last executing test programs: 4.27064902s ago: executing program 3 (id=87): connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setrlimit(0x7, 0x0) io_submit(0x0, 0x0, 0x0) 4.246720242s ago: executing program 3 (id=88): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) 4.246529482s ago: executing program 3 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0xa, 0x5, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x400c804, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffec1, @local, 0xffff8003}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'hsr0\x00', 0x2}, 0x18) 3.82521752s ago: executing program 3 (id=92): lseek(0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000380)="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", 0x10e}, {&(0x7f0000000540)="5ffc3ad4abe503f06ce1a259", 0xc}], 0x2}}, {{0x0, 0x0, &(0x7f0000004e80)=[{0x0}], 0x1}}], 0x2, 0xc840) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) 2.900852102s ago: executing program 3 (id=96): pipe2$9p(0x0, 0x80000) socket$inet(0x2, 0x1, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(r1, &(0x7f00000000c0), &(0x7f0000000300)=0x6e) 1.970391205s ago: executing program 3 (id=103): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x2, 0x6}}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0xe, 0x5, {0x5, 0x1, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.932176428s ago: executing program 1 (id=104): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x6) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffffc2, 0x0, 0xcf, 0xffffffff, 0x5, "0c411be01fbcd2b7cb366b00", 0x1004, 0xffffffff}) 1.822655288s ago: executing program 1 (id=105): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 1.822504448s ago: executing program 1 (id=106): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) 1.768096093s ago: executing program 1 (id=109): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x500000000001, 0x0) 1.700144609s ago: executing program 1 (id=110): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}], 0x1, 0x40000000, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.475111859s ago: executing program 2 (id=114): syz_clone(0xe280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sync() 1.249020339s ago: executing program 2 (id=115): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) 1.23834895s ago: executing program 2 (id=116): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_GETMODE(r0, 0x5601, 0x0) 1.179660805s ago: executing program 2 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.027737979s ago: executing program 2 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket(0x10, 0x3, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x8000, 0x0) 968.303733ms ago: executing program 0 (id=119): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) 718.377126ms ago: executing program 0 (id=120): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) 718.239456ms ago: executing program 0 (id=121): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x66, 0x0) 718.080766ms ago: executing program 0 (id=122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 16.920729ms ago: executing program 1 (id=123): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000082598ff8e30ec473f53669a3f04f91d858b4cbc2742ba206a09ce2c65a062ec0a36f55c2e8404cc5474dc7339511da46643fd222463d357eec42646ecb0ecf7e8086bdd10b0a3a3a2a3628e1bb6198a5da0d25f020242673808f9bac9c0d39158395421a1da59c0cf8963d1a22ddbdc86ef11859d5b7a41e0098a7be832188dd275ad7c499b935507e24d79bf9e9"]) 16.636988ms ago: executing program 0 (id=124): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xe) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r5, 0x0, 0x38f9, 0x0) splice(r4, 0x0, r3, 0x0, 0x7fffffffffffffff, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) 12.525939ms ago: executing program 2 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 0s ago: executing program 0 (id=126): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 21.400512][ T36] audit: type=1400 audit(1771518867.550:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.401758][ T282] cgroup: Unknown subsys name 'net' [ 21.423170][ T36] audit: type=1400 audit(1771518867.550:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.450572][ T36] audit: type=1400 audit(1771518867.570:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.450761][ T282] cgroup: Unknown subsys name 'devices' [ 21.631616][ T282] cgroup: Unknown subsys name 'hugetlb' [ 21.637213][ T282] cgroup: Unknown subsys name 'rlimit' [ 21.790409][ T36] audit: type=1400 audit(1771518867.940:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.813600][ T36] audit: type=1400 audit(1771518867.940:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.838414][ T36] audit: type=1400 audit(1771518867.940:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.847031][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.870489][ T36] audit: type=1400 audit(1771518868.020:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.895974][ T36] audit: type=1400 audit(1771518868.020:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.925240][ T36] audit: type=1400 audit(1771518868.070:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.950818][ T36] audit: type=1400 audit(1771518868.070:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.951219][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.172159][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.179219][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.186511][ T289] bridge_slave_0: entered allmulticast mode [ 23.192924][ T289] bridge_slave_0: entered promiscuous mode [ 23.212607][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.219663][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.226714][ T289] bridge_slave_1: entered allmulticast mode [ 23.233106][ T289] bridge_slave_1: entered promiscuous mode [ 23.239167][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.246221][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.253316][ T291] bridge_slave_0: entered allmulticast mode [ 23.259581][ T291] bridge_slave_0: entered promiscuous mode [ 23.267578][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.274685][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.281815][ T291] bridge_slave_1: entered allmulticast mode [ 23.287999][ T291] bridge_slave_1: entered promiscuous mode [ 23.312593][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.319677][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.326746][ T290] bridge_slave_0: entered allmulticast mode [ 23.333096][ T290] bridge_slave_0: entered promiscuous mode [ 23.342343][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.349412][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.356451][ T290] bridge_slave_1: entered allmulticast mode [ 23.362824][ T290] bridge_slave_1: entered promiscuous mode [ 23.408106][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.415230][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.422354][ T292] bridge_slave_0: entered allmulticast mode [ 23.428555][ T292] bridge_slave_0: entered promiscuous mode [ 23.438030][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.445117][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.452203][ T292] bridge_slave_1: entered allmulticast mode [ 23.458406][ T292] bridge_slave_1: entered promiscuous mode [ 23.587271][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.594345][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.601999][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.609006][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.638812][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.645897][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.653189][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.660215][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.669250][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.676319][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.683600][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.690619][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.711880][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.718941][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.726341][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.733381][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.770197][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.777426][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.786567][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.794171][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.802622][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.822648][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.829695][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.849981][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.857015][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.869105][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.876169][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.892386][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.899521][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.913882][ T292] veth0_vlan: entered promiscuous mode [ 23.922525][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.929570][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.951784][ T291] veth0_vlan: entered promiscuous mode [ 23.976539][ T291] veth1_macvtap: entered promiscuous mode [ 23.983139][ T290] veth0_vlan: entered promiscuous mode [ 23.994236][ T292] veth1_macvtap: entered promiscuous mode [ 24.019069][ T290] veth1_macvtap: entered promiscuous mode [ 24.025766][ T289] veth0_vlan: entered promiscuous mode [ 24.055200][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.078732][ T289] veth1_macvtap: entered promiscuous mode [ 24.228711][ T348] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 24.296826][ T357] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.349474][ T331] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 24.537226][ T331] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 24.548727][ T331] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 24.561824][ T331] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 24.571392][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.286029][ T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.412813][ T340] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.469504][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 25.483083][ T65] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 25.491693][ T65] usb 2-1: config 0 has no interface number 0 [ 25.499421][ T65] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 25.508872][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.517096][ T65] usb 2-1: Product: syz [ 25.521690][ T65] usb 2-1: Manufacturer: syz [ 25.526370][ T65] usb 2-1: SerialNumber: syz [ 25.535964][ T65] usb 2-1: config 0 descriptor?? [ 25.655573][ T340] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 25.664507][ T340] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 25.673773][ T340] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 25.682829][ T340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.559408][ T340] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.710504][ T340] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 26.721674][ T340] usb 4-1: config 0 interface 0 has no altsetting 0 [ 26.728280][ T340] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 26.737357][ T340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.746010][ T340] usb 4-1: config 0 descriptor?? [ 26.751276][ T400] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 27.107267][ T31] usb 3-1: USB disconnect, device number 2 [ 27.161534][ T340] kye 0003:0458:4018.0001: unknown global tag 0xe [ 27.168028][ T340] kye 0003:0458:4018.0001: item 0 0 1 14 parsing failed [ 27.175207][ T340] kye 0003:0458:4018.0001: parse failed [ 27.180810][ T340] kye 0003:0458:4018.0001: probe with driver kye failed with error -22 [ 27.361985][ T340] usb 4-1: USB disconnect, device number 2 [ 27.409425][ T31] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 27.466281][ T407] can: request_module (can-proto-6) failed. [ 27.466802][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 27.466817][ T36] audit: type=1400 audit(1771518873.610:121): avc: denied { create } for pid=406 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.490980][ T409] 9pnet_fd: Insufficient options for proto=fd [ 27.502383][ T45] usb 2-1: USB disconnect, device number 2 [ 27.510378][ T36] audit: type=1400 audit(1771518873.620:122): avc: denied { mounton } for pid=408 comm="syz.1.31" path="/8/file1" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 27.532975][ T36] audit: type=1400 audit(1771518873.660:123): avc: denied { setopt } for pid=410 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.562276][ T36] audit: type=1400 audit(1771518873.710:124): avc: denied { create } for pid=412 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.630697][ T31] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 27.638776][ T31] usb 3-1: config 0 has no interface number 0 [ 27.644919][ T31] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 27.656001][ T31] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 27.666709][ T31] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 27.675949][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.839526][ T31] usb 3-1: config 0 descriptor?? [ 27.844974][ T402] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 28.067888][ T31] usb 3-1: USB disconnect, device number 3 [ 28.193503][ T10] usb 1-1: USB disconnect, device number 2 [ 28.232513][ T36] audit: type=1400 audit(1771518874.380:125): avc: denied { create } for pid=422 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.253995][ T36] audit: type=1400 audit(1771518874.380:126): avc: denied { ioctl } for pid=422 comm="syz.0.36" path="socket:[4418]" dev="sockfs" ino=4418 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.281433][ T36] audit: type=1400 audit(1771518874.400:127): avc: denied { create } for pid=424 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 28.531482][ T36] audit: type=1400 audit(1771518874.680:128): avc: denied { write } for pid=432 comm="syz.1.41" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.645951][ T36] audit: type=1400 audit(1771518874.790:129): avc: denied { read write } for pid=434 comm="syz.0.42" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 28.648377][ T404] hid-generic FFFF:0008:0003.0002: item fetching failed at offset 0/1 [ 28.699906][ T36] audit: type=1400 audit(1771518874.790:130): avc: denied { open } for pid=434 comm="syz.0.42" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 28.721334][ T404] hid-generic FFFF:0008:0003.0002: probe with driver hid-generic failed with error -22 [ 29.359646][ T404] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.531110][ T404] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.534717][ T469] netlink: 'syz.0.56': attribute type 4 has an invalid length. [ 29.561568][ T404] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 29.666500][ T404] usb 4-1: config 0 interface 0 has no altsetting 0 [ 29.683996][ T404] usb 4-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 29.708521][ T404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.720253][ T404] usb 4-1: config 0 descriptor?? [ 29.919363][ T45] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 30.029488][ T65] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 30.070514][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 30.081508][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 30.094400][ T45] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 30.103477][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.112354][ T45] usb 2-1: config 0 descriptor?? [ 30.117608][ T475] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 30.131609][ T404] hid-generic 0003:0079:1843.0003: hidraw0: USB HID v0.00 Device [HID 0079:1843] on usb-dummy_hcd.3-1/input0 [ 30.180458][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.190622][ T65] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.201114][ T65] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.210211][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.218318][ T65] usb 1-1: Product: syz [ 30.222520][ T65] usb 1-1: Manufacturer: syz [ 30.227225][ T65] usb 1-1: SerialNumber: syz [ 30.269205][ T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 30.326756][ T475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.330367][ T340] usb 4-1: USB disconnect, device number 3 [ 30.335400][ T475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.353075][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 30.359138][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 30.367861][ T45] usb 2-1: USB disconnect, device number 3 [ 30.420168][ T31] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 30.428379][ T31] usb 3-1: config 0 has no interface number 0 [ 30.436076][ T31] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 30.445165][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.453265][ T31] usb 3-1: Product: syz [ 30.457427][ T31] usb 3-1: Manufacturer: syz [ 30.462081][ T31] usb 3-1: SerialNumber: syz [ 30.467394][ T31] usb 3-1: config 0 descriptor?? [ 30.636667][ T65] usb 1-1: 0:2 : does not exist [ 30.788928][ T404] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.938853][ T404] usb 2-1: Using ep0 maxpacket: 32 [ 30.945077][ T404] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 30.958124][ T404] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 30.967235][ T404] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.976200][ T404] usb 2-1: config 0 descriptor?? [ 30.982072][ T404] hub 2-1:0.0: USB hub found [ 31.045705][ T45] usb 1-1: USB disconnect, device number 3 [ 31.183688][ T404] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 31.386023][ T404] usbhid 2-1:0.0: can't add hid device: -71 [ 31.393456][ T404] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 31.419634][ T404] usb 2-1: USB disconnect, device number 4 [ 31.826453][ T65] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.978364][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 31.985300][ T65] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 31.995767][ T65] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 32.006023][ T65] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.019315][ T65] usb 1-1: config 1 interface 0 has no altsetting 0 [ 32.027950][ T65] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 32.038283][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.046388][ T65] usb 1-1: Product: syz [ 32.050656][ T65] usb 1-1: Manufacturer: syz [ 32.055261][ T65] usb 1-1: SerialNumber: syz [ 32.262665][ T65] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 32.273772][ T404] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.428161][ T404] usb 2-1: Using ep0 maxpacket: 16 [ 32.434384][ T404] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.445357][ T404] usb 2-1: config 0 interface 0 has no altsetting 0 [ 32.451985][ T404] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 32.461081][ T404] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.470295][ T404] usb 2-1: config 0 descriptor?? [ 32.474181][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 32.474197][ T36] audit: type=1400 audit(1771518878.619:154): avc: denied { read write } for pid=499 comm="syz.0.68" name="lp0" dev="devtmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 32.504634][ T36] audit: type=1400 audit(1771518878.619:155): avc: denied { open } for pid=499 comm="syz.0.68" path="/dev/usb/lp0" dev="devtmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 32.528354][ T36] audit: type=1400 audit(1771518878.619:156): avc: denied { ioctl } for pid=499 comm="syz.0.68" path="/dev/usb/lp0" dev="devtmpfs" ino=466 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 32.581729][ T500] usblp0:failed reading printer status (-32) [ 32.588654][ T65] usb 1-1: USB disconnect, device number 4 [ 32.595374][ T65] usblp0: removed [ 32.727142][ T36] audit: type=1326 audit(1771518878.869:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadc19c629 code=0x7ffc0000 [ 32.750766][ T36] audit: type=1326 audit(1771518878.869:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadc19c629 code=0x7ffc0000 [ 32.774788][ T36] audit: type=1326 audit(1771518878.899:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fcadc19c629 code=0x7ffc0000 [ 32.798821][ T36] audit: type=1326 audit(1771518878.899:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadc19c629 code=0x7ffc0000 [ 32.822493][ T36] audit: type=1326 audit(1771518878.899:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadc19c629 code=0x7ffc0000 [ 32.845702][ T36] audit: type=1326 audit(1771518878.919:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fcadc19c629 code=0x7ffc0000 [ 32.869005][ T36] audit: type=1326 audit(1771518878.919:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadc19c629 code=0x7ffc0000 [ 32.898549][ T404] hid-generic 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 33.031097][ T404] usb 3-1: USB disconnect, device number 4 [ 33.301877][ T45] usb 2-1: USB disconnect, device number 5 [ 33.451827][ T404] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.637512][ T404] usb 3-1: Using ep0 maxpacket: 16 [ 33.643893][ T404] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 33.654298][ T404] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 33.663465][ T404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.671708][ T404] usb 3-1: Product: syz [ 33.675920][ T404] usb 3-1: Manufacturer: syz [ 33.680560][ T404] usb 3-1: SerialNumber: syz [ 33.685814][ T404] usb 3-1: config 0 descriptor?? [ 33.692988][ T404] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 33.700897][ T404] usb 3-1: Detected FT232R [ 33.893987][ T404] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 33.948758][ T564] overlayfs: missing 'lowerdir' [ 34.128618][ T404] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 34.380346][ T45] usb 3-1: USB disconnect, device number 5 [ 34.972486][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 34.986803][ T45] ftdi_sio 3-1:0.0: device disconnected [ 35.259499][ T598] input: syz0 as /devices/virtual/input/input4 [ 35.336646][ T65] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 35.497629][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 35.529930][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 35.559923][ T65] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 35.587510][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.610395][ T65] usb 4-1: config 0 descriptor?? [ 35.626821][ T587] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 35.848844][ T65] usbhid 4-1:0.0: can't add hid device: -71 [ 35.856877][ T65] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 35.868756][ T65] usb 4-1: USB disconnect, device number 4 [ 36.082421][ T630] mmap: syz.0.119 (630) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.900422][ T340] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 37.038832][ T646] ------------[ cut here ]------------ [ 37.044586][ T646] WARNING: CPU: 0 PID: 646 at security/landlock/fs.c:1025 collect_domain_accesses+0x327/0x390 [ 37.055127][ T646] Modules linked in: [ 37.059193][ T646] CPU: 0 UID: 0 PID: 646 Comm: syz.2.125 Not tainted syzkaller #0 73dd41fee924560e78783f72ff837ca22365b77d [ 37.070650][ T646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 37.079128][ T340] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 37.080759][ T646] RIP: 0010:collect_domain_accesses+0x327/0x390 [ 37.090181][ T340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.096118][ T646] Code: 0f 14 73 ff eb 08 e8 c8 56 0a ff 41 b4 01 44 89 e0 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 99 23 03 cc e8 a9 56 0a ff <0f> 0b 45 31 e4 eb cb e8 9d 56 0a ff 0f 0b eb d1 89 d9 80 e1 07 80 [ 37.096144][ T646] RSP: 0018:ffffc9000e3b7af0 EFLAGS: 00010283 [ 37.104572][ T340] usb 2-1: Product: syz [ 37.124108][ T646] [ 37.130477][ T340] usb 2-1: Manufacturer: syz [ 37.134117][ T646] RAX: ffffffff827d46a7 RBX: ffff888130509990 RCX: 0000000000080000 [ 37.134137][ T646] RDX: ffffc90002274000 RSI: 000000000000022e RDI: 000000000000022f [ 37.134149][ T646] RBP: ffffc9000e3b7b30 R08: ffff88811ceb3900 R09: 0000000000000002 [ 37.134162][ T646] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000 [ 37.136855][ T340] usb 2-1: SerialNumber: syz [ 37.141073][ T646] R13: 0000000000002004 R14: 1ffffffff0e40096 R15: dffffc0000000000 [ 37.141090][ T646] FS: 00007fdf75db06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 37.141105][ T646] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.141117][ T646] CR2: 000000110c2d27e3 CR3: 000000011c0f2000 CR4: 00000000003526b0 [ 37.141134][ T646] Call Trace: [ 37.212680][ T646] [ 37.215723][ T646] current_check_refer_path+0x8ee/0xd40 [ 37.221276][ T646] ? hook_file_free_security+0xc0/0xc0 [ 37.226773][ T646] hook_path_rename+0x44/0x60 [ 37.231551][ T646] security_path_rename+0x1d8/0x2a0 [ 37.236849][ T646] do_renameat2+0x634/0xc40 [ 37.241361][ T646] ? __cfi_do_renameat2+0x10/0x10 [ 37.246415][ T646] ? strncpy_from_user+0x14d/0x270 [ 37.251533][ T646] ? __kasan_check_write+0x18/0x20 [ 37.256685][ T646] ? __kasan_check_write+0x18/0x20 [ 37.261805][ T646] __x64_sys_renameat2+0xdc/0x100 [ 37.266950][ T646] x64_sys_call+0x2e18/0x2ee0 [ 37.271639][ T646] do_syscall_64+0x57/0xf0 [ 37.276095][ T646] ? clear_bhb_loop+0x50/0xa0 [ 37.280768][ T646] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.285690][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.286696][ T646] RIP: 0033:0x7fdf74f9c629 [ 37.298554][ T646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.318312][ T646] RSP: 002b:00007fdf75db0028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 37.326763][ T646] RAX: ffffffffffffffda RBX: 00007fdf75215fa0 RCX: 00007fdf74f9c629 [ 37.334737][ T646] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 37.342822][ T646] RBP: 00007fdf75032b39 R08: 0000000000000000 R09: 0000000000000000 [ 37.350831][ T646] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 37.358863][ T646] R13: 00007fdf75216038 R14: 00007fdf75215fa0 R15: 00007ffc887bea28 [ 37.366921][ T646] [ 37.369937][ T646] ---[ end trace 0000000000000000 ]--- [ 37.435609][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 37.435615][ T65] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.449406][ T45] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 37.458486][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.467074][ T45] usb 1-1: config 0 descriptor?? [ 37.585530][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 37.591761][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 37.604697][ T65] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 37.613765][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.622485][ T65] usb 4-1: config 0 descriptor?? [ 38.030513][ T65] hid-rmi 0003:06CB:81A7.0005: item fetching failed at offset 2/5 [ 38.039250][ T65] hid-rmi 0003:06CB:81A7.0005: parse failed [ 38.045432][ T65] hid-rmi 0003:06CB:81A7.0005: probe with driver hid-rmi failed with error -22 [ 38.230744][ T45] usb 4-1: USB disconnect, device number 5 [ 39.623939][ T45] usb 2-1: USB disconnect, device number 6 [ 40.059195][ T45] usb 1-1: USB disconnect, device number 5