last executing test programs: 1.949094498s ago: executing program 1 (id=88): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0xfffffffd, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}}, 0x20040010) 1.837925508s ago: executing program 1 (id=89): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040341a05f7000000000001090224000100008000090400ee010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x0, 0x22, 0xf, {0xf, 0x9, "1733c39a09c3389a4bede03d6c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 695.083198ms ago: executing program 0 (id=90): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000180)={0xffff, 0x0}) 694.750048ms ago: executing program 1 (id=91): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) 588.562938ms ago: executing program 0 (id=92): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x4}) 588.185358ms ago: executing program 1 (id=93): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 468.638419ms ago: executing program 0 (id=94): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@can_newroute={0x2c, 0x18, 0x1, 0x70bd25, 0x25dffbfc, {0x1d, 0x1, 0x5}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1}, 0x5, 0x2, 0x0, 0x0, "3a06efc9b6ef9aa0"}, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) 399.794335ms ago: executing program 1 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x48, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x12, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x1, 0x3, 0x25c, @val={0x10, 0x1, 0x50}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 399.497165ms ago: executing program 0 (id=96): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000002c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7f, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x118) 248.248748ms ago: executing program 0 (id=97): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") 130.986199ms ago: executing program 0 (id=98): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, r0) 0s ago: executing program 1 (id=99): syz_usb_connect(0x5, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xbd, 0xe2, 0x34, 0x10, 0x424, 0xcf18, 0x255e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0xfb, 0xb0, 0x5, [{{0x9, 0x4, 0xc4, 0x5, 0x2, 0xec, 0xd4, 0x6c, 0x6, [], [{{0x9, 0x5, 0x5, 0x1, 0x10, 0x1, 0x5b, 0x1}}, {{0x9, 0x5, 0x3, 0x8, 0x0, 0x7, 0xb5, 0x9}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [ 47.507333][ T31] audit: type=1400 audit(47.410:56): avc: denied { read write } for pid=3076 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.510779][ T31] audit: type=1400 audit(47.410:57): avc: denied { open } for pid=3076 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:48892' (ED25519) to the list of known hosts. [ 60.167404][ T31] audit: type=1400 audit(60.070:58): avc: denied { name_bind } for pid=3079 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 61.818188][ T31] audit: type=1400 audit(61.720:59): avc: denied { execute } for pid=3080 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.821887][ T31] audit: type=1400 audit(61.720:60): avc: denied { execute_no_trans } for pid=3080 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.107328][ T31] audit: type=1400 audit(64.010:61): avc: denied { mounton } for pid=3080 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.110018][ T31] audit: type=1400 audit(64.010:62): avc: denied { mount } for pid=3080 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.121098][ T3080] cgroup: Unknown subsys name 'net' [ 64.126116][ T31] audit: type=1400 audit(64.030:63): avc: denied { unmount } for pid=3080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.336522][ T3080] cgroup: Unknown subsys name 'cpuset' [ 64.342838][ T3080] cgroup: Unknown subsys name 'hugetlb' [ 64.343713][ T3080] cgroup: Unknown subsys name 'rlimit' [ 64.575513][ T31] audit: type=1400 audit(64.480:64): avc: denied { setattr } for pid=3080 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.578050][ T31] audit: type=1400 audit(64.480:65): avc: denied { mounton } for pid=3080 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.584875][ T31] audit: type=1400 audit(64.480:66): avc: denied { mount } for pid=3080 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.768358][ T3082] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 64.775445][ T31] audit: type=1400 audit(64.680:67): avc: denied { relabelto } for pid=3082 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 71.986308][ T3080] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.871982][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 73.880212][ T31] audit: type=1400 audit(73.780:71): avc: denied { execmem } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.945977][ T31] audit: type=1400 audit(73.850:72): avc: denied { read } for pid=3085 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.952532][ T31] audit: type=1400 audit(73.860:73): avc: denied { open } for pid=3085 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.965762][ T31] audit: type=1400 audit(73.870:74): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.998130][ T31] audit: type=1400 audit(73.900:75): avc: denied { module_request } for pid=3085 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 74.001466][ T31] audit: type=1400 audit(73.900:76): avc: denied { module_request } for pid=3086 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 74.079835][ T31] audit: type=1400 audit(73.980:77): avc: denied { sys_module } for pid=3085 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.861116][ T31] audit: type=1400 audit(74.760:78): avc: denied { ioctl } for pid=3085 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=675 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.164661][ T3085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.174851][ T3086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.183912][ T3085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.215721][ T3086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.083328][ T3086] hsr_slave_0: entered promiscuous mode [ 77.086839][ T3086] hsr_slave_1: entered promiscuous mode [ 77.187115][ T3085] hsr_slave_0: entered promiscuous mode [ 77.188639][ T3085] hsr_slave_1: entered promiscuous mode [ 77.192782][ T3085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.193133][ T3085] Cannot create hsr debugfs directory [ 77.627990][ T31] audit: type=1400 audit(77.530:79): avc: denied { create } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.628680][ T31] audit: type=1400 audit(77.530:80): avc: denied { write } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.635745][ T3086] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.650730][ T3086] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.668386][ T3086] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.677129][ T3086] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.764981][ T3085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.778374][ T3085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.790233][ T3085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.801893][ T3085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.461298][ T3086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.542358][ T3085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.147811][ T3085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.807263][ T3085] veth0_vlan: entered promiscuous mode [ 80.833117][ T3085] veth1_vlan: entered promiscuous mode [ 80.905131][ T3085] veth0_macvtap: entered promiscuous mode [ 80.923136][ T3085] veth1_macvtap: entered promiscuous mode [ 80.983521][ T3085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.984194][ T3085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.984351][ T3085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.984440][ T3085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.145675][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 81.146045][ T31] audit: type=1400 audit(81.040:82): avc: denied { mount } for pid=3085 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.152808][ T31] audit: type=1400 audit(81.060:83): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/syzkaller.kyYsf2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.162454][ T31] audit: type=1400 audit(81.070:84): avc: denied { mount } for pid=3085 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.172624][ T3086] veth0_vlan: entered promiscuous mode [ 81.185465][ T31] audit: type=1400 audit(81.090:85): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/syzkaller.kyYsf2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 81.185781][ T31] audit: type=1400 audit(81.090:86): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/syzkaller.kyYsf2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 81.201764][ T3086] veth1_vlan: entered promiscuous mode [ 81.225181][ T31] audit: type=1400 audit(81.130:87): avc: denied { unmount } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.245552][ T31] audit: type=1400 audit(81.150:88): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 81.248158][ T31] audit: type=1400 audit(81.150:89): avc: denied { mount } for pid=3085 comm="syz-executor" name="/" dev="gadgetfs" ino=1853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 81.271071][ T31] audit: type=1400 audit(81.180:90): avc: denied { mount } for pid=3085 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.272834][ T3086] veth0_macvtap: entered promiscuous mode [ 81.280658][ T31] audit: type=1400 audit(81.180:91): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 81.286210][ T3086] veth1_macvtap: entered promiscuous mode [ 81.323323][ T3086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.323553][ T3086] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.324919][ T3086] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.324995][ T3086] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.417791][ T3085] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.602567][ T3779] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 83.886203][ T3793] process 'syz.1.2' launched './file0' with NULL argv: empty string added [ 93.838482][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 93.840398][ T31] audit: type=1400 audit(93.740:108): avc: denied { mounton } for pid=3796 comm="syz.1.6" path="/1/file0" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.872645][ T31] audit: type=1400 audit(93.780:109): avc: denied { unmount } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 94.100063][ T31] audit: type=1400 audit(94.000:110): avc: denied { read write } for pid=3802 comm="syz.1.8" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.100665][ T31] audit: type=1400 audit(94.000:111): avc: denied { open } for pid=3802 comm="syz.1.8" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.110415][ T31] audit: type=1400 audit(94.010:112): avc: denied { ioctl } for pid=3802 comm="syz.1.8" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.113119][ T3803] binder: 3802:3803 ioctl 4018620d 0 returned -22 [ 94.124173][ T31] audit: type=1400 audit(94.030:113): avc: denied { allowed } for pid=3802 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.134500][ T31] audit: type=1400 audit(94.040:114): avc: denied { create } for pid=3802 comm="syz.1.8" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.142202][ T31] audit: type=1400 audit(94.050:115): avc: denied { map } for pid=3802 comm="syz.1.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=1903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.142636][ T31] audit: type=1400 audit(94.050:116): avc: denied { read write } for pid=3802 comm="syz.1.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=1903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.311205][ T31] audit: type=1400 audit(94.220:117): avc: denied { create } for pid=3804 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.426034][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 99.426474][ T31] audit: type=1400 audit(99.330:124): avc: denied { create } for pid=3836 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.443074][ T31] audit: type=1400 audit(99.350:125): avc: denied { setopt } for pid=3836 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.454854][ T31] audit: type=1400 audit(99.360:126): avc: denied { connect } for pid=3836 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.697680][ T31] audit: type=1400 audit(102.600:127): avc: denied { name_bind } for pid=3852 comm="syz.1.24" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 105.357226][ T3861] netlink: 224 bytes leftover after parsing attributes in process `syz.1.27'. [ 106.207364][ T31] audit: type=1400 audit(106.110:128): avc: denied { create } for pid=3865 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 106.213758][ T31] audit: type=1400 audit(106.120:129): avc: denied { bind } for pid=3865 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 106.417976][ T31] audit: type=1400 audit(106.320:130): avc: denied { ioctl } for pid=3876 comm="syz.1.34" path="socket:[3103]" dev="sockfs" ino=3103 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.435767][ T31] audit: type=1400 audit(106.340:131): avc: denied { write } for pid=3876 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.790673][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.950339][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 106.995462][ T9] usb 2-1: config index 0 descriptor too short (expected 255, got 36) [ 106.996021][ T9] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 106.996386][ T9] usb 2-1: config 254 has no interface number 0 [ 106.996807][ T9] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 106.997038][ T9] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 106.997182][ T9] usb 2-1: config 254 interface 235 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.997302][ T9] usb 2-1: config 254 interface 235 has no altsetting 0 [ 107.041717][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 107.041953][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.042134][ T9] usb 2-1: Product: syz [ 107.042238][ T9] usb 2-1: Manufacturer: syz [ 107.042357][ T9] usb 2-1: SerialNumber: syz [ 107.064046][ T9] usbtest 2-1:254.235: couldn't get endpoints, -22 [ 107.064523][ T9] usbtest 2-1:254.235: probe with driver usbtest failed with error -22 [ 107.271101][ T9] usb 2-1: USB disconnect, device number 2 [ 108.643888][ T3900] macsec0: entered promiscuous mode [ 108.645913][ T3900] macsec0: entered allmulticast mode [ 108.646578][ T3900] veth1_macvtap: entered allmulticast mode [ 119.992144][ T31] audit: type=1400 audit(119.900:132): avc: denied { append } for pid=3908 comm="syz.0.41" name="fb0" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.000231][ T31] audit: type=1400 audit(119.900:133): avc: denied { map } for pid=3908 comm="syz.0.41" path="/dev/fb0" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.003050][ T31] audit: type=1400 audit(119.900:134): avc: denied { execute } for pid=3908 comm="syz.0.41" path="/dev/fb0" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.011843][ T3909] mmap: syz.0.41 (3909) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.520015][ T95] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.670192][ T95] usb 1-1: Using ep0 maxpacket: 32 [ 120.686764][ T95] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.706836][ T95] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 120.707219][ T95] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.707545][ T95] usb 1-1: Product: syz [ 120.707759][ T95] usb 1-1: Manufacturer: syz [ 120.707973][ T95] usb 1-1: SerialNumber: syz [ 120.715265][ T95] usb 1-1: config 0 descriptor?? [ 120.725966][ T95] usb 1-1: bad CDC descriptors [ 120.730113][ T95] usb 1-1: unsupported MDLM descriptors [ 120.928513][ T97] usb 1-1: USB disconnect, device number 2 [ 121.360244][ T97] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.518513][ T97] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 121.520558][ T97] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.526230][ T97] usb 1-1: config 0 descriptor?? [ 121.772276][ T97] kaweth 1-1:0.0: Firmware present in device. [ 121.954609][ T97] kaweth 1-1:0.0: Statistics collection: 0 [ 121.955834][ T97] kaweth 1-1:0.0: Multicast filter limit: 0 [ 121.956799][ T97] kaweth 1-1:0.0: MTU: 0 [ 121.957556][ T97] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 122.564461][ T97] kaweth 1-1:0.0: Error setting receive filter [ 122.565699][ T97] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 122.580821][ T97] usb 1-1: USB disconnect, device number 3 [ 122.695090][ T3941] netlink: 40 bytes leftover after parsing attributes in process `syz.0.44'. [ 122.695987][ T3941] Zero length message leads to an empty skb [ 126.933477][ T31] audit: type=1400 audit(126.840:135): avc: denied { name_bind } for pid=3972 comm="syz.0.47" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 126.937416][ T31] audit: type=1400 audit(126.840:136): avc: denied { node_bind } for pid=3972 comm="syz.0.47" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 127.470573][ T12] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.630372][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 127.680152][ T12] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 127.680644][ T12] usb 1-1: config 0 has no interface number 0 [ 127.681248][ T12] usb 1-1: config 0 interface 184 has no altsetting 0 [ 127.724064][ T12] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 127.724467][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.724835][ T12] usb 1-1: Product: syz [ 127.725038][ T12] usb 1-1: Manufacturer: syz [ 127.725134][ T12] usb 1-1: SerialNumber: syz [ 127.733372][ T12] usb 1-1: config 0 descriptor?? [ 127.827444][ T12] smsc75xx v1.0.0 [ 129.154786][ T12] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 129.155212][ T12] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 129.156865][ T12] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 129.157014][ T12] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 129.157169][ T12] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 129.157368][ T12] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 129.157810][ T12] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 129.178710][ T12] usb 1-1: USB disconnect, device number 4 [ 129.775349][ T97] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.993898][ T97] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.999862][ T97] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 130.000258][ T97] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 130.000355][ T97] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.000536][ T97] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.000711][ T97] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.008144][ T97] usb 1-1: config 0 descriptor?? [ 130.481779][ T97] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.485120][ T97] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.485383][ T97] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.485585][ T97] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.485770][ T97] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.485950][ T97] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.486130][ T97] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.486408][ T97] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.486621][ T97] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.486807][ T97] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.486987][ T97] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.487167][ T97] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.487348][ T97] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.487549][ T97] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.487749][ T97] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.515975][ T97] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 130.585154][ T97] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 130.707080][ T12] usb 1-1: USB disconnect, device number 5 [ 134.641851][ T31] audit: type=1400 audit(134.550:137): avc: denied { create } for pid=4029 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.636912][ T31] audit: type=1400 audit(135.540:138): avc: denied { read } for pid=4029 comm="syz.0.55" path="socket:[3225]" dev="sockfs" ino=3225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.102755][ T31] audit: type=1400 audit(136.010:139): avc: denied { create } for pid=4037 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 136.110210][ T31] audit: type=1400 audit(136.010:140): avc: denied { create } for pid=4037 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 136.561011][ T31] audit: type=1400 audit(136.470:141): avc: denied { write } for pid=4037 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 146.769713][ T1785] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 146.920215][ T1785] usb 2-1: Using ep0 maxpacket: 16 [ 146.930730][ T1785] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 146.931154][ T1785] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.931487][ T1785] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.957250][ T1785] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.957654][ T1785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.957915][ T1785] usb 2-1: Product: syz [ 146.958116][ T1785] usb 2-1: Manufacturer: syz [ 146.958245][ T1785] usb 2-1: SerialNumber: syz [ 147.417817][ T1785] usb 2-1: 0:2 : does not exist [ 148.659792][ T78] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.681781][ T1785] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 148.721462][ T1785] usb 2-1: USB disconnect, device number 3 [ 148.752406][ T31] audit: type=1400 audit(148.660:142): avc: denied { create } for pid=4071 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.754819][ T31] audit: type=1400 audit(148.660:143): avc: denied { setopt } for pid=4071 comm="syz.1.64" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.811388][ T78] usb 1-1: Using ep0 maxpacket: 32 [ 148.821670][ T78] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.822039][ T78] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.822590][ T78] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 148.822678][ T78] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.828643][ T78] usb 1-1: config 0 descriptor?? [ 148.839669][ T78] hub 1-1:0.0: USB hub found [ 149.044200][ T78] hub 1-1:0.0: 1 port detected [ 149.090250][ T1785] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 149.267691][ T1785] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 149.268377][ T1785] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.268790][ T1785] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.295837][ T1785] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 149.296266][ T1785] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=225 [ 149.296663][ T1785] usb 2-1: Manufacturer: syz [ 149.296739][ T1785] usb 2-1: SerialNumber: syz [ 149.307093][ T1785] usb 2-1: config 0 descriptor?? [ 149.528802][ T78] usb 2-1: USB disconnect, device number 4 [ 149.664934][ T910] hub 1-1:0.0: activate --> -90 [ 150.074709][ T3775] usb 1-1: USB disconnect, device number 6 [ 150.328752][ T95] usb 1-1-port1: config error [ 150.526035][ T31] audit: type=1400 audit(150.430:144): avc: denied { ioctl } for pid=4108 comm="syz.1.67" path="socket:[2552]" dev="sockfs" ino=2552 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.820294][ T3775] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 150.990459][ T3775] usb 1-1: Using ep0 maxpacket: 16 [ 151.023145][ T3775] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.024903][ T3775] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 151.026105][ T3775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.056151][ T3775] usb 1-1: config 0 descriptor?? [ 151.515643][ T3775] corsair 0003:1B1C:1B3E.0002: unknown main item tag 0x0 [ 151.525947][ T3775] corsair 0003:1B1C:1B3E.0002: unknown main item tag 0x0 [ 151.526878][ T3775] corsair 0003:1B1C:1B3E.0002: item fetching failed at offset 2/5 [ 151.540409][ T3775] corsair 0003:1B1C:1B3E.0002: parse failed [ 151.541140][ T3775] corsair 0003:1B1C:1B3E.0002: probe with driver corsair failed with error -22 [ 151.751275][ T78] usb 1-1: USB disconnect, device number 7 [ 155.029816][ T1785] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 155.190794][ T1785] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 155.192322][ T1785] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 155.195358][ T1785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.725585][ T31] audit: type=1400 audit(155.630:145): avc: denied { create } for pid=4141 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 155.738426][ T31] audit: type=1400 audit(155.640:146): avc: denied { write } for pid=4141 comm="syz.1.70" path="socket:[3319]" dev="sockfs" ino=3319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 162.310205][ T1785] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 162.460279][ T1785] usb 2-1: Using ep0 maxpacket: 16 [ 162.489861][ T1785] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 162.491242][ T1785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.493931][ T1785] usb 2-1: Product: syz [ 162.494052][ T1785] usb 2-1: Manufacturer: syz [ 162.494126][ T1785] usb 2-1: SerialNumber: syz [ 162.503890][ T1785] usb 2-1: config 0 descriptor?? [ 162.512550][ T1785] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 162.515015][ T1785] usb 2-1: Detected FT232H [ 162.717047][ T1785] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 163.136547][ T1785] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 163.333881][ T4101] usb 2-1: USB disconnect, device number 5 [ 163.371472][ T4101] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 163.375578][ T4101] ftdi_sio 2-1:0.0: device disconnected [ 163.762354][ T4101] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 163.910676][ T4101] usb 2-1: Using ep0 maxpacket: 32 [ 163.919012][ T4101] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 163.921916][ T4101] usb 2-1: config 0 has no interface number 0 [ 163.933346][ T4101] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 163.934543][ T4101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.935681][ T4101] usb 2-1: Product: syz [ 163.936742][ T4101] usb 2-1: Manufacturer: syz [ 163.937511][ T4101] usb 2-1: SerialNumber: syz [ 163.944777][ T4101] usb 2-1: config 0 descriptor?? [ 164.165110][ T4101] usb 2-1: USB disconnect, device number 6 [ 165.026247][ T31] audit: type=1400 audit(164.930:147): avc: denied { bind } for pid=4198 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.035544][ T31] audit: type=1400 audit(164.940:148): avc: denied { listen } for pid=4198 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.041815][ T31] audit: type=1400 audit(164.950:149): avc: denied { accept } for pid=4198 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.442834][ T3775] usb 1-1: USB disconnect, device number 8 [ 165.559839][ T31] audit: type=1326 audit(165.460:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.1.75" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131f20 code=0x0 [ 169.990007][ T4101] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.180829][ T4101] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 170.182343][ T4101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.184450][ T4101] usb 1-1: Product: syz [ 170.185288][ T4101] usb 1-1: Manufacturer: syz [ 170.185985][ T4101] usb 1-1: SerialNumber: syz [ 174.232412][ T31] audit: type=1400 audit(174.140:151): avc: denied { ioctl } for pid=4237 comm="syz.1.84" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=2622 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 175.870610][ T95] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 176.020278][ T95] usb 2-1: Using ep0 maxpacket: 32 [ 176.032290][ T95] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 176.032804][ T95] usb 2-1: config 0 has no interface number 0 [ 176.033097][ T95] usb 2-1: config 0 interface 184 has no altsetting 0 [ 176.051229][ T95] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 176.051641][ T95] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.051905][ T95] usb 2-1: Product: syz [ 176.052538][ T95] usb 2-1: Manufacturer: syz [ 176.052647][ T95] usb 2-1: SerialNumber: syz [ 176.061644][ T95] usb 2-1: config 0 descriptor?? [ 176.068133][ T95] smsc75xx v1.0.0 [ 176.898322][ T95] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 176.898859][ T95] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 176.905618][ T95] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 176.905806][ T95] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 176.905890][ T95] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 176.905956][ T95] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 176.906289][ T95] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 176.914929][ T95] usb 2-1: USB disconnect, device number 7 [ 177.000350][ T31] audit: type=1400 audit(176.900:152): avc: denied { create } for pid=4254 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.004812][ T31] audit: type=1400 audit(176.910:153): avc: denied { ioctl } for pid=4254 comm="syz.1.86" path="socket:[3363]" dev="sockfs" ino=3363 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.141053][ T31] audit: type=1400 audit(177.040:154): avc: denied { write } for pid=4254 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.719911][ T95] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 178.879610][ T95] usb 2-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.879994][ T95] usb 2-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.880307][ T95] usb 2-1: config 0 interface 0 has no altsetting 0 [ 178.880543][ T95] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 178.880695][ T95] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.887549][ T95] usb 2-1: config 0 descriptor?? [ 179.323632][ T95] acrux 0003:1A34:F705.0003: item fetching failed at offset 5/7 [ 179.324381][ T95] acrux 0003:1A34:F705.0003: parse failed [ 179.324532][ T95] acrux 0003:1A34:F705.0003: probe with driver acrux failed with error -22 [ 179.509023][ T9] usb 1-1: USB disconnect, device number 9 [ 179.541046][ T1785] usb 2-1: USB disconnect, device number 8 [ 179.694018][ T31] audit: type=1400 audit(179.600:155): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46124 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 179.703640][ T31] audit: type=1400 audit(179.600:156): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=127.0.0.1 src=46124 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 179.753999][ T4295] capability: warning: `syz.0.92' uses deprecated v2 capabilities in a way that may be insecure [ 180.550197][ T1785] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 180.700029][ T1785] usb 2-1: Using ep0 maxpacket: 16 [ 180.710499][ T1785] usb 2-1: unable to get BOS descriptor or descriptor too short [ 180.728203][ T1785] usb 2-1: config 5 has an invalid interface number: 196 but max is 0 [ 180.728701][ T1785] usb 2-1: config 5 has no interface number 0 [ 180.729049][ T1785] usb 2-1: config 5 interface 196 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 180.729707][ T1785] usb 2-1: config 5 interface 196 has no altsetting 0 [ 180.761762][ T1785] usb 2-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=25.5e [ 180.763395][ T1785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.766112][ T1785] usb 2-1: Product: syz [ 180.768461][ T1785] usb 2-1: Manufacturer: syz [ 180.771043][ T1785] usb 2-1: SerialNumber: syz [ 181.016197][ T1785] usb 2-1: USB disconnect, device number 9 [ ** replaying previous printk message ** [ 181.028347][ T1785] ------------[ cut here ]------------ [ 181.029078][ T1785] WARNING: CPU: 0 PID: 1785 at lib/refcount.c:28 refcount_warn_saturate+0x13c/0x174 [ 181.031719][ T1785] refcount_t: underflow; use-after-free. [ 181.032092][ T1785] Modules linked in: [ 181.034298][ T1785] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 181.035589][ T1785] CPU: 0 UID: 0 PID: 1785 Comm: kworker/0:3 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT [ 181.036138][ T1785] Hardware name: ARM-Versatile Express [ 181.036854][ T1785] Workqueue: usb_hub_wq hub_event [ 181.037405][ T1785] Call trace: [ 181.037870][ T1785] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 181.038460][ T1785] r7:00000000 r6:8282083c r5:00000000 r4:822599f8 [ 181.038810][ T1785] [<80201ae4>] (show_stack) from [<8021fdd4>] (dump_stack_lvl+0x54/0x7c) [ 181.039229][ T1785] [<8021fd80>] (dump_stack_lvl) from [<8021fe14>] (dump_stack+0x18/0x1c) [ 181.039709][ T1785] r5:00000000 r4:82a6cd18 [ 181.039968][ T1785] [<8021fdfc>] (dump_stack) from [<80202614>] (panic+0x120/0x374) [ 181.040353][ T1785] [<802024f4>] (panic) from [<802585b8>] (get_taint+0x0/0x1c) [ 181.040851][ T1785] r3:8280c684 r2:00000001 r1:82240524 r0:82247ed4 [ 181.041237][ T1785] r7:808c08f4 [ 181.041414][ T1785] [<80258544>] (check_panic_on_warn) from [<8025871c>] (__warn+0x80/0x188) [ 181.041798][ T1785] [<8025869c>] (__warn) from [<80258a0c>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 181.042233][ T1785] r8:00000009 r7:822b1a1c r6:eaf55bfc r5:83838c00 r4:00000000 [ 181.042814][ T1785] [<80258828>] (warn_slowpath_fmt) from [<808c08f4>] (refcount_warn_saturate+0x13c/0x174) [ 181.043334][ T1785] r10:00000001 r9:829ca328 r8:85676088 r7:85675074 r6:852e4fb4 r5:85675000 [ 181.043776][ T1785] r4:85761000 [ 181.043958][ T1785] [<808c07b8>] (refcount_warn_saturate) from [<819fe468>] (kobject_put+0x158/0x1f4) [ 181.044680][ T1785] [<819fe310>] (kobject_put) from [<80b30fd0>] (put_device+0x18/0x1c) [ 181.045173][ T1785] r7:85675074 r6:852e4fb4 r5:85675000 r4:852e4800 [ 181.045496][ T1785] [<80b30fb8>] (put_device) from [<8141a3e4>] (hdm_disconnect+0x90/0x9c) [ 181.045993][ T1785] [<8141a354>] (hdm_disconnect) from [<80e8d354>] (usb_unbind_interface+0x84/0x2b4) [ 181.046496][ T1785] r7:85675074 r6:85675030 r5:00000000 r4:85676000 [ 181.046805][ T1785] [<80e8d2d0>] (usb_unbind_interface) from [<80b39058>] (device_remove+0x64/0x6c) [ 181.047305][ T1785] r10:00000001 r9:85676088 r8:00000044 r7:85675074 r6:829ca328 r5:00000000 [ 181.047730][ T1785] r4:85675030 [ 181.047900][ T1785] [<80b38ff4>] (device_remove) from [<80b3a548>] (device_release_driver_internal+0x18c/0x200) [ 181.049505][ T1785] r5:00000000 r4:85675030 [ 181.049894][ T1785] [<80b3a3bc>] (device_release_driver_internal) from [<80b3a5d4>] (device_release_driver+0x18/0x1c) [ 181.050327][ T1785] r9:85676088 r8:8335cc40 r7:8335cc38 r6:8335cc0c r5:85675030 r4:8335cc30 [ 181.050628][ T1785] [<80b3a5bc>] (device_release_driver) from [<80b386ac>] (bus_remove_device+0xcc/0x120) [ 181.051007][ T1785] [<80b385e0>] (bus_remove_device) from [<80b32a08>] (device_del+0x148/0x38c) [ 181.051369][ T1785] r9:85676088 r8:83838c00 r7:04208060 r6:00000000 r5:85675030 r4:85675074 [ 181.051684][ T1785] [<80b328c0>] (device_del) from [<80e8ada4>] (usb_disable_device+0xd4/0x1e8) [ 181.052057][ T1785] r10:00000001 r9:00000000 r8:00000000 r7:85675000 r6:85676000 r5:84811c48 [ 181.052361][ T1785] r4:00000002 [ 181.052524][ T1785] [<80e8acd0>] (usb_disable_device) from [<80e7fb20>] (usb_disconnect+0xec/0x29c) [ 181.052948][ T1785] r9:85760200 r8:856760cc r7:83d9e000 r6:85676088 r5:85676000 r4:60000113 [ 181.053299][ T1785] [<80e7fa34>] (usb_disconnect) from [<80e827e0>] (hub_event+0xe78/0x194c) [ 181.053703][ T1785] r10:00000001 r9:00000100 r8:83dbff00 r7:85676000 r6:83d9d800 r5:83d9e210 [ 181.054085][ T1785] r4:00000001 [ 181.054293][ T1785] [<80e81968>] (hub_event) from [<8027e2e8>] (process_one_work+0x1b4/0x4f4) [ 181.054790][ T1785] r10:8335ce70 r9:8326f405 r8:83838c00 r7:dddced40 r6:8326f400 r5:83dbff00 [ 181.055141][ T1785] r4:8423fe00 [ 181.055361][ T1785] [<8027e134>] (process_one_work) from [<8027ef30>] (worker_thread+0x1fc/0x3d8) [ 181.055778][ T1785] r10:61c88647 r9:83838c00 r8:8423fe2c r7:82804d40 r6:dddced40 r5:dddced60 [ 181.056476][ T1785] r4:8423fe00 [ 181.056755][ T1785] [<8027ed34>] (worker_thread) from [<80285f5c>] (kthread+0x12c/0x280) [ 181.057114][ T1785] r10:00000000 r9:8423fe00 r8:8027ed34 r7:df849e60 r6:8423fe80 r5:83838c00 [ 181.057529][ T1785] r4:00000001 [ 181.057706][ T1785] [<80285e30>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 181.058237][ T1785] Exception stack(0xeaf55fb0 to 0xeaf55ff8) [ 181.058703][ T1785] 5fa0: 00000000 00000000 00000000 00000000 [ 181.059341][ T1785] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 181.059780][ T1785] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 181.060163][ T1785] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80285e30 [ 181.060562][ T1785] r4:84241e80 [ 181.063779][ T1785] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:50:12 Registers: info registers vcpu 0 CPU#0 R00=82a6d154 R01=00000000 R02=00000000 R03=83838c00 R04=83838c00 R05=822599f8 R06=829f14e7 R07=00000000 R08=82247ed4 R09=000006f9 R10=00000000 R11=eaf55b44 R12=00000014 R13=eaf55ae8 R14=819f7e38 R15=81a18dfc PSR=20000193 --C- A S svc32 s00=69766564 s01=6e206563 d00=6e20656369766564 s02=7250202c s03=6375646f d01=6375646f7250202c s04=7375205d s05=2d322062 d02=2d3220627375205d s06=63203a31 s07=69666e6f d03=69666e6f63203a31 s08=20352067 s09=65746e69 d04=65746e6920352067 s10=63616672 s11=39312065 d05=3931206563616672 s12=61682036 s13=6f6e2073 d06=6f6e207361682036 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=82267c3c R01=80007ff8 R02=00000000 R03=00000000 R04=ffedc000 R05=841cc800 R06=00000001 R07=841cc800 R08=8556b300 R09=dfb69d98 R10=00000003 R11=dfb69cc4 R12=dfb69ca8 R13=dfb69c90 R14=804c3774 R15=8029da28 PSR=60000013 -ZC- A S svc32 s00=ad045181 s01=0a495649 d00=0a495649ad045181 s02=00080004 s03=000c0000 d01=000c000000080004 s04=000e0014 s05=001c0000 d02=001c0000000e0014 s06=00140000 s07=1d400000 d03=1d40000000140000 s08=00002e8d s09=00370000 d04=0037000000002e8d s10=00000000 s11=00000000 d05=0000000000000000 s12=00010000 s13=00200000 d06=0020000000010000 s14=00080000 s15=0000000a d07=0000000a00080000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=001dc003 s33=d0030010 d16=d0030010001dc003 s34=0110001d s35=001de003 d17=001de0030110001d s36=f0030010 s37=0008001d d18=0008001df0030010 s38=001df803 s39=0d900108 d19=0d900108001df803 s40=08060601 s41=00000006 d20=0000000608060601 s42=02040800 s43=6cc07480 d21=6cc0748002040800 s44=08000608 s45=02080004 d22=0208000408000608 s46=03000800 s47=0d838080 d23=0d83808003000800 s48=ec25591b s49=0a5037c2 d24=0a5037c2ec25591b s50=b7d94a2d s51=0b55ac40 d25=0b55ac40b7d94a2d s52=8fcb03a5 s53=332af47c d26=332af47c8fcb03a5 s54=9fb28a1e s55=6a0d6201 d27=6a0d62019fb28a1e s56=7b521a7f s57=1bc6e3f6 d28=1bc6e3f67b521a7f s58=de20400e s59=5c88f0b4 d29=5c88f0b4de20400e s60=a2e82492 s61=7099df6b d30=7099df6ba2e82492 s62=9fa7ba89 s63=2a1157e7 d31=2a1157e79fa7ba89 FPSCR: 00000000