] audit: type=1400 audit(78.660:125): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 78.830297][ T3105] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.957883][ T3104] veth0_vlan: entered promiscuous mode [ 78.977913][ T3104] veth1_vlan: entered promiscuous mode [ 79.070662][ T3104] veth0_macvtap: entered promiscuous mode [ 79.090423][ T3104] veth1_macvtap: entered promiscuous mode [ 79.200200][ T1056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.200671][ T1056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.201042][ T1056] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.201149][ T1056] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.175686][ T3717] random: crng reseeded on system resumption [ 80.230092][ T3717] Restarting kernel threads ... [ 80.232834][ T3717] Done restarting kernel threads. [ 81.422747][ T3719] *** NOT YET: opcode c3 *** [ 82.204688][ T3638] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 82.446110][ T3638] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 82.447206][ T3638] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.452094][ T3638] usb 1-1: Product: syz [ 82.462552][ T3638] usb 1-1: Manufacturer: syz [ 82.466437][ T3638] usb 1-1: SerialNumber: syz [ 82.488998][ T3638] usb 1-1: config 0 descriptor?? [ 84.819838][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 84.823002][ T28] audit: type=1400 audit(84.740:137): avc: denied { unmount } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 85.179381][ T28] audit: type=1400 audit(85.100:138): avc: denied { allowed } for pid=3738 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 85.454637][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.623543][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.640333][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 85.640650][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 85.641023][ T9] usb 2-1: Product: syz [ 85.641074][ T9] usb 2-1: Manufacturer: syz [ 85.641101][ T9] usb 2-1: SerialNumber: syz [ 85.922723][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 86.280050][ T9] usb 2-1: USB disconnect, device number 2 [ 86.296820][ T9] usblp0: removed [ 89.950301][ T28] audit: type=1400 audit(89.870:139): avc: denied { mounton } for pid=3765 comm="syz.1.11" path="/8/file0" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.797563][ T40] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.959858][ T40] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 90.960166][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.960332][ T40] usb 2-1: Product: syz [ 90.960432][ T40] usb 2-1: Manufacturer: syz [ 90.960530][ T40] usb 2-1: SerialNumber: syz [ 91.188673][ T40] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 91.189529][ T40] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 91.189616][ T40] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 91.194671][ T40] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 92.745079][ T2882] usb 1-1: USB disconnect, device number 2 [ 93.150569][ T28] audit: type=1400 audit(93.070:140): avc: denied { ioctl } for pid=3786 comm="syz.0.14" path="socket:[2481]" dev="sockfs" ino=2481 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.066398][ T28] audit: type=1400 audit(98.990:141): avc: denied { write } for pid=3803 comm="syz.0.19" name="igmp" dev="proc" ino=4026532768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 99.168655][ T3806] input: syz0 as /devices/virtual/input/input3 [ 99.392509][ T28] audit: type=1400 audit(99.310:142): avc: denied { create } for pid=3813 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.399229][ T28] audit: type=1400 audit(99.320:143): avc: denied { write } for pid=3813 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.680493][ T37] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.681514][ T37] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.685754][ T37] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.686577][ T37] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.117775][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 100.575558][ T9] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 100.576225][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.584819][ T9] usb 1-1: Product: syz [ 100.585036][ T9] usb 1-1: Manufacturer: syz [ 100.586346][ T9] usb 1-1: SerialNumber: syz [ 100.636451][ T9] usb 1-1: config 0 descriptor?? [ 101.358588][ T3711] usb 2-1: USB disconnect, device number 3 [ 104.110877][ T28] audit: type=1400 audit(104.030:144): avc: denied { create } for pid=3834 comm="syz.1.26" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.911948][ T3841] syzkaller0: entered promiscuous mode [ 109.912548][ T3841] syzkaller0: entered allmulticast mode [ 109.926092][ T28] audit: type=1400 audit(109.840:145): avc: denied { write } for pid=3840 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.979935][ T28] audit: type=1400 audit(110.900:146): avc: denied { create } for pid=3846 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.058005][ T3711] usb 1-1: USB disconnect, device number 3 [ 111.997508][ T28] audit: type=1400 audit(111.910:147): avc: denied { watch } for pid=3858 comm="syz.0.29" path="/14" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 112.729003][ T28] audit: type=1400 audit(112.650:148): avc: denied { create } for pid=3871 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.739005][ T28] audit: type=1400 audit(112.660:149): avc: denied { read } for pid=3871 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.945702][ T28] audit: type=1400 audit(112.870:150): avc: denied { ioctl } for pid=3873 comm="syz.1.34" path="socket:[3175]" dev="sockfs" ino=3175 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.059767][ T3874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 113.123301][ T3874] bond0: (slave bond_slave_1): Releasing backup interface [ 113.690700][ T28] audit: type=1400 audit(113.610:151): avc: denied { create } for pid=3884 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.798381][ T28] audit: type=1400 audit(126.720:152): avc: denied { create } for pid=3923 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.962227][ T28] audit: type=1400 audit(139.880:153): avc: denied { ioctl } for pid=3944 comm="syz.0.51" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3256 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.422378][ T28] audit: type=1400 audit(141.340:154): avc: denied { read } for pid=3944 comm="syz.0.51" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.642289][ T3948] random: crng reseeded on system resumption [ 144.225441][ T3952] Restarting kernel threads ... [ 144.238741][ T3952] Done restarting kernel threads. [ 146.651517][ T3954] syz.1.53 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 146.688347][ T28] audit: type=1400 audit(146.610:155): avc: denied { append } for pid=3950 comm="syz.1.53" name="ubi_ctrl" dev="devtmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.745094][ T3954] ubi31: attaching mtd0 [ 146.897332][ T3954] ubi31: scanning is finished [ 146.904686][ T3954] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 146.913195][ T3954] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 146.926493][ T28] audit: type=1400 audit(146.850:156): avc: denied { map } for pid=3950 comm="syz.1.53" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 146.936478][ T28] audit: type=1400 audit(146.860:157): avc: denied { write } for pid=3950 comm="syz.1.53" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 153.673388][ T28] audit: type=1400 audit(153.590:158): avc: denied { block_suspend } for pid=3965 comm="syz.1.58" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.334731][ T28] audit: type=1400 audit(154.250:159): avc: denied { execute } for pid=3973 comm="syz.1.59" name="file1" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.349969][ T3974] process 'syz.1.59' launched './file1' with NULL argv: empty string added [ 154.352159][ T28] audit: type=1400 audit(154.270:160): avc: denied { execute_no_trans } for pid=3973 comm="syz.1.59" path="/29/file1" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.357443][ T3982] tmpfs: Unsupported parameter 'huge' [ 165.113239][ T3992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'. [ 165.125750][ T3992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'. [ 170.899616][ T28] audit: type=1400 audit(170.820:161): avc: denied { read } for pid=4002 comm="syz.0.69" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 170.905425][ T28] audit: type=1400 audit(170.820:162): avc: denied { open } for pid=4002 comm="syz.0.69" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 170.921195][ T28] audit: type=1400 audit(170.840:163): avc: denied { ioctl } for pid=4002 comm="syz.0.69" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 170.926597][ T28] audit: type=1400 audit(170.850:164): avc: denied { set_context_mgr } for pid=4002 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 170.949832][ T28] audit: type=1400 audit(170.870:165): avc: denied { map } for pid=4002 comm="syz.0.69" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 170.962140][ T28] audit: type=1400 audit(170.880:166): avc: denied { call } for pid=4002 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 181.163735][ T28] audit: type=1400 audit(181.080:167): avc: denied { create } for pid=4008 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.186949][ T28] audit: type=1400 audit(181.110:168): avc: denied { ioctl } for pid=4008 comm="syz.1.71" path="socket:[2684]" dev="sockfs" ino=2684 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.202731][ T28] audit: type=1400 audit(181.120:169): avc: denied { connect } for pid=4008 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.305300][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 188.454755][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 188.481682][ T4013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.486603][ T4013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.501691][ T28] audit: type=1400 audit(188.420:170): avc: denied { write } for pid=4012 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.524711][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.528079][ T23] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 188.528485][ T23] usb 2-1: can't read configurations, error -71 [ 215.387245][ T4038] netlink: 'syz.1.77': attribute type 10 has an invalid length. [ 215.396650][ T4038] syz_tun: entered promiscuous mode [ 222.019652][ T4051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.029953][ T4051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.027069][ T4051] hsr_slave_0: entered promiscuous mode [ 223.032030][ T4051] hsr_slave_1: entered promiscuous mode [ 223.039351][ T4051] debugfs: 'hsr0' already exists in 'hsr' [ 223.042079][ T4051] Cannot create hsr debugfs directory [ 223.438372][ T4051] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 223.442892][ T4051] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 223.449271][ T4051] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 223.456653][ T4051] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 223.459355][ T4051] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 223.467820][ T4051] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 223.470463][ T4051] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 223.477016][ T4051] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.986504][ T4051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.678182][ T4051] veth0_vlan: entered promiscuous mode [ 226.697342][ T4051] veth1_vlan: entered promiscuous mode [ 226.754778][ T4051] veth0_macvtap: entered promiscuous mode [ 226.770871][ T4051] veth1_macvtap: entered promiscuous mode [ 226.858237][ T2571] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.858937][ T2571] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.859476][ T2571] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.859751][ T2571] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.646092][ T2199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.670996][ T2199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.678191][ T2199] bond0 (unregistering): Released all slaves [ 230.761096][ T2199] hsr_slave_0: left promiscuous mode [ 230.765751][ T2199] hsr_slave_1: left promiscuous mode [ 231.185980][ T28] audit: type=1400 audit(231.110:171): avc: denied { write } for pid=4375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.483433][ T28] audit: type=1400 audit(231.400:172): avc: denied { write } for pid=4378 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.706896][ T2960] 8021q: adding VLAN 0 to HW filter on device eth1 [ 231.945568][ T28] audit: type=1400 audit(231.870:173): avc: denied { create } for pid=4385 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.305592][ T28] audit: type=1400 audit(232.230:174): avc: denied { write } for pid=4387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.549348][ T28] audit: type=1400 audit(232.470:175): avc: denied { write } for pid=4390 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.766357][ T2960] 8021q: adding VLAN 0 to HW filter on device eth2 [ 233.163117][ T28] audit: type=1400 audit(233.080:176): avc: denied { write } for pid=4385 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.166584][ T28] audit: type=1400 audit(233.090:177): avc: denied { nlmsg_write } for pid=4385 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.170452][ T4394] netlink: 60 bytes leftover after parsing attributes in process `syz.1.83'. [ 233.579738][ T28] audit: type=1400 audit(233.500:178): avc: denied { write } for pid=4396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.026934][ T28] audit: type=1400 audit(233.950:179): avc: denied { write } for pid=4399 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.354626][ T2960] 8021q: adding VLAN 0 to HW filter on device eth3 [ 235.417592][ T28] audit: type=1400 audit(235.340:180): avc: denied { write } for pid=4403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.839132][ T2960] 8021q: adding VLAN 0 to HW filter on device eth4 [ 237.315746][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 237.317811][ T28] audit: type=1400 audit(237.240:182): avc: denied { name_bind } for pid=4414 comm="syz.2.85" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 237.322746][ T28] audit: type=1400 audit(237.240:183): avc: denied { node_bind } for pid=4414 comm="syz.2.85" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 242.054708][ T3711] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 242.225036][ T3711] usb 2-1: Using ep0 maxpacket: 16 [ 242.235437][ T3711] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 242.235895][ T3711] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 242.236077][ T3711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.239857][ T3711] usb 2-1: config 0 descriptor?? [ 242.943249][ T3711] usbhid 2-1:0.0: can't add hid device: -71 [ 242.944560][ T3711] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 242.954425][ T3711] usb 2-1: USB disconnect, device number 6 [ 243.411513][ T28] audit: type=1400 audit(243.330:184): avc: denied { setopt } for pid=4442 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.521496][ T4444] IPv4: Oversized IP packet from 127.202.26.0 [ 247.552839][ T28] audit: type=1400 audit(247.470:185): avc: denied { write } for pid=4455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.802072][ T28] audit: type=1400 audit(247.720:186): avc: denied { write } for pid=4459 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.338333][ T28] audit: type=1400 audit(248.260:187): avc: denied { write } for pid=4462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.566236][ T28] audit: type=1400 audit(248.490:188): avc: denied { bind } for pid=4453 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 248.568380][ T28] audit: type=1400 audit(248.490:189): avc: denied { name_bind } for pid=4453 comm="syz.1.93" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 248.580636][ T28] audit: type=1400 audit(248.500:190): avc: denied { write } for pid=4465 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.584238][ T28] audit: type=1400 audit(248.500:191): avc: denied { node_bind } for pid=4453 comm="syz.1.93" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 249.091291][ T28] audit: type=1400 audit(249.010:192): avc: denied { write } for pid=4469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.382817][ T28] audit: type=1400 audit(249.300:193): avc: denied { write } for pid=4472 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.888358][ T28] audit: type=1400 audit(249.810:194): avc: denied { write } for pid=4475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.138081][ T28] audit: type=1400 audit(250.060:195): avc: denied { write } for pid=4478 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.807129][ T28] audit: type=1400 audit(251.730:196): avc: denied { write } for pid=4488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.049557][ T28] audit: type=1400 audit(251.970:197): avc: denied { write } for pid=4491 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.737379][ T28] audit: type=1400 audit(253.644:198): avc: denied { create } for pid=4486 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 253.749249][ T4494] Zero length message leads to an empty skb [ 256.883022][ T28] audit: type=1400 audit(256.591:199): avc: denied { bind } for pid=4496 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 261.671431][ T4507] random: crng reseeded on system resumption [ 271.450930][ T4517] Restarting kernel threads ... [ 271.454914][ T4517] Done restarting kernel threads. [ 272.026458][ T28] audit: type=1400 audit(270.769:200): avc: denied { create } for pid=4516 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 272.030810][ T28] audit: type=1400 audit(270.769:201): avc: denied { bind } for pid=4516 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 272.325289][ T28] audit: type=1400 audit(271.049:202): avc: denied { accept } for pid=4516 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 277.779794][ T28] audit: type=1400 audit(276.150:203): avc: denied { write } for pid=4521 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 283.129584][ T4534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.130208][ T4534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.981219][ T28] audit: type=1400 audit(282.887:204): avc: denied { create } for pid=4537 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 284.988262][ T28] audit: type=1400 audit(282.897:205): avc: denied { bind } for pid=4537 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 285.023571][ T28] audit: type=1400 audit(282.925:206): avc: denied { write } for pid=4537 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 285.376391][ T28] audit: type=1400 audit(283.252:207): avc: denied { bind } for pid=4546 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 285.387758][ T28] audit: type=1400 audit(283.262:208): avc: denied { connect } for pid=4546 comm="syz.1.111" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.395166][ T28] audit: type=1400 audit(283.271:209): avc: denied { setopt } for pid=4546 comm="syz.1.111" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.405076][ T28] audit: type=1400 audit(283.280:210): avc: denied { write } for pid=4546 comm="syz.1.111" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 286.500080][ T4550] netlink: 'syz.2.112': attribute type 29 has an invalid length. [ 286.662556][ T4552] netlink: 'syz.2.113': attribute type 29 has an invalid length. [ 289.826607][ T28] audit: type=1400 audit(287.417:211): avc: denied { map } for pid=4557 comm="syz.1.115" path="/dev/dri/card0" dev="devtmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.827018][ T28] audit: type=1400 audit(287.417:212): avc: denied { execute } for pid=4557 comm="syz.1.115" path="/dev/dri/card0" dev="devtmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.116961][ T4568] ======================================================= [ 292.116961][ T4568] WARNING: The mand mount option has been deprecated and [ 292.116961][ T4568] and is ignored by this kernel. Remove the mand [ 292.116961][ T4568] option from the mount to silence this warning. [ 292.116961][ T4568] ======================================================= [ 292.119935][ T28] audit: type=1400 audit(289.569:213): avc: denied { mount } for pid=4560 comm="syz.2.116" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 293.977040][ T28] audit: type=1400 audit(291.310:214): avc: denied { listen } for pid=4569 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 296.919961][ T28] audit: type=1400 audit(294.051:215): avc: denied { setopt } for pid=4569 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 299.406884][ T28] audit: type=1400 audit(296.382:216): avc: denied { unmount } for pid=4051 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 300.108994][ T4578] syzkaller0: entered promiscuous mode [ 300.109365][ T4578] syzkaller0: entered allmulticast mode [ 303.226620][ T4588] 8<--- cut here --- [ 303.240126][ T4588] Unable to handle kernel paging request at virtual address fee0f003 when write [ 303.245335][ T28] audit: type=1400 audit(299.975:217): avc: denied { read } for pid=2912 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 303.271813][ T28] audit: type=1400 audit(299.984:218): avc: denied { search } for pid=2912 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.272706][ T28] audit: type=1400 audit(299.984:219): avc: denied { write search } for pid=2912 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.273013][ T28] audit: type=1400 audit(299.984:220): avc: denied { add_name } for pid=2912 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.273203][ T28] audit: type=1400 audit(299.984:221): avc: denied { create } for pid=2912 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 303.273388][ T28] audit: type=1400 audit(299.984:222): avc: denied { append open } for pid=2912 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 303.273574][ T28] audit: type=1400 audit(299.984:223): avc: denied { getattr } for pid=2912 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 303.289048][ T4588] [fee0f003] *pgd=80000080007003, *pmd=00000000 [ 303.291067][ T4588] Internal error: Oops: a06 [#1] SMP ARM [ 303.293232][ T4588] Modules linked in: [ 303.294180][ T4588] CPU: 1 UID: 0 PID: 4588 Comm: syz.2.122 Not tainted syzkaller #0 PREEMPT [ 303.294759][ T4588] Hardware name: ARM-Versatile Express [ 303.295217][ T4588] PC is at subdev_8255_io+0x60/0x6c [ 303.295608][ T4588] LR is at subdev_8255_io+0x4c/0x6c [ 303.295941][ T4588] pc : [<8149f1e8>] lr : [<8149f1d4>] psr: 60000013 [ 303.296289][ T4588] sp : dfd31cb8 ip : dfd31cb8 fp : dfd31cd4 [ 303.296620][ T4588] r10: 0000f000 r9 : 00000004 r8 : dfd31da4 [ 303.296925][ T4588] r7 : 00000000 r6 : 0000009b r5 : 8301a480 r4 : 0000f003 [ 303.297286][ T4588] r3 : 0000009b r2 : fee0f003 r1 : 00000001 r0 : 8301a480 [ 303.298435][ T4588] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 303.299966][ T4588] Control: 30c5387d Table: 8680d080 DAC: 00000000 [ 303.300355][ T4588] Register r0 information: slab kmalloc-192 start 8301a480 pointer offset 0 size 192 [ 303.301701][ T4588] Register r1 information: non-paged memory [ 303.302432][ T4588] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 303.303136][ T4588] Register r3 information: non-paged memory [ 303.303429][ T4588] Register r4 information: non-paged memory [ 303.303692][ T4588] Register r5 information: slab kmalloc-192 start 8301a480 pointer offset 0 size 192 [ 303.304205][ T4588] Register r6 information: non-paged memory [ 303.304459][ T4588] Register r7 information: NULL pointer [ 303.304724][ T4588] Register r8 information: 2-page vmalloc region starting at 0xdfd30000 allocated at kernel_clone+0xc4/0x43c [ 303.305187][ T4588] Register r9 information: non-paged memory [ 303.305460][ T4588] Register r10 information: non-paged memory [ 303.305711][ T4588] Register r11 information: 2-page vmalloc region starting at 0xdfd30000 allocated at kernel_clone+0xc4/0x43c [ 303.306149][ T4588] Register r12 information: 2-page vmalloc region starting at 0xdfd30000 allocated at kernel_clone+0xc4/0x43c [ 303.306628][ T4588] Process syz.2.122 (pid: 4588, stack limit = 0xdfd30000) [ 303.306996][ T4588] Stack: (0xdfd31cb8 to 0xdfd32000) [ 303.307380][ T4588] 1ca0: 8149f188 0000f000 [ 303.307816][ T4588] 1cc0: 8301a480 00000000 dfd31cf4 dfd31cd8 8149eec4 8149f194 0000f000 80545ff4 [ 303.308213][ T4588] 1ce0: 863ec000 863ec000 dfd31d14 dfd31cf8 8149f27c 8149ee78 8301a480 00000000 [ 303.308636][ T4588] 1d00: 863ec000 00000000 dfd31d54 dfd31d18 8149f42c 8149f200 ffffffff 00000004 [ 303.309046][ T4588] 1d20: 82a22dc0 00000000 00000000 82bd9600 8301a480 00000000 dfd31d90 8301a480 [ 303.309415][ T4588] 1d40: 00000000 82d30dfc dfd31d8c dfd31d58 8148ddcc 8149f3c4 40946400 00000000 [ 303.309832][ T4588] 1d60: dfd31d7c 20000440 8301a480 b5403587 40946400 00000001 00000008 847b9880 [ 303.310257][ T4588] 1d80: dfd31e4c dfd31d90 814895d0 8148dcd0 35353238 00000000 00000000 00000000 [ 303.310677][ T4588] 1da0: 00000000 0000f000 c0000000 00000005 ffffffff 0000000e 00800005 00000007 [ 303.311033][ T4588] 1dc0: 00000004 00000008 000000fd 7fffffff 00000001 00000001 fffffffc 0010000b [ 303.311418][ T4588] 1de0: 0000b2ce 00000005 0004007a 00000003 00000003 00000089 00000012 0000007f [ 303.311848][ T4588] 1e00: 00000000 00000005 00000e66 00000001 02000008 00005f79 00000000 00000005 [ 303.312295][ T4588] 1e20: 00000000 3b335056 00000000 85caaf80 8301a480 20000440 40946400 00000001 [ 303.312905][ T4588] 1e40: dfd31f14 dfd31e50 8148a8f8 81489510 00000000 3b335056 00000000 00000000 [ 303.313419][ T4588] 1e60: 8254980c dfd31ea4 0000005f 843a0990 00000064 8301a4b0 dfd31ee4 dfd31e88 [ 303.313858][ T4588] 1e80: 80805b6c 807fbe9c 00000064 00000001 00000000 dfd31ea4 830e9810 834df220 [ 303.314193][ T4588] 1ea0: 00006400 0000000b dfd31e98 00000000 00000000 3b335056 00000000 85caaf80 [ 303.314531][ T4588] 1ec0: 40946400 20000440 20000440 85caaf80 00000008 847b9880 dfd31ef4 dfd31ee8 [ 303.314854][ T4588] 1ee0: 80805ca0 3b335056 dfd31f14 00000000 85caaf81 40946400 20000440 85caaf80 [ 303.315221][ T4588] 1f00: 00000008 847b9880 dfd31fa4 dfd31f18 805bab08 8148a5b0 ecac8b10 847b9880 [ 303.315858][ T4588] 1f20: dfd31f3c dfd31f30 81b56440 81b5630c dfd31f54 dfd31f40 8025a7a4 8028e480 [ 303.316258][ T4588] 1f40: dfd31fb0 40000000 dfd31f84 dfd31f58 80220bdc 8025a760 00000000 82a1eb0c [ 303.316680][ T4588] 1f60: dfd31fb0 0013e9c0 ecac8b10 80220b30 00000000 3b335056 dfd31fac 00000000 [ 303.317045][ T4588] 1f80: 00000000 00356450 00000036 8020029c 847b9880 00000036 00000000 dfd31fa8 [ 303.317464][ T4588] 1fa0: 80200060 805ba8d0 00000000 00000000 00000008 40946400 20000440 00000000 [ 303.317868][ T4588] 1fc0: 00000000 00000000 00356450 00000036 00356418 00000000 00000001 76f100dc [ 303.318266][ T4588] 1fe0: 76f0fe88 76f0fe78 00018ebc 00130820 60000010 00000008 00000000 00000000 [ 303.318799][ T4588] Call trace: [ 303.319315][ T4588] [<8149f188>] (subdev_8255_io) from [<8149eec4>] (subdev_8255_do_config+0x58/0x60) [ 303.320090][ T4588] r7:00000000 r6:8301a480 r5:0000f000 r4:8149f188 [ 303.320517][ T4588] [<8149ee6c>] (subdev_8255_do_config) from [<8149f27c>] (subdev_8255_io_init+0x88/0x98) [ 303.321000][ T4588] r4:863ec000 [ 303.321212][ T4588] [<8149f1f4>] (subdev_8255_io_init) from [<8149f42c>] (dev_8255_attach+0x74/0x138) [ 303.321647][ T4588] r7:00000000 r6:863ec000 r5:00000000 r4:8301a480 [ 303.321963][ T4588] [<8149f3b8>] (dev_8255_attach) from [<8148ddcc>] (comedi_device_attach+0x108/0x244) [ 303.322273][ T4588] r10:82d30dfc r9:00000000 r8:8301a480 r7:dfd31d90 r6:00000000 r5:8301a480 [ 303.322508][ T4588] r4:82bd9600 [ 303.322603][ T4588] [<8148dcc4>] (comedi_device_attach) from [<814895d0>] (do_devconfig_ioctl+0xcc/0x218) [ 303.322842][ T4588] r10:847b9880 r9:00000008 r8:00000001 r7:40946400 r6:b5403587 r5:8301a480 [ 303.323048][ T4588] r4:20000440 [ 303.323181][ T4588] [<81489504>] (do_devconfig_ioctl) from [<8148a8f8>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 303.323494][ T4588] r8:00000001 r7:40946400 r6:20000440 r5:8301a480 r4:85caaf80 [ 303.323949][ T4588] [<8148a5a4>] (comedi_unlocked_ioctl) from [<805bab08>] (sys_ioctl+0x244/0xb5c) [ 303.324501][ T4588] r10:847b9880 r9:00000008 r8:85caaf80 r7:20000440 r6:40946400 r5:85caaf81 [ 303.324841][ T4588] r4:00000000 [ 303.325010][ T4588] [<805ba8c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 303.325414][ T4588] Exception stack(0xdfd31fa8 to 0xdfd31ff0) [ 303.325678][ T4588] 1fa0: 00000000 00000000 00000008 40946400 20000440 00000000 [ 303.326066][ T4588] 1fc0: 00000000 00000000 00356450 00000036 00356418 00000000 00000001 76f100dc [ 303.326443][ T4588] 1fe0: 76f0fe88 76f0fe78 00018ebc 00130820 [ 303.326731][ T4588] r10:00000036 r9:847b9880 r8:8020029c r7:00000036 r6:00356450 r5:00000000 [ 303.327086][ T4588] r4:00000000 [ 303.327577][ T4588] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 303.329651][ T4588] ---[ end trace 0000000000000000 ]--- [ 303.482809][ T4588] Kernel panic - not syncing: Fatal exception [ 303.485794][ T4588] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:48:48 Registers: info registers vcpu 0 CPU#0 R00=00000004 R01=76809008 R02=00040000 R03=00000000 R04=00000000 R05=00000000 R06=00000000 R07=00000003 R08=00d3aac0 R09=00000000 R10=00000001 R11=7eb012bc R12=00000001 R13=7eb01148 R14=00000000 R15=7694f590 PSR=20030010 --C- A S usr32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=00000000 s03=00000000 d01=0000000000000000 s04=ef0cee00 s05=ef0cee00 d02=ef0cee00ef0cee00 s06=08040200 s07=80402000 d03=8040200008040200 s08=00000c00 s09=c0200c03 d04=c0200c0300000c00 s10=08040201 s11=80402000 d05=8040200008040201 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=2017ef60 R02=0000001c R03=00000000 R04=dfbf5ee8 R05=dfbf5e18 R06=dfbf5e14 R07=2017ef60 R08=b5403587 R09=847f0c40 R10=00010106 R11=dfbf5e04 R12=00000004 R13=dfbf5db8 R14=00000000 R15=81621fb0 PSR=40000013 -Z-- A S svc32 s00=72657475 s01=76612073 d00=7661207372657475 s02=00000001 s03=76eeea88 d01=76eeea8800000001 s04=00fe8100 s05=00fe8100 d02=00fe810000fe8100 s06=00000001 s07=80000000 d03=8000000000000001 s08=c0300c02 s09=00000000 d04=00000000c0300c02 s10=00000000 s11=00000000 d05=0000000000000000 s12=08040201 s13=80402010 d06=8040201008040201 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000