last executing test programs: 23.368458862s ago: executing program 1 (id=292): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x1000000000000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000bc0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x100, 0x1}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x5, 0x1, 0xfffffffffffffffd}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 23.239136885s ago: executing program 1 (id=293): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) 23.148008918s ago: executing program 1 (id=294): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x40}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 20.215291104s ago: executing program 1 (id=299): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "d9cb3d1c"}]}}, 0x0}, 0x0) 18.579371091s ago: executing program 1 (id=300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 6.137815402s ago: executing program 0 (id=301): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 6.020469475s ago: executing program 0 (id=302): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005f8bfa4099115268345701020301090212000100000000090499", @ANYRES16, @ANYBLOB='\t'], 0x0) 5.098975292s ago: executing program 0 (id=303): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0xffffffffffffff61) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(r2, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 2.287940504s ago: executing program 1 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)) 440.666317ms ago: executing program 0 (id=305): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000400)={0x0, 0x0}) 119.390726ms ago: executing program 0 (id=306): r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = openat(r1, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) 0s ago: executing program 0 (id=307): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00') r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtclass={0x38, 0x28, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xffe0, 0xfff2}, {0xb}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xa1}}, @tclass_kind_options=@c_qfq={{0x8}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c00018006000600800a000000010280f90014"], 0x124}}, 0xc000) madvise(&(0x7f0000bf8000/0x1000)=nil, 0x1000, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x13, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100), 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000340)={0xfff, 0xa0000001, 0x5, 0x10000}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0xfffffffe}, 0x1c) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x0, {0x0, 0xf1}}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x42) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) kernel console output (not intermixed with test programs): [ 51.583448][ T31] audit: type=1400 audit(51.490:68): avc: denied { read write } for pid=3078 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.586939][ T31] audit: type=1400 audit(51.500:69): avc: denied { open } for pid=3078 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:43157' (ED25519) to the list of known hosts. [ 61.707853][ T31] audit: type=1400 audit(61.610:70): avc: denied { name_bind } for pid=3079 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 63.072257][ T31] audit: type=1400 audit(62.980:71): avc: denied { execute } for pid=3081 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.105650][ T31] audit: type=1400 audit(63.020:72): avc: denied { execute_no_trans } for pid=3081 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 66.963897][ T31] audit: type=1400 audit(66.870:73): avc: denied { mounton } for pid=3081 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.974912][ T31] audit: type=1400 audit(66.880:74): avc: denied { mount } for pid=3081 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.978870][ T3081] cgroup: Unknown subsys name 'net' [ 66.983514][ T31] audit: type=1400 audit(66.890:75): avc: denied { unmount } for pid=3081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.162042][ T3081] cgroup: Unknown subsys name 'cpuset' [ 67.170246][ T3081] cgroup: Unknown subsys name 'hugetlb' [ 67.171773][ T3081] cgroup: Unknown subsys name 'rlimit' [ 67.450208][ T31] audit: type=1400 audit(67.360:76): avc: denied { setattr } for pid=3081 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.453314][ T31] audit: type=1400 audit(67.360:77): avc: denied { mounton } for pid=3081 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.455860][ T31] audit: type=1400 audit(67.370:78): avc: denied { mount } for pid=3081 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 67.709570][ T3083] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 67.711958][ T31] audit: type=1400 audit(67.620:79): avc: denied { relabelto } for pid=3083 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.717508][ T31] audit: type=1400 audit(67.630:80): avc: denied { write } for pid=3083 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 67.750988][ T31] audit: type=1400 audit(67.660:81): avc: denied { read } for pid=3081 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.754689][ T31] audit: type=1400 audit(67.660:82): avc: denied { open } for pid=3081 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 74.442148][ T3081] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.411066][ T31] audit: type=1400 audit(76.320:83): avc: denied { execmem } for pid=3084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.468565][ T31] audit: type=1400 audit(76.380:84): avc: denied { read } for pid=3086 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.470662][ T31] audit: type=1400 audit(76.380:85): avc: denied { open } for pid=3086 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.478925][ T31] audit: type=1400 audit(76.390:86): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 76.508881][ T31] audit: type=1400 audit(76.420:87): avc: denied { module_request } for pid=3087 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.509813][ T31] audit: type=1400 audit(76.420:88): avc: denied { module_request } for pid=3086 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.595202][ T31] audit: type=1400 audit(76.500:89): avc: denied { sys_module } for pid=3086 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.355366][ T31] audit: type=1400 audit(77.260:90): avc: denied { ioctl } for pid=3086 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.820706][ T3086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.828727][ T3087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.831340][ T3086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.833129][ T3087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.755899][ T3086] hsr_slave_0: entered promiscuous mode [ 79.760542][ T3086] hsr_slave_1: entered promiscuous mode [ 79.899172][ T3087] hsr_slave_0: entered promiscuous mode [ 79.902153][ T3087] hsr_slave_1: entered promiscuous mode [ 79.904006][ T3087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.905140][ T3087] Cannot create hsr debugfs directory [ 80.326741][ T31] audit: type=1400 audit(80.230:91): avc: denied { create } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.327534][ T31] audit: type=1400 audit(80.230:92): avc: denied { write } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.333477][ T3086] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.362296][ T3086] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.383019][ T3086] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.401206][ T3086] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.411491][ T3087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.442447][ T3087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.457966][ T3087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.473138][ T3087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.358587][ T3086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.401328][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.221922][ T3087] veth0_vlan: entered promiscuous mode [ 84.241360][ T3087] veth1_vlan: entered promiscuous mode [ 84.349023][ T3087] veth0_macvtap: entered promiscuous mode [ 84.357970][ T3087] veth1_macvtap: entered promiscuous mode [ 84.412192][ T3087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.413115][ T3087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.413584][ T3087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.414009][ T3087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.570757][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 84.570863][ T31] audit: type=1400 audit(84.480:94): avc: denied { mount } for pid=3087 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.572035][ T31] audit: type=1400 audit(84.480:95): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/syzkaller.yh4ps6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.573777][ T31] audit: type=1400 audit(84.480:96): avc: denied { mount } for pid=3087 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.588090][ T31] audit: type=1400 audit(84.500:97): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/syzkaller.yh4ps6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.590618][ T31] audit: type=1400 audit(84.500:98): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/syzkaller.yh4ps6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.603351][ T31] audit: type=1400 audit(84.510:99): avc: denied { unmount } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.610379][ T31] audit: type=1400 audit(84.520:100): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.612495][ T31] audit: type=1400 audit(84.520:101): avc: denied { mount } for pid=3087 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.613166][ T31] audit: type=1400 audit(84.520:102): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 84.613971][ T31] audit: type=1400 audit(84.520:103): avc: denied { mount } for pid=3087 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 84.657789][ T3087] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.818195][ T3086] veth0_vlan: entered promiscuous mode [ 84.846774][ T3086] veth1_vlan: entered promiscuous mode [ 84.917809][ T3086] veth0_macvtap: entered promiscuous mode [ 84.932794][ T3086] veth1_macvtap: entered promiscuous mode [ 85.000976][ T3086] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.002765][ T3086] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.009262][ T3086] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.010045][ T3086] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.209488][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 90.209667][ T31] audit: type=1400 audit(90.120:138): avc: denied { map_create } for pid=3797 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.217108][ T31] audit: type=1400 audit(90.130:139): avc: denied { map_read map_write } for pid=3797 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.505318][ T31] audit: type=1400 audit(90.420:140): avc: denied { prog_run } for pid=3797 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.615210][ T31] audit: type=1400 audit(91.520:141): avc: denied { create } for pid=3803 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 92.725618][ T31] audit: type=1400 audit(92.630:142): avc: denied { create } for pid=3808 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 93.400338][ T31] audit: type=1400 audit(93.310:143): avc: denied { map } for pid=3811 comm="syz.1.19" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.530203][ T31] audit: type=1400 audit(95.440:144): avc: denied { map } for pid=3822 comm="syz.1.24" path="socket:[3079]" dev="sockfs" ino=3079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 97.035760][ T106] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.205838][ T106] usb 2-1: Using ep0 maxpacket: 8 [ 97.269702][ T106] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 97.270743][ T106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.271045][ T106] usb 2-1: Product: syz [ 97.271249][ T106] usb 2-1: Manufacturer: syz [ 97.271467][ T106] usb 2-1: SerialNumber: syz [ 97.281594][ T106] usb 2-1: config 0 descriptor?? [ 107.586282][ T9] usb 2-1: USB disconnect, device number 2 [ 107.861243][ T31] audit: type=1400 audit(107.770:145): avc: denied { create } for pid=3848 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.871625][ T31] audit: type=1400 audit(107.780:146): avc: denied { setopt } for pid=3848 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.876077][ T31] audit: type=1400 audit(107.790:147): avc: denied { bind } for pid=3848 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.879893][ T31] audit: type=1400 audit(107.790:148): avc: denied { write } for pid=3848 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.880421][ T31] audit: type=1400 audit(107.790:149): avc: denied { connect } for pid=3848 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.885344][ T31] audit: type=1400 audit(107.790:150): avc: denied { name_connect } for pid=3848 comm="syz.1.29" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 108.229872][ T31] audit: type=1400 audit(108.140:151): avc: denied { create } for pid=3853 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 108.845343][ T31] audit: type=1400 audit(108.750:152): avc: denied { create } for pid=3859 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.845159][ T31] audit: type=1400 audit(109.750:153): avc: denied { listen } for pid=3870 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.415435][ T31] audit: type=1400 audit(110.320:154): avc: denied { ioctl } for pid=3870 comm="syz.1.36" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=2383 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.575554][ T3839] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.735358][ T3839] usb 2-1: Using ep0 maxpacket: 32 [ 111.753840][ T3839] usb 2-1: config index 0 descriptor too short (expected 62738, got 18) [ 111.802326][ T3839] usb 2-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 111.802902][ T3839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.803188][ T3839] usb 2-1: Product: syz [ 111.803469][ T3839] usb 2-1: Manufacturer: syz [ 111.803681][ T3839] usb 2-1: SerialNumber: syz [ 111.833518][ T3839] usb 2-1: config 0 descriptor?? [ 112.537313][ T3894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.42'. [ 112.583545][ T3894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.42'. [ 112.595586][ T3894] Zero length message leads to an empty skb [ 112.991891][ T31] audit: type=1400 audit(112.900:155): avc: denied { create } for pid=3895 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.016401][ T31] audit: type=1400 audit(112.930:156): avc: denied { ioctl } for pid=3895 comm="syz.0.43" path="socket:[2401]" dev="sockfs" ino=2401 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.180340][ T3903] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.188465][ T31] audit: type=1400 audit(115.100:157): avc: denied { getopt } for pid=3902 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.860681][ T31] audit: type=1400 audit(115.770:158): avc: denied { create } for pid=3904 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.361988][ T31] audit: type=1400 audit(117.270:159): avc: denied { getopt } for pid=3904 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.093635][ T9] usb 2-1: USB disconnect, device number 3 [ 122.613879][ T31] audit: type=1400 audit(122.520:160): avc: denied { ioctl } for pid=3916 comm="syz.1.47" path="socket:[3174]" dev="sockfs" ino=3174 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.761953][ T31] audit: type=1400 audit(126.670:161): avc: denied { name_bind } for pid=3948 comm="syz.1.50" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 126.763347][ T31] audit: type=1400 audit(126.670:162): avc: denied { node_bind } for pid=3948 comm="syz.1.50" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 126.799929][ T3949] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 127.069585][ T31] audit: type=1400 audit(126.980:163): avc: denied { name_bind } for pid=3950 comm="syz.1.51" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 127.070722][ T31] audit: type=1400 audit(126.980:164): avc: denied { node_bind } for pid=3950 comm="syz.1.51" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 129.488155][ T3953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 129.504907][ T3953] veth1_macvtap: left promiscuous mode [ 129.505561][ T3953] macsec0: entered promiscuous mode [ 131.159641][ T31] audit: type=1400 audit(131.070:165): avc: denied { accept } for pid=3955 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.241629][ T3958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 131.242483][ T3958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.53'. [ 131.271479][ T3958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 131.272086][ T3958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.53'. [ 135.309695][ T31] audit: type=1400 audit(135.220:166): avc: denied { name_bind } for pid=3967 comm="syz.1.57" src=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 137.339933][ T31] audit: type=1400 audit(137.250:167): avc: denied { create } for pid=3969 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.343792][ T31] audit: type=1400 audit(137.250:168): avc: denied { bind } for pid=3969 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.386015][ T31] audit: type=1400 audit(137.300:169): avc: denied { connect } for pid=3969 comm="syz.1.58" lport=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.404846][ T31] audit: type=1400 audit(137.310:170): avc: denied { append } for pid=3969 comm="syz.1.58" name="userio" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.419746][ T31] audit: type=1400 audit(137.330:171): avc: denied { accept } for pid=3969 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 137.480233][ T31] audit: type=1400 audit(137.390:172): avc: denied { setopt } for pid=3969 comm="syz.1.58" lport=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.315099][ T50] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 148.469982][ T50] usb 1-1: config 0 has an invalid interface number: 97 but max is 0 [ 148.472809][ T50] usb 1-1: config 0 has no interface number 0 [ 148.473202][ T50] usb 1-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 148.473767][ T50] usb 1-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 148.474264][ T50] usb 1-1: config 0 interface 97 has no altsetting 0 [ 148.481898][ T50] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 148.482470][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.488421][ T50] usb 1-1: config 0 descriptor?? [ 148.729755][ T50] usb 1-1: string descriptor 0 read error: -32 [ 149.656444][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.809009][ T3999] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.830742][ T31] audit: type=1400 audit(151.740:173): avc: denied { create } for pid=3998 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 158.747434][ T50] usb 1-1: USB disconnect, device number 2 [ 159.125160][ T50] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 159.275001][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 159.291152][ T50] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 159.307687][ T50] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 159.308158][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.308775][ T50] usb 1-1: Product: syz [ 159.308951][ T50] usb 1-1: Manufacturer: syz [ 159.309135][ T50] usb 1-1: SerialNumber: syz [ 159.313257][ T50] usb 1-1: config 0 descriptor?? [ 159.319988][ T4015] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 159.329702][ T50] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 159.544034][ T9] usb 1-1: USB disconnect, device number 3 [ 159.727533][ T31] audit: type=1400 audit(159.640:174): avc: denied { write } for pid=4048 comm="syz.0.69" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.591371][ T4057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 160.605940][ T4057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 160.721840][ T4057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 160.735158][ T4057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 161.123322][ T31] audit: type=1400 audit(161.030:175): avc: denied { write } for pid=4058 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.134869][ T31] audit: type=1400 audit(161.040:176): avc: denied { nlmsg_write } for pid=4058 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.783067][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 162.890490][ T4070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 162.891181][ T4070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 163.812123][ T31] audit: type=1400 audit(163.720:177): avc: denied { read } for pid=4076 comm="syz.1.79" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.813238][ T31] audit: type=1400 audit(163.720:178): avc: denied { open } for pid=4076 comm="syz.1.79" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.830931][ T31] audit: type=1400 audit(163.740:179): avc: denied { ioctl } for pid=4076 comm="syz.1.79" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.832215][ T31] audit: type=1400 audit(163.740:180): avc: denied { set_context_mgr } for pid=4076 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 164.016045][ T4077] binder: 4076:4077 unknown command 0 [ 164.016453][ T4077] binder: 4076:4077 ioctl c0306201 200001c0 returned -22 [ 164.029170][ T24] binder: unexpected work type, 10, not freed [ 164.470045][ T4079] netlink: 44 bytes leftover after parsing attributes in process `syz.1.80'. [ 166.141029][ T31] audit: type=1400 audit(166.050:181): avc: denied { execute } for pid=4089 comm="syz.1.84" path="/54/cpuacct.usage_sys" dev="tmpfs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 171.256193][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 171.404945][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 171.417796][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.418203][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.418480][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.418743][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 171.418933][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.421275][ T9] usb 2-1: config 0 descriptor?? [ 171.627911][ T31] audit: type=1400 audit(171.540:182): avc: denied { write } for pid=4130 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 171.880543][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 171.881048][ T9] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 171.886171][ T9] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 171.896137][ T9] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 171.896802][ T9] microsoft 0003:045E:07DA.0001: no inputs found [ 171.897051][ T9] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 172.427807][ T50] usb 2-1: USB disconnect, device number 4 [ 172.796427][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 172.797773][ T4194] netlink: 'syz.0.98': attribute type 2 has an invalid length. [ 172.801374][ T4194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.98'. [ 173.998834][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.225055][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 174.244038][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.255334][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.256035][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 174.258628][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 174.259293][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.317872][ T9] usb 1-1: config 0 descriptor?? [ 174.849495][ T9] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 174.850288][ T9] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 174.861067][ T9] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 174.875256][ T9] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 174.876220][ T9] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 174.880169][ T9] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 174.881143][ T9] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 174.897640][ T9] elan 0003:04F3:0755.0002: failed to start in urb: -90 [ 174.918941][ T9] elan 0003:04F3:0755.0002: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 175.022463][ T9] usb 1-1: USB disconnect, device number 4 [ 178.464592][ T3040] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 178.632661][ T3040] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 178.633546][ T3040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.634023][ T3040] usb 1-1: Product: syz [ 178.635007][ T3040] usb 1-1: Manufacturer: syz [ 178.635254][ T3040] usb 1-1: SerialNumber: syz [ 178.639269][ T3040] usb 1-1: config 0 descriptor?? [ 178.658029][ T3040] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 005 [ 179.078085][ T3040] (null): failure reading functionality [ 179.095900][ T3040] i2c i2c-3: connected i2c-tiny-usb device [ 179.309737][ T3040] usb 1-1: USB disconnect, device number 5 [ 180.265179][ T31] audit: type=1400 audit(180.170:183): avc: denied { connect } for pid=4257 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.283026][ T4258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 183.676415][ T4262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 183.677143][ T4262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 187.475685][ T50] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 187.636468][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 187.644679][ T50] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.645226][ T50] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.645513][ T50] usb 1-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 187.646338][ T50] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 187.646664][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.176630][ T50] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/0003:0458:5011.0003/input/input4 [ 188.179986][ T50] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/0003:0458:5011.0003/input/input5 [ 188.195816][ T50] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 189.540415][ C1] kye 0003:0458:5011.0003: usb_submit_urb(ctrl) failed: -1 [ 189.714947][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 189.874752][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 189.906071][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 189.906514][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.908038][ T9] usb 2-1: Product: syz [ 189.910731][ T9] usb 2-1: Manufacturer: syz [ 189.912788][ T9] usb 2-1: SerialNumber: syz [ 189.973307][ T9] usb 2-1: config 0 descriptor?? [ 190.308159][ T717] usb 1-1: USB disconnect, device number 6 [ 199.805253][ T717] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 199.955737][ T717] usb 1-1: Using ep0 maxpacket: 32 [ 199.968821][ T717] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.969586][ T717] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.969942][ T717] usb 1-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 199.970898][ T717] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 199.971490][ T717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.212266][ T9] usb 2-1: USB disconnect, device number 5 [ 200.481673][ T717] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/0003:0458:5011.0004/input/input6 [ 200.495589][ T717] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/0003:0458:5011.0004/input/input7 [ 200.521734][ T717] kye 0003:0458:5011.0004: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 200.878387][ T24] usb 1-1: USB disconnect, device number 7 [ 201.075489][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 201.249482][ T9] usb 2-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 201.250023][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.250411][ T9] usb 2-1: Product: syz [ 201.250659][ T9] usb 2-1: Manufacturer: syz [ 201.250834][ T9] usb 2-1: SerialNumber: syz [ 201.254158][ T9] usb 2-1: config 0 descriptor?? [ 201.285468][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.435667][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 201.447814][ T24] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 201.448406][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.452556][ T24] usb 1-1: config 0 descriptor?? [ 201.497526][ T24] usb 2-1: USB disconnect, device number 6 [ 203.679610][ T31] audit: type=1400 audit(203.590:184): avc: denied { execute } for pid=4427 comm="syz.1.130" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 209.125653][ T3040] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 209.275521][ T3040] usb 2-1: Using ep0 maxpacket: 32 [ 209.281843][ T3040] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.282676][ T3040] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.283046][ T3040] usb 2-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 209.283564][ T3040] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 209.283942][ T3040] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.778795][ T3040] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/0003:0458:5011.0005/input/input8 [ 209.785259][ T3040] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/0003:0458:5011.0005/input/input9 [ 209.800706][ T3040] kye 0003:0458:5011.0005: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 211.005765][ C0] kye 0003:0458:5011.0005: usb_submit_urb(ctrl) failed: -1 [ 211.703363][ T9] usb 1-1: USB disconnect, device number 8 [ 211.759722][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 211.785220][ T50] usb 2-1: USB disconnect, device number 7 [ 211.870266][ T4492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 211.968453][ T31] audit: type=1400 audit(211.880:185): avc: denied { create } for pid=4494 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 212.151676][ T4503] IPv6: Can't replace route, no match found [ 212.303024][ T31] audit: type=1400 audit(212.210:186): avc: denied { create } for pid=4506 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 212.313583][ T31] audit: type=1400 audit(212.220:187): avc: denied { setopt } for pid=4506 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 215.039726][ T31] audit: type=1400 audit(214.950:188): avc: denied { create } for pid=4517 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 215.057274][ T31] audit: type=1400 audit(214.960:189): avc: denied { ioctl } for pid=4517 comm="syz.0.147" path="socket:[3554]" dev="sockfs" ino=3554 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 225.421986][ T4549] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 225.432866][ T4549] syz.1.151: vmalloc error: size 536870912, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 225.438276][ T4549] CPU: 1 UID: 0 PID: 4549 Comm: syz.1.151 Not tainted 6.12.0-rc7-syzkaller #0 [ 225.438761][ T4549] Hardware name: ARM-Versatile Express [ 225.439216][ T4549] Call trace: [ 225.439601][ T4549] [<8199d158>] (dump_backtrace) from [<8199d254>] (show_stack+0x18/0x1c) [ 225.440497][ T4549] r7:ff800000 r6:82056d00 r5:60000013 r4:8203de14 [ 225.440781][ T4549] [<8199d23c>] (show_stack) from [<819bb704>] (dump_stack_lvl+0x70/0x7c) [ 225.441115][ T4549] [<819bb694>] (dump_stack_lvl) from [<819bb728>] (dump_stack+0x18/0x1c) [ 225.441467][ T4549] r5:84d9c800 r4:00000000 [ 225.441762][ T4549] [<819bb710>] (dump_stack) from [<804c016c>] (warn_alloc+0xd8/0x178) [ 225.442145][ T4549] [<804c0094>] (warn_alloc) from [<804b2230>] (__vmalloc_node_range_noprof+0xcc/0x55c) [ 225.442481][ T4549] r3:20000000 r2:82056d00 [ 225.442674][ T4549] r6:00000dc0 r5:00000001 r4:20000000 [ 225.442878][ T4549] [<804b2164>] (__vmalloc_node_range_noprof) from [<8046d904>] (__kvmalloc_node_noprof+0xc0/0x110) [ 225.443283][ T4549] r10:dff39d00 r9:84a6a000 r8:816426e0 r7:ffffffff r6:00000dc0 r5:20000000 [ 225.443579][ T4549] r4:00000000 [ 225.443759][ T4549] [<8046d844>] (__kvmalloc_node_noprof) from [<816426e0>] (xt_alloc_entry_offsets+0x24/0x30) [ 225.444139][ T4549] r8:b5403587 r7:00000000 r6:20000420 r5:84a6a040 r4:08000000 [ 225.444577][ T4549] [<816426bc>] (xt_alloc_entry_offsets) from [<816fc3e0>] (translate_table+0x70/0x78c) [ 225.445176][ T4549] [<816fc370>] (translate_table) from [<816fd58c>] (do_replace+0xe8/0x5b8) [ 225.446057][ T4549] r10:00000126 r9:84a6a040 r8:b5403587 r7:00000240 r6:20000420 r5:84a6a000 [ 225.449044][ T4549] r4:83ec8d00 [ 225.450558][ T4549] [<816fd4a4>] (do_replace) from [<816fdb90>] (do_ipt_set_ctl+0x134/0x2a0) [ 225.453965][ T4549] r10:00000126 r9:8148ad68 r8:000002a0 r7:84c08448 r6:dff39da8 r5:84003640 [ 225.455270][ T4549] r4:00000040 [ 225.455778][ T4549] [<816fda5c>] (do_ipt_set_ctl) from [<815cf698>] (nf_setsockopt+0x60/0x7c) [ 225.456395][ T4549] r10:00000126 r9:8148ad68 r8:000002a0 r7:84c08448 r6:84003640 r5:816fda5c [ 225.456953][ T4549] r4:827e30a0 [ 225.457149][ T4549] [<815cf63c>] (nf_setsockopt) from [<816684dc>] (ip_setsockopt+0x88/0x98) [ 225.457618][ T4549] r6:84003640 r5:000002a0 r4:00000040 [ 225.457875][ T4549] [<81668458>] (ip_setsockopt) from [<81678858>] (tcp_setsockopt+0x3c/0x58) [ 225.458356][ T4549] r6:00000000 r5:84c08000 r4:81668454 [ 225.458596][ T4549] [<81678820>] (tcp_setsockopt) from [<8148ada0>] (sock_common_setsockopt+0x38/0x40) [ 225.459028][ T4549] r4:8167881c [ 225.459204][ T4549] [<8148ad6c>] (sock_common_setsockopt) from [<818a5e30>] (smc_setsockopt+0xac/0x3cc) [ 225.459629][ T4549] r4:00000040 [ 225.459808][ T4549] [<818a5d88>] (smc_setsockopt) from [<81486400>] (do_sock_setsockopt+0xb0/0x17c) [ 225.460230][ T4549] r9:84d9c800 r8:8020029c r7:00000000 r6:84459400 r5:00000000 r4:818a5d84 [ 225.460558][ T4549] [<81486350>] (do_sock_setsockopt) from [<814898c0>] (sys_setsockopt+0x78/0xbc) [ 225.461058][ T4549] r6:84459400 r5:00000040 r4:00000000 [ 225.461303][ T4549] [<81489848>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 225.461797][ T4549] Exception stack(0xdff39fa8 to 0xdff39ff0) [ 225.462283][ T4549] 9fa0: 000002a0 00000000 00000003 00000000 00000040 200003c0 [ 225.462674][ T4549] 9fc0: 000002a0 00000000 002862f8 00000126 00000000 00006364 003d0f00 76b5a0bc [ 225.463025][ T4549] 9fe0: 76b59ec0 76b59eb0 00018af0 00133450 [ 225.463348][ T4549] r7:00000126 r6:002862f8 r5:00000000 r4:000002a0 [ 225.507236][ T4549] Mem-Info: [ 225.508119][ T4549] active_anon:3943 inactive_anon:0 isolated_anon:0 [ 225.508119][ T4549] active_file:256 inactive_file:34301 isolated_file:0 [ 225.508119][ T4549] unevictable:768 dirty:12 writeback:0 [ 225.508119][ T4549] slab_reclaimable:932 slab_unreclaimable:5219 [ 225.508119][ T4549] mapped:4612 shmem:3685 pagetables:201 [ 225.508119][ T4549] sec_pagetables:0 bounce:0 [ 225.508119][ T4549] kernel_misc_reclaimable:0 [ 225.508119][ T4549] free:443313 free_pcp:648 free_cma:4032 [ 225.509789][ T4549] Node 0 active_anon:15772kB inactive_anon:0kB active_file:1024kB inactive_file:137204kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:18448kB dirty:48kB writeback:0kB shmem:14740kB writeback_tmp:0kB kernel_stack:1448kB pagetables:804kB sec_pagetables:0kB all_unreclaimable? no [ 225.511016][ T4549] Normal free:1395096kB boost:0kB min:4776kB low:6200kB high:7624kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:736kB unevictable:0kB writepending:28kB present:1556480kB managed:1430020kB mlocked:0kB bounce:0kB free_pcp:2592kB local_pcp:1316kB free_cma:0kB [ 225.511929][ T4549] lowmem_reserve[]: 0 4224 0 [ 225.512420][ T4549] Normal: 2*4kB (ME) 2*8kB (UE) 0*16kB 2*32kB (ME) 1*64kB (M) 2*128kB (UM) 4*256kB (ME) 6*512kB (ME) 6*1024kB (UME) 4*2048kB (UME) 336*4096kB (UM) = 1395096kB [ 225.513791][ T4549] 38242 total pagecache pages [ 225.514036][ T4549] 0 pages in swap cache [ 225.514334][ T4549] Free swap = 124996kB [ 225.527437][ T4549] Total swap = 124996kB [ 225.527799][ T4549] 524288 pages RAM [ 225.528007][ T4549] 135168 pages HighMem/MovableOnly [ 225.528216][ T4549] 31615 pages reserved [ 225.528427][ T4549] 4096 pages cma reserved [ 229.198603][ T31] audit: type=1400 audit(229.090:190): avc: denied { create } for pid=4577 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 239.938449][ T31] audit: type=1400 audit(239.840:191): avc: denied { name_connect } for pid=4615 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 241.365585][ T50] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 241.515417][ T50] usb 2-1: Using ep0 maxpacket: 32 [ 241.537786][ T50] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 241.538676][ T50] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 216, changing to 7 [ 241.539374][ T50] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 7 [ 241.539874][ T50] usb 2-1: config 1 interface 1 has no altsetting 0 [ 241.558447][ T50] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.559173][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.559737][ T50] usb 2-1: Product: syz [ 241.559976][ T50] usb 2-1: Manufacturer: syz [ 241.560197][ T50] usb 2-1: SerialNumber: syz [ 241.872045][ T50] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 241.872730][ T50] usb 2-1: 2:1 : sample bitwidth 16 in over sample bytes 1 [ 241.873381][ T50] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 241.911022][ T50] usb 2-1: USB disconnect, device number 8 [ 242.904909][ T46] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 243.135969][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 243.187534][ T46] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 243.188205][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.188895][ T46] usb 1-1: Product: syz [ 243.189244][ T46] usb 1-1: Manufacturer: syz [ 243.189535][ T46] usb 1-1: SerialNumber: syz [ 243.272929][ T46] usb 1-1: config 0 descriptor?? [ 243.660306][ T2873] usb 1-1: USB disconnect, device number 9 [ 273.275513][ T717] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 273.457940][ T717] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.459307][ T717] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 273.459783][ T717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.470371][ T717] usb 1-1: config 0 descriptor?? [ 283.730660][ T50] usb 1-1: USB disconnect, device number 10 [ 284.955192][ T46] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 285.105204][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 285.129482][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.129844][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.130034][ T46] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 285.130246][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.135226][ T46] usb 1-1: config 0 descriptor?? [ 285.589876][ T46] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 285.794761][ T46] ft260 0003:0403:6030.0006: chip code: 5e81 abf2 [ 286.002253][ T46] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 286.195094][ T50] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 286.355585][ T50] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 286.356403][ T50] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 286.356915][ T50] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 286.358187][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.367112][ T4746] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 286.381347][ T50] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.418349][ T46] usb 1-1: USB disconnect, device number 11 [ 286.772361][ T31] audit: type=1400 audit(286.680:192): avc: denied { create } for pid=4785 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 286.779749][ T31] audit: type=1400 audit(286.690:193): avc: denied { write } for pid=4785 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 287.325879][ T24] usb 2-1: USB disconnect, device number 9 [ 302.793835][ T4814] netlink: 'syz.0.194': attribute type 1 has an invalid length. [ 302.795232][ T4814] netlink: 'syz.0.194': attribute type 2 has an invalid length. [ 302.795541][ T4814] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.194'. [ 302.880617][ T4816] netlink: 220 bytes leftover after parsing attributes in process `syz.0.195'. [ 302.881110][ T31] audit: type=1400 audit(302.790:194): avc: denied { nlmsg_read } for pid=4815 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 303.252718][ T31] audit: type=1400 audit(303.160:195): avc: denied { wake_alarm } for pid=4811 comm="syz.1.193" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 303.387447][ T31] audit: type=1400 audit(303.300:196): avc: denied { create } for pid=4826 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 303.398445][ T31] audit: type=1400 audit(303.310:197): avc: denied { setopt } for pid=4826 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 304.765051][ T31] audit: type=1400 audit(304.670:198): avc: denied { create } for pid=4824 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 304.771879][ T31] audit: type=1400 audit(304.680:199): avc: denied { sys_admin } for pid=4824 comm="syz.0.199" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 305.935920][ T31] audit: type=1400 audit(305.840:200): avc: denied { mounton } for pid=4834 comm="syz.1.204" path="/107/file1" dev="tmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 314.595991][ T31] audit: type=1400 audit(314.490:201): avc: denied { unmount } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 314.943975][ T31] audit: type=1400 audit(314.850:202): avc: denied { bind } for pid=4849 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 319.289717][ T31] audit: type=1400 audit(319.200:203): avc: denied { setopt } for pid=4858 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 319.292660][ T31] audit: type=1400 audit(319.200:204): avc: denied { write } for pid=4858 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 320.325119][ T31] audit: type=1400 audit(320.220:205): avc: denied { block_suspend } for pid=4865 comm="syz.0.212" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 324.916743][ T31] audit: type=1400 audit(324.830:206): avc: denied { setopt } for pid=4885 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 331.872260][ T31] audit: type=1400 audit(331.780:207): avc: denied { read } for pid=4901 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 332.314795][ T106] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 332.481878][ T106] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.482480][ T106] usb 2-1: config 0 has no interfaces? [ 332.482770][ T106] usb 2-1: New USB device found, idVendor=0471, idProduct=0310, bcdDevice=e4.df [ 332.483069][ T106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.493001][ T106] usb 2-1: config 0 descriptor?? [ 332.711642][ T4905] process 'syz.1.224' launched './file2' with NULL argv: empty string added [ 332.747600][ T31] audit: type=1400 audit(332.620:208): avc: denied { execute_no_trans } for pid=4904 comm="syz.1.224" path="/115/file2" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 332.944051][ T106] usb 2-1: USB disconnect, device number 10 [ 341.607441][ T4925] Illegal XDP return value 2220628944 on prog (id 22) dev syz_tun, expect packet loss! [ 348.565144][ T31] audit: type=1400 audit(348.470:209): avc: denied { bind } for pid=4930 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 361.136197][ T31] audit: type=1400 audit(361.050:210): avc: denied { shutdown } for pid=4975 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 373.993241][ T4999] netlink: 'syz.0.253': attribute type 10 has an invalid length. [ 374.002457][ T4999] syz_tun: entered promiscuous mode [ 374.110339][ T31] audit: type=1326 audit(374.020:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.0.254" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 374.112285][ T31] audit: type=1326 audit(374.020:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.0.254" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 374.116977][ T31] audit: type=1326 audit(374.030:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.0.254" exe="/syz-executor" sig=0 arch=40000028 syscall=302 compat=0 ip=0x133450 code=0x7ffc0000 [ 374.118173][ T31] audit: type=1326 audit(374.030:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.0.254" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 374.527234][ T31] audit: type=1326 audit(374.440:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.0.255" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x0 [ 382.930049][ T31] audit: type=1400 audit(382.840:216): avc: denied { bind } for pid=5014 comm="syz.0.259" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 382.931157][ T31] audit: type=1400 audit(382.840:217): avc: denied { node_bind } for pid=5014 comm="syz.0.259" saddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 386.881840][ T31] audit: type=1400 audit(386.790:218): avc: denied { bind } for pid=5014 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 393.623338][ T31] audit: type=1400 audit(393.530:219): avc: denied { create } for pid=5023 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 393.760971][ T31] audit: type=1400 audit(393.670:220): avc: denied { bind } for pid=5023 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 393.764127][ T31] audit: type=1400 audit(393.670:221): avc: denied { listen } for pid=5023 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 393.772940][ T31] audit: type=1400 audit(393.680:222): avc: denied { accept } for pid=5023 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 401.008231][ T3040] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 401.229587][ T3040] usb 1-1: Using ep0 maxpacket: 32 [ 401.242644][ T3040] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 401.243922][ T3040] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 401.245191][ T3040] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 401.245646][ T3040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 401.246055][ T3040] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 401.246477][ T3040] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 401.246979][ T3040] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 401.247337][ T3040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.256051][ T3040] usb 1-1: config 0 descriptor?? [ 401.505289][ T3040] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 401.750990][ T3040] usb 1-1: USB disconnect, device number 12 [ 401.767043][ T3040] usblp0: removed [ 404.044871][ T31] audit: type=1400 audit(403.950:223): avc: denied { write } for pid=5089 comm="syz.0.280" name="ip_mr_vif" dev="proc" ino=4026532683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 404.701057][ T31] audit: type=1326 audit(404.610:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.282" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 404.704103][ T31] audit: type=1326 audit(404.610:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.282" exe="/syz-executor" sig=0 arch=40000028 syscall=165 compat=0 ip=0x133450 code=0x7ffc0000 [ 404.705641][ T31] audit: type=1326 audit(404.620:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.282" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 404.706306][ T31] audit: type=1326 audit(404.620:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.282" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 405.273491][ T31] audit: type=1400 audit(405.180:228): avc: denied { unmount } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 410.040200][ T31] audit: type=1400 audit(409.950:229): avc: denied { write } for pid=5110 comm="syz.0.289" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 422.341506][ T31] audit: type=1400 audit(422.250:230): avc: denied { map } for pid=5121 comm="syz.1.292" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 422.355283][ T31] audit: type=1400 audit(422.260:231): avc: denied { call } for pid=5121 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 422.357813][ T31] audit: type=1400 audit(422.270:232): avc: denied { transfer } for pid=5121 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 424.831055][ T31] audit: type=1326 audit(424.740:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.0.297" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 424.831880][ T31] audit: type=1326 audit(424.740:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.0.297" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 424.837182][ T31] audit: type=1326 audit(424.750:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.0.297" exe="/syz-executor" sig=0 arch=40000028 syscall=323 compat=0 ip=0x133450 code=0x7ffc0000 [ 424.842969][ T31] audit: type=1326 audit(424.750:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.0.297" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 424.845844][ T31] audit: type=1326 audit(424.760:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.0.297" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x133450 code=0x7ffc0000 [ 424.853444][ T31] audit: type=1326 audit(424.760:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.0.297" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 424.854780][ T31] audit: type=1326 audit(424.760:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.0.297" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 426.064061][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 426.285334][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 426.325999][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.326818][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.327280][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 426.327692][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.357883][ T24] usb 2-1: config 0 descriptor?? [ 426.825461][ T24] vrc2 0003:07C0:1125.0007: fixing up VRC-2 report descriptor [ 426.842814][ T24] input: HID 07c0:1125 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:07C0:1125.0007/input/input12 [ 426.865952][ T24] vrc2 0003:07C0:1125.0007: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.1-1/input0 [ 427.019587][ T24] usb 2-1: USB disconnect, device number 11 [ 430.870842][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 430.870944][ T31] audit: type=1400 audit(430.780:243): avc: denied { bind } for pid=5165 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 430.887398][ T31] audit: type=1400 audit(430.790:244): avc: denied { listen } for pid=5165 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 430.890419][ T31] audit: type=1400 audit(430.800:245): avc: denied { connect } for pid=5165 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 439.942052][ T46] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 440.195555][ T46] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 440.198044][ T46] usb 1-1: config 0 has no interface number 0 [ 440.198542][ T46] usb 1-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 440.199783][ T46] usb 1-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 440.202218][ T46] usb 1-1: config 0 interface 153 has no altsetting 0 [ 440.220305][ T46] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 440.220575][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.220757][ T46] usb 1-1: Product: syz [ 440.220849][ T46] usb 1-1: Manufacturer: syz [ 440.220955][ T46] usb 1-1: SerialNumber: syz [ 440.225817][ T46] usb 1-1: config 0 descriptor?? [ 440.232447][ T46] hub 1-1:0.153: bad descriptor, ignoring hub [ 440.232765][ T46] hub 1-1:0.153: probe with driver hub failed with error -5 [ 440.246044][ T46] sierra 1-1:0.153: Sierra USB modem converter detected [ 440.516072][ T46] usb 1-1: USB disconnect, device number 13 [ 440.517218][ T46] sierra 1-1:0.153: device disconnected [ 445.579674][ T31] audit: type=1400 audit(445.490:246): avc: denied { mount } for pid=5197 comm="syz.0.306" name="/" dev="ramfs" ino=4492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 445.717108][ T31] audit: type=1400 audit(445.630:247): avc: denied { map } for pid=5199 comm="syz.0.307" path="/proc/397/net/protocols" dev="proc" ino=4026532666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 445.757198][ T5200] ------------[ cut here ]------------ [ 445.757900][ T5200] WARNING: CPU: 0 PID: 5200 at lib/refcount.c:28 refcount_warn_saturate+0x13c/0x174 [ 445.758424][ T5200] refcount_t: underflow; use-after-free. [ 445.758765][ T5200] Modules linked in: [ 445.761236][ T5200] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 445.762821][ T5200] CPU: 0 UID: 0 PID: 5200 Comm: syz.0.307 Not tainted 6.12.0-rc7-syzkaller #0 [ 445.763216][ T5200] Hardware name: ARM-Versatile Express [ 445.763821][ T5200] Call trace: [ 445.764104][ T5200] [<8199d158>] (dump_backtrace) from [<8199d254>] (show_stack+0x18/0x1c) [ 445.764705][ T5200] r7:00000000 r6:82622f44 r5:00000000 r4:8203de14 [ 445.765168][ T5200] [<8199d23c>] (show_stack) from [<819bb6e8>] (dump_stack_lvl+0x54/0x7c) [ 445.765706][ T5200] [<819bb694>] (dump_stack_lvl) from [<819bb728>] (dump_stack+0x18/0x1c) [ 445.766218][ T5200] r5:00000000 r4:82870d18 [ 445.766447][ T5200] [<819bb710>] (dump_stack) from [<8199dd80>] (panic+0x120/0x374) [ 445.766992][ T5200] [<8199dc60>] (panic) from [<80242118>] (get_taint+0x0/0x1c) [ 445.767586][ T5200] r3:8260c5c4 r2:00000001 r1:820261e8 r0:8202dc50 [ 445.767902][ T5200] r7:80840e78 [ 445.768131][ T5200] [<802420a4>] (check_panic_on_warn) from [<8024227c>] (__warn+0x80/0x188) [ 445.768680][ T5200] [<802421fc>] (__warn) from [<8024256c>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 445.769197][ T5200] r8:00000009 r7:8208c63c r6:df9b1c84 r5:8400d400 r4:00000000 [ 445.769712][ T5200] [<80242388>] (warn_slowpath_fmt) from [<80840e78>] (refcount_warn_saturate+0x13c/0x174) [ 445.770576][ T5200] r10:00000000 r9:84c10684 r8:00000000 r7:00000000 r6:8182a814 r5:00000002 [ 445.771154][ T5200] r4:848e0900 [ 445.771365][ T5200] [<80840d3c>] (refcount_warn_saturate) from [<8149c280>] (sk_skb_reason_drop+0x1d8/0x248) [ 445.772330][ T5200] [<8149c0a8>] (sk_skb_reason_drop) from [<8182a814>] (j1939_session_destroy+0x78/0x200) [ 445.772894][ T5200] r9:84c10684 r8:00000000 r7:df9b1f38 r6:84f7ae50 r5:84f7ae00 r4:848e0900 [ 445.773388][ T5200] [<8182a79c>] (j1939_session_destroy) from [<8182bb30>] (j1939_session_put+0x54/0x58) [ 445.773944][ T5200] r6:84f7ae00 r5:83292c80 r4:00000004 [ 445.774600][ T5200] [<8182badc>] (j1939_session_put) from [<81829b60>] (j1939_sk_sendmsg+0x41c/0x548) [ 445.775558][ T5200] [<81829744>] (j1939_sk_sendmsg) from [<81486f14>] (__sock_sendmsg+0x44/0x78) [ 445.776114][ T5200] r10:00000000 r9:df9b1dd4 r8:df9b1dd4 r7:83292c80 r6:83292c80 r5:df9b1f38 [ 445.776571][ T5200] r4:00000000 [ 445.776765][ T5200] [<81486ed0>] (__sock_sendmsg) from [<81487f14>] (____sys_sendmsg+0x2a4/0x2c4) [ 445.777176][ T5200] r7:83292c80 r6:00000000 r5:00000000 r4:df9b1f38 [ 445.777462][ T5200] [<81487c70>] (____sys_sendmsg) from [<81489e7c>] (___sys_sendmsg+0x9c/0xd0) [ 445.777903][ T5200] r10:df9b1e34 r9:20000180 r8:00000000 r7:00000000 r6:83292c80 r5:df9b1f38 [ 445.778287][ T5200] r4:00000000 [ 445.778479][ T5200] [<81489de0>] (___sys_sendmsg) from [<8148a394>] (sys_sendmsg+0x78/0xbc) [ 445.778894][ T5200] r10:00000128 r9:8400d400 r8:8020029c r7:00000000 r6:20000180 r5:83292c80 [ 445.779263][ T5200] r4:00000000 [ 445.779465][ T5200] [<8148a31c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 445.779877][ T5200] Exception stack(0xdf9b1fa8 to 0xdf9b1ff0) [ 445.780215][ T5200] 1fa0: 00000000 00000000 00000005 20000180 00000000 00000000 [ 445.780706][ T5200] 1fc0: 00000000 00000000 002862f0 00000128 00000000 00006364 003d0f00 76b4f0bc [ 445.781151][ T5200] 1fe0: 76b4eec0 76b4eeb0 00018af0 00133450 [ 445.781435][ T5200] r7:00000128 r6:002862f0 r5:00000000 r4:00000000 [ 445.783641][ T5200] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:02:39 Registers: info registers vcpu 0 CPU#0 R00=83fad440 R01=00000034 R02=eb069000 R03=00000000 R04=82873420 R05=83fad440 R06=809ea090 R07=8287346c R08=8287341c R09=00000051 R10=00000001 R11=df9b1a3c R12=00000002 R13=df9b1a30 R14=827584a4 R15=809ea0e8 PSR=80000093 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00526494 R01=00000000 R02=00000000 R03=00000000 R04=01ccad20 R05=00000000 R06=0052da07 R07=00000003 R08=01cdf1e0 R09=00000000 R10=00000001 R11=00000007 R12=00000000 R13=7e83f0a8 R14=004df26c R15=004d1000 PSR=60000010 -ZC- A S usr32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=005227e9 s17=00000000 d08=00000000005227e9 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=ffffffff s33=79656b01 d16=79656b01ffffffff s34=676e6972 s35=06800300 d17=06800300676e6972 s36=fffff908 s37=ffffffff d18=fffffffffffff908 s38=7301ffff s39=86037a79 d19=86037a797301ffff s40=80820006 s41=01808080 d20=0180808080820006 s42=06880344 s43=4a000200 d21=4a00020006880344 s44=80020a00 s45=06800215 d22=0680021580020a00 s46=00000800 s47=08000008 d23=0800000800000800 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=90145e27 s53=09279da8 d26=09279da890145e27 s54=f11ee148 s55=4866afff d27=4866affff11ee148 s56=3a56914c s57=4cad78c2 d28=4cad78c23a56914c s58=d516ba92 s59=a5280670 d29=a5280670d516ba92 s60=0d8a5952 s61=85399259 d30=853992590d8a5952 s62=c763fe64 s63=16b30885 d31=16b30885c763fe64 FPSCR: 00000000