last executing test programs: 8.74276959s ago: executing program 2 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xa31, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x5, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x962, 0xfb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf8, 0x7d, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="0005280000002806000000000000005609"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000000100)=[{{&(0x7f0000000140)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x10}}], 0x1, 0x40044) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000200000040cd0c800000010102030109022e0001010080fa0904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000c80)=ANY=[@ANYBLOB="c00108000000ebaa550303"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x20, r8, 0x1, 0x70bd2e, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x7800, 0x40, 0x0, 0x5, {{0x1a, 0x4, 0x0, 0x7, 0x68, 0x66, 0x0, 0x4, 0xf3e7eb4a4b96b22, 0x0, @multicast1, @multicast1, {[@generic={0x88, 0xb, "3cfbdc470c43d8ab15"}, @ssrr={0x89, 0xb, 0xad, [@private=0xa010102, @local]}, @generic={0x88, 0xf, "8785756d0bb3f61b4a6f0c7aec"}, @generic={0x44, 0xa, "3f5c02f8238fae0c"}, @timestamp={0x44, 0x24, 0xea, 0x0, 0x6, [0x6, 0x8, 0x0, 0x1, 0x3, 0x7ff, 0xf, 0x0]}]}}}}}) syz_clone(0x2000200, &(0x7f0000000cc0)="09e846b73b4a1471ea9ce01117460dc34a0b283474e41326084f91b84a56a81dbb1e32a249c83bb84746b615cb4962ce8528fba57609a6fea7cb83924b5f8c7876c4a226a6f0bb0d3347e4665bdf4b0f8ef1a1e6bf842ea0e7e2cb882c52f4222b01601198fbfb47915d32665ca220c4b458ed15fcf4da0be60d5bc3c32437177c6f177d4e", 0x85, &(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)="07d8d55f0d69fa64f13913d819f18907d67a0c0cdd63152e4509adee20818bc84a1b8dba980f14789f02db7b9b4d65f4c11b271ac3d493df1a82933efe1178a4eb8290022b03fe6ed792b393f0010171e81c952b6acb39750bbead337574461ee6ed6e3c14d21b0e63624097af92f0086429683b0243896576a5dea33f336c3c99900146e7abc64bd353c77e066f6eb58dc31d4b99865bf33e8dc05d4ec1b5e56f20199f299f6f79736d184ccb4c15ab0d45acd19c3523cb1a16a69c8daf4abbf9129bde0da92a5f04e288e9f6f36dbaaef97e9b7b62bac20f9a8e") ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xc9, 0x4, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x7810, 0x86, 0x1}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000700)={0x0, @broadcast, @local}, &(0x7f0000000740)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl1\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x700, 0x7, 0xe, 0x3ff, {{0x1c, 0x4, 0x0, 0x5, 0x70, 0x65, 0x0, 0x2, 0x29, 0x0, @broadcast, @multicast1, {[@timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x4}, {@multicast1, 0x1000}, {@broadcast, 0x7}, {@private=0xa010102, 0x2}, {@multicast2, 0x75d6}, {@dev={0xac, 0x14, 0x14, 0x38}}]}, @timestamp={0x44, 0x8, 0xfa, 0x0, 0x1, [0x6]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0xe3, 0x0, 0x8, [0x8, 0x7, 0x7, 0x3, 0x1, 0x1]}]}}}}}) getsockname$packet(r2, &(0x7f0000000880), &(0x7f00000008c0)=0x14) r9 = socket(0x10, 0x2, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000900)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x4, 0x9, 0x11, 0x40, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x6, 0x7fff, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x10, 0x2, 0x6}}) 6.338333048s ago: executing program 2 (id=37): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000240)={0x18, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 4.945323051s ago: executing program 4 (id=46): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.875818053s ago: executing program 4 (id=47): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f00000003c0)={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}, 0x4004080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bond_slave_0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 4.329899026s ago: executing program 0 (id=59): syz_usb_connect(0x3, 0x3d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)="b2", 0x1}], 0x1) 4.232992908s ago: executing program 4 (id=60): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x10, &(0x7f0000000480)={0x20, 0x16}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000001c0)={0x40, 0x29, 0x6, "2763fc58735a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000006c0)={0x0, 0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.32780417s ago: executing program 3 (id=71): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x222c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x40) 3.32774216s ago: executing program 3 (id=72): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x4}) 3.32767903s ago: executing program 3 (id=73): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000780)={0xa8, 0x0, 0x3}) 3.292823271s ago: executing program 3 (id=74): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000001340)=0x400) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000001380)=0xffffffffffffffff) sendmsg$inet(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001440)="8285bd1f7b", 0x5}], 0x1}, 0x400c9c1) 3.281620991s ago: executing program 3 (id=75): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000002980)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000029c0)=0x1, 0x4) bind$inet6(r0, &(0x7f0000002a00)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000002a40)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x4d, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}, {"ce51d44339aca29604fb40f120306809bb0042200df66cccf65ed9c4d26f5078e70878ed8a4629ff04c91d6d3db7aa91db05d73aff20169add"}}}}}}}, 0x0) 3.227802213s ago: executing program 3 (id=76): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x5, 0x4, 0x1, 0x16, 0x1c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0x2a) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.140487545s ago: executing program 0 (id=77): inotify_init1(0x80000) unshare(0x6020400) pselect6(0x40, &(0x7f0000000140)={0xe, 0xffffffffffffffff, 0x8, 0x2, 0x0, 0xfffffffffffff30c, 0x5}, &(0x7f0000000180)={0x4, 0x0, 0x0, 0xbd, 0x6, 0x0, 0xfffffffffffffffe, 0xb}, 0x0, 0x0, 0x0) 3.129716235s ago: executing program 0 (id=78): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000008000000de4d8a63fd81cd10cfc19c9f72d6f9d59b0b6437c283f10e79af2f846716cc88287ef6492777c3e2", @ANYRESOCT=0x0, @ANYBLOB="ac1414"], 0x38}, 0x200040c4) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000140)={0x20, 0x6, 0x4, "216827dd"}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'bridge0\x00'}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd25, 0x0, {{@in6=@private2, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1d}, {0x0, 0xd42, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x104, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in=@broadcast, 0x0, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x4, 0x0, 0x0, 0x3, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x1bc}}, 0x0) 2.779067573s ago: executing program 2 (id=79): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.951314673s ago: executing program 1 (id=83): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 1.917802844s ago: executing program 1 (id=84): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@new_dev={0x1, 0x589, 0x0, 0x0, 0x1000, 0xffffffff, r0, 0x0, 0xe}}}, &(0x7f0000000480)=0x0) r6 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x8880, 0x85) lseek(r8, 0x100, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) prctl$PR_GET_TSC(0x19, &(0x7f00000004c0)) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000474246f9efea00ffff01000000"], 0x10}, 0x0) 1.840315386s ago: executing program 1 (id=85): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='trylock '], 0xc) 1.770165787s ago: executing program 1 (id=86): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0), 0x802, 0x0) mprotect(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0xfffd, 0x400d}, 0x4d, [0x400, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7f, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0xfffffe00, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0xffff, 0x0, 0xfffffffc, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffc3c3, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffff8, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2842, 0xfffffffe, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10e3, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0xf9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x43, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x80003, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7ff, 0x0, 0x6, 0x2, 0x0, 0x0, 0x8], [0x81, 0x0, 0x5d30, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x2, 0xf1, 0x0, 0x4, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c) 1.767577237s ago: executing program 1 (id=87): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@set_irq_handler={0xc8, 0x20, {0x80, 0x2}}, @uexit={0x0, 0x18, 0xaaaa}], 0x38}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xaaaa) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000100)=0x80) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xfffffffffffffffe) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 1.65678146s ago: executing program 0 (id=88): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) lstat(0x0, 0x0) 1.603800881s ago: executing program 0 (id=89): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000000)=""/147) 1.603670272s ago: executing program 1 (id=90): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000004c0)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.202135261s ago: executing program 4 (id=91): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x24}}, 0x0) 1.191561842s ago: executing program 4 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000140007800800114000000000050015000c000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) 1.081807334s ago: executing program 4 (id=93): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x2, 0x57, &(0x7f00000012c0)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x11, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000001680)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf00) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = syz_io_uring_setup(0x11f3, &(0x7f0000001540)={0x0, 0x7071, 0x80000, 0x0, 0x2f6}, &(0x7f0000001240), &(0x7f0000001180), &(0x7f0000001500)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 0s ago: executing program 0 (id=94): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000004780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f00000047c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 29.499844][ T28] audit: type=1400 audit(1792577131.393:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.503835][ T278] cgroup: Unknown subsys name 'net' [ 29.522876][ T28] audit: type=1400 audit(1792577131.393:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.550991][ T28] audit: type=1400 audit(1792577131.423:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.551373][ T278] cgroup: Unknown subsys name 'devices' [ 29.695139][ T278] cgroup: Unknown subsys name 'hugetlb' [ 29.700973][ T278] cgroup: Unknown subsys name 'rlimit' [ 29.806867][ T28] audit: type=1400 audit(1792577131.703:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.830203][ T28] audit: type=1400 audit(1792577131.703:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.855366][ T28] audit: type=1400 audit(1792577131.703:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.880580][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.889484][ T28] audit: type=1400 audit(1792577131.783:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.915445][ T28] audit: type=1400 audit(1792577131.783:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.962115][ T28] audit: type=1400 audit(1792577131.853:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.988188][ T28] audit: type=1400 audit(1792577131.853:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.988246][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.854717][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.861912][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.869838][ T287] device bridge_slave_0 entered promiscuous mode [ 30.878695][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.885946][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.893569][ T287] device bridge_slave_1 entered promiscuous mode [ 30.986506][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.993881][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.001597][ T286] device bridge_slave_0 entered promiscuous mode [ 31.011389][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.018559][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.026284][ T286] device bridge_slave_1 entered promiscuous mode [ 31.055634][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.062736][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.070285][ T289] device bridge_slave_0 entered promiscuous mode [ 31.079714][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.087152][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.096557][ T289] device bridge_slave_1 entered promiscuous mode [ 31.123783][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.130880][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.138590][ T290] device bridge_slave_0 entered promiscuous mode [ 31.148784][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.156039][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.163762][ T290] device bridge_slave_1 entered promiscuous mode [ 31.170537][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.177625][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.185131][ T288] device bridge_slave_0 entered promiscuous mode [ 31.227948][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.235154][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.242833][ T288] device bridge_slave_1 entered promiscuous mode [ 31.369273][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.376397][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.383819][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.391087][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.410748][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.417954][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.425391][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.432538][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.483888][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.490984][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.498596][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.505841][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.541201][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.548582][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.555923][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.562995][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.579718][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.587112][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.594757][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.602118][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.610083][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.617351][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.625028][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.632577][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.641640][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.649176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.677875][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.685685][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.694372][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.701406][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.708945][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.717430][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.724638][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.755555][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.763164][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.771863][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.779169][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.788097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.796509][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.804955][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.812033][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.819846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.828360][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.836908][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.844005][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.851496][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.859923][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.867118][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.903428][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.911754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.919928][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.928783][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.937263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.944996][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.952728][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.961531][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.969850][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.977006][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.985206][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.993695][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.001798][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.010359][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.018753][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.027128][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.035520][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.043520][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.051914][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.059800][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.074161][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.082252][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.089855][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.098403][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.106990][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.114184][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.121836][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.130541][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.139019][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.146244][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.153834][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.162197][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.170556][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.177617][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.186238][ T287] device veth0_vlan entered promiscuous mode [ 32.200193][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.219388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.227602][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.235866][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.246144][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.254658][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.270105][ T288] device veth0_vlan entered promiscuous mode [ 32.279611][ T287] device veth1_macvtap entered promiscuous mode [ 32.287213][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.295616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.304272][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.312264][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.321202][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.329944][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.338234][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.346813][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.355090][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.363794][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.372246][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.379988][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.396393][ T286] device veth0_vlan entered promiscuous mode [ 32.404036][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.412122][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.420670][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.428510][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.449963][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.458756][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.467702][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.476428][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.485031][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.493815][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.502141][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.512906][ T289] device veth0_vlan entered promiscuous mode [ 32.527569][ T288] device veth1_macvtap entered promiscuous mode [ 32.537656][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.546236][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.554562][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.563709][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.571263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.581341][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.589863][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.608914][ T290] device veth0_vlan entered promiscuous mode [ 32.617913][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 32.617936][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.634293][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.642503][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.650200][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.658687][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.667112][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.677779][ T286] device veth1_macvtap entered promiscuous mode [ 32.686331][ T289] device veth1_macvtap entered promiscuous mode [ 32.697150][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.705466][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.715534][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.728095][ T310] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2'. [ 32.736616][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.746256][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.755003][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.764520][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.779332][ T290] device veth1_macvtap entered promiscuous mode [ 32.799103][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.808184][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.817995][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.827745][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.836785][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.885116][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.906459][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.928161][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.938885][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.159593][ T345] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.182719][ T19] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 33.222777][ T316] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 33.242690][ T39] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 33.374100][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 33.385971][ T19] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a31, bcdDevice= 0.00 [ 33.395307][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.408390][ T316] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 33.420560][ T19] usb 4-1: config 0 descriptor?? [ 33.425642][ T316] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 33.434582][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 33.436629][ T316] usb 1-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 33.446956][ T319] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.457556][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.464305][ T39] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a31, bcdDevice= 0.00 [ 33.481436][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.491335][ T39] usb 3-1: config 0 descriptor?? [ 33.499116][ T327] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 33.682889][ T314] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.873860][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.885053][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.895368][ T314] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 33.897982][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 33.904958][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.920711][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 33.924099][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 33.928655][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 33.943583][ T314] usb 2-1: config 0 descriptor?? [ 33.948667][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 33.956577][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 33.958752][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 33.972385][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 33.972539][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 33.987626][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 33.989093][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.001720][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.008993][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.010958][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.020633][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.025695][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.034115][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.042900][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.051091][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.056425][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.063948][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.070865][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.079868][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.085494][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.104386][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.112300][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.120446][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.128577][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.136477][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.155035][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.162509][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.170834][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.179019][ T362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.208527][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.214271][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.243595][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.244892][ T362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.252860][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.260039][ T364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.274997][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.283142][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.290835][ T364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.309265][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.325056][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.328876][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.354431][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.362100][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.362229][ T314] hid-generic 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 34.390474][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.398154][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.418254][ T314] hid-generic 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 34.422382][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.433502][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.455539][ T314] hid-generic 0003:0D8C:0022.0003: hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 34.462240][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.468324][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.505725][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.518056][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.545446][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.549155][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.569954][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 34.569969][ T28] audit: type=1400 audit(1792577136.463:128): avc: denied { read } for pid=373 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.593357][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.621821][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.634842][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.642405][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.646829][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.661482][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.669342][ T39] hid-generic 0003:1B1C:0A31.0002: unknown main item tag 0x0 [ 34.680633][ T39] hid-generic 0003:1B1C:0A31.0002: hidraw1: USB HID v9.62 Device [HID 1b1c:0a31] on usb-dummy_hcd.2-1/input0 [ 34.701453][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.709151][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.721975][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.729767][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.737625][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.745336][ T19] hid-generic 0003:1B1C:0A31.0001: unknown main item tag 0x0 [ 34.764333][ T39] usb 2-1: USB disconnect, device number 2 [ 34.771397][ T19] hid-generic 0003:1B1C:0A31.0001: hidraw2: USB HID v9.62 Device [HID 1b1c:0a31] on usb-dummy_hcd.3-1/input0 [ 34.825024][ T19] usb 4-1: USB disconnect, device number 2 [ 34.862806][ T316] usb 3-1: USB disconnect, device number 2 [ 34.888230][ T383] fido_id[383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 34.995841][ T28] audit: type=1400 audit(1792577136.893:129): avc: denied { ioctl } for pid=394 comm="syz.4.27" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16601 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.197122][ T28] audit: type=1400 audit(1792577137.093:130): avc: denied { create } for pid=408 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.224586][ T28] audit: type=1400 audit(1792577137.123:131): avc: denied { setattr } for pid=408 comm="syz.3.33" name="NETLINK" dev="sockfs" ino=16689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.258781][ T28] audit: type=1400 audit(1792577137.153:132): avc: denied { read write } for pid=412 comm="syz.3.35" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.282360][ T28] audit: type=1400 audit(1792577137.153:133): avc: denied { open } for pid=412 comm="syz.3.35" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.305978][ T28] audit: type=1400 audit(1792577137.163:134): avc: denied { unmount } for pid=412 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 35.372669][ T316] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 35.482740][ T19] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.553952][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.565120][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.575338][ T316] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 35.584668][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.593719][ T316] usb 5-1: config 0 descriptor?? [ 35.609634][ T28] audit: type=1400 audit(1792577137.503:135): avc: denied { map_read map_write } for pid=427 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.629884][ T28] audit: type=1400 audit(1792577137.503:136): avc: denied { perfmon } for pid=427 comm="syz.3.42" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.650829][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.672802][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 35.678935][ T19] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 35.690447][ T19] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 35.701100][ T19] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 35.711439][ T19] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 35.724647][ T19] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 35.734105][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.842695][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 35.849055][ T39] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.859349][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 35.868637][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.877913][ T39] usb 3-1: config 0 descriptor?? [ 35.932896][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.948106][ T39] usb 1-1: USB disconnect, device number 2 [ 36.002332][ T316] hid-generic 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 36.010135][ T316] hid-generic 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 36.018934][ T316] hid-generic 0003:0D8C:0022.0004: hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 36.114019][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.125213][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 36.134729][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.153132][ T24] usb 4-1: config 0 descriptor?? [ 36.213505][ T316] usb 5-1: USB disconnect, device number 2 [ 36.561213][ T24] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 36.571703][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input5 [ 36.656233][ T24] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 36.762800][ C1] keytouch 0003:0926:3333.0005: Event data for report 0 was too short (8 vs 2) [ 36.791994][ T28] audit: type=1400 audit(1792577138.683:137): avc: denied { ioctl } for pid=444 comm="syz.4.47" path="socket:[16317]" dev="sockfs" ino=16317 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.963187][ T39] usb 4-1: USB disconnect, device number 3 [ 37.592700][ T297] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.742726][ T39] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 37.773010][ T297] usb 1-1: Using ep0 maxpacket: 8 [ 37.779550][ T297] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 37.787824][ T297] usb 1-1: config 0 has no interface number 0 [ 37.794055][ T297] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 37.804829][ T297] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 37.815642][ T297] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 37.828930][ T297] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 37.838023][ T297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.847463][ T297] usb 1-1: config 0 descriptor?? [ 37.933242][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 37.939964][ T39] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 37.952455][ T39] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 37.961711][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.969813][ T39] usb 5-1: Product: syz [ 37.974125][ T39] usb 5-1: Manufacturer: syz [ 37.978722][ T39] usb 5-1: SerialNumber: syz [ 37.984460][ T39] usb 5-1: config 0 descriptor?? [ 38.055676][ T297] usb 1-1: USB disconnect, device number 3 [ 38.209587][ T19] usb 2-1: USB disconnect, device number 3 [ 38.632825][ T19] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.712718][ T39] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.814809][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.825254][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 38.839185][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.849414][ T297] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.857041][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 38.886666][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.899352][ T39] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 38.899933][ T316] usb 3-1: USB disconnect, device number 3 [ 38.909662][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.914505][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 38.925307][ T39] usb 4-1: Product: syz [ 38.938143][ T19] usb 2-1: New USB device found, idVendor=7dcc, idProduct=676e, bcdDevice=77.db [ 38.941681][ T39] usb 4-1: Manufacturer: syz [ 38.953654][ T39] usb 4-1: SerialNumber: syz [ 38.957222][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.969937][ T19] usb 2-1: config 0 descriptor?? [ 39.072784][ T297] usb 1-1: Using ep0 maxpacket: 16 [ 39.079457][ T297] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 39.089875][ T297] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 39.099268][ T297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.107845][ T297] usb 1-1: Product: syz [ 39.112151][ T297] usb 1-1: Manufacturer: syz [ 39.116869][ T297] usb 1-1: SerialNumber: syz [ 39.122282][ T297] r8152-cfgselector 1-1: config 0 descriptor?? [ 39.179089][ T19] usb 2-1: USB disconnect, device number 4 [ 39.302706][ T316] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 39.483796][ T316] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 39.492995][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.501921][ T316] usb 3-1: config 0 descriptor?? [ 39.533175][ T297] r8152-cfgselector 1-1: Unknown version 0x0000 [ 39.543271][ T297] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 39.724840][ T533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.83'. [ 39.736308][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 39.745015][ T533] device bridge_slave_0 left promiscuous mode [ 39.751189][ T533] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.759240][ T533] device bridge_slave_1 left promiscuous mode [ 39.765688][ T533] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.795645][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 39.795660][ T28] audit: type=1400 audit(1792577141.693:153): avc: denied { mount } for pid=534 comm="syz.1.84" name="/" dev="ramfs" ino=17205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 39.869183][ T28] audit: type=1400 audit(1792577141.763:154): avc: denied { read write } for pid=540 comm="syz.1.85" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 39.896228][ T28] audit: type=1400 audit(1792577141.763:155): avc: denied { open } for pid=540 comm="syz.1.85" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 40.332833][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 40.362700][ T39] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.411713][ T536] syz.1.84 (536) used greatest stack depth: 22536 bytes left [ 40.492944][ T297] usb 5-1: USB disconnect, device number 3 [ 40.513921][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.525173][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.535001][ T24] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 40.544165][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 40.549453][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.559282][ T39] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 40.571076][ T24] usb 1-1: config 0 descriptor?? [ 40.576247][ T39] usb 2-1: config 0 has no interface number 0 [ 40.582460][ T39] usb 2-1: config 0 interface 184 has no altsetting 0 [ 40.592750][ T39] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 40.602430][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.610817][ T39] usb 2-1: Product: syz [ 40.615190][ T39] usb 2-1: Manufacturer: syz [ 40.620098][ T39] usb 2-1: SerialNumber: syz [ 40.626017][ T39] usb 2-1: config 0 descriptor?? [ 40.632011][ T39] smsc75xx v1.0.0 [ 40.952732][ T297] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 40.993451][ T24] hid-generic 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 41.001038][ T24] hid-generic 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 41.009374][ T24] hid-generic 0003:0D8C:0022.0006: hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 41.133900][ T297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.145756][ T297] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 41.154906][ T297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.162956][ T297] usb 5-1: Product: syz [ 41.167163][ T297] usb 5-1: Manufacturer: syz [ 41.171774][ T297] usb 5-1: SerialNumber: syz [ 41.194878][ T297] usb 1-1: USB disconnect, device number 5 [ 41.234293][ T39] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 41.245320][ T39] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 41.708055][ T28] audit: type=1400 audit(1792577143.603:156): avc: denied { create } for pid=573 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.727518][ T28] audit: type=1400 audit(1792577143.603:157): avc: denied { connect } for pid=573 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.727528][ T573] ================================================================== [ 41.727542][ T573] BUG: KASAN: use-after-free in mutex_lock+0x86/0x1b0 [ 41.747960][ T28] audit: type=1400 audit(1792577143.603:158): avc: denied { ioctl } for pid=573 comm="syz.0.94" path="socket:[17575]" dev="sockfs" ino=17575 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.754896][ T573] Write of size 8 at addr ffff888136e12550 by task syz.0.94/573 [ 41.754916][ T573] [ 41.754922][ T573] CPU: 0 PID: 573 Comm: syz.0.94 Not tainted syzkaller #0 [ 41.754942][ T573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 41.813542][ T573] Call Trace: [ 41.816866][ T573] [ 41.819825][ T573] __dump_stack+0x21/0x24 [ 41.824216][ T573] dump_stack_lvl+0x110/0x170 [ 41.828940][ T573] ? __cfi_dump_stack_lvl+0x8/0x8 [ 41.834020][ T573] ? mutex_lock+0x86/0x1b0 [ 41.838476][ T573] print_address_description+0x71/0x200 [ 41.844158][ T573] print_report+0x4a/0x60 [ 41.848575][ T573] kasan_report+0x122/0x150 [ 41.853139][ T573] ? mutex_lock+0x86/0x1b0 [ 41.857608][ T573] kasan_check_range+0x249/0x2a0 [ 41.862597][ T573] __kasan_check_write+0x14/0x20 [ 41.867604][ T573] mutex_lock+0x86/0x1b0 [ 41.871895][ T573] ? __cfi_mutex_lock+0x10/0x10 [ 41.876806][ T573] ? kfree+0x6f/0xf0 [ 41.880744][ T573] ? l2tp_session_put+0xaf/0x1a0 [ 41.885733][ T573] ? l2tp_session_delete+0x3df/0x4d0 [ 41.891049][ T573] pppol2tp_release+0x178/0x2b0 [ 41.895945][ T573] sock_close+0xc9/0x220 [ 41.900226][ T573] ? __cfi_sock_close+0x10/0x10 [ 41.905123][ T573] __fput+0x1fd/0x8f0 [ 41.909170][ T573] ____fput+0x15/0x20 [ 41.913197][ T573] task_work_run+0x1e1/0x250 [ 41.917825][ T573] ? __cfi_task_work_run+0x10/0x10 [ 41.922979][ T573] ? __cfi___close_range+0x10/0x10 [ 41.928213][ T573] exit_to_user_mode_loop+0x9b/0xb0 [ 41.933452][ T573] exit_to_user_mode_prepare+0x87/0xd0 [ 41.938956][ T573] syscall_exit_to_user_mode+0x1a/0x30 [ 41.944459][ T573] do_syscall_64+0x58/0xa0 [ 41.950119][ T573] ? clear_bhb_loop+0x30/0x80 [ 41.954831][ T573] ? clear_bhb_loop+0x30/0x80 [ 41.959639][ T573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 41.965731][ T573] RIP: 0033:0x7f058819f559 [ 41.970193][ T573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.989827][ T573] RSP: 002b:00007ffe9d6e2448 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 41.998287][ T573] RAX: 0000000000000000 RBX: 00007ffe9d6e2530 RCX: 00007f058819f559 [ 42.006283][ T573] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 42.014630][ T573] RBP: 000000000000a2ca R08: 0000000000000001 R09: 0000000000000000 [ 42.022717][ T573] R10: 0000001b2d920000 R11: 0000000000000246 R12: 00007ffe9d6e2570 [ 42.030918][ T573] R13: 00007f0588425fac R14: 000000000000a301 R15: 00007f0588425fa0 [ 42.039021][ T573] [ 42.042092][ T573] [ 42.044455][ T573] Allocated by task 574: [ 42.048713][ T573] kasan_set_track+0x4b/0x70 [ 42.053681][ T573] kasan_save_alloc_info+0x1f/0x30 [ 42.058871][ T573] __kasan_kmalloc+0x95/0xb0 [ 42.063664][ T573] __kmalloc+0xb4/0x1e0 [ 42.067940][ T573] l2tp_session_create+0x38/0xbd0 [ 42.073001][ T573] pppol2tp_connect+0xbf5/0x1640 [ 42.078182][ T573] __sys_connect+0x3da/0x460 [ 42.082894][ T573] __x64_sys_connect+0x7a/0x90 [ 42.087869][ T573] x64_sys_call+0x88d/0x9a0 [ 42.092574][ T573] do_syscall_64+0x4c/0xa0 [ 42.097042][ T573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.102972][ T573] [ 42.105323][ T573] Freed by task 573: [ 42.109231][ T573] kasan_set_track+0x4b/0x70 [ 42.114036][ T573] kasan_save_free_info+0x2b/0x40 [ 42.119100][ T573] ____kasan_slab_free+0x132/0x180 [ 42.124958][ T573] __kasan_slab_free+0x11/0x20 [ 42.129762][ T573] slab_free_freelist_hook+0xc2/0x190 [ 42.135269][ T573] __kmem_cache_free+0xb7/0x1b0 [ 42.140185][ T573] kfree+0x6f/0xf0 [ 42.144030][ T573] l2tp_session_put+0xaf/0x1a0 [ 42.148926][ T573] l2tp_session_delete+0x3df/0x4d0 [ 42.154245][ T573] pppol2tp_release+0x169/0x2b0 [ 42.159137][ T573] sock_close+0xc9/0x220 [ 42.163400][ T573] __fput+0x1fd/0x8f0 [ 42.167417][ T573] ____fput+0x15/0x20 [ 42.171420][ T573] task_work_run+0x1e1/0x250 [ 42.176121][ T573] exit_to_user_mode_loop+0x9b/0xb0 [ 42.181437][ T573] exit_to_user_mode_prepare+0x87/0xd0 [ 42.187245][ T573] syscall_exit_to_user_mode+0x1a/0x30 [ 42.193629][ T573] do_syscall_64+0x58/0xa0 [ 42.198092][ T573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.204023][ T573] [ 42.206377][ T573] The buggy address belongs to the object at ffff888136e12400 [ 42.206377][ T573] which belongs to the cache kmalloc-512 of size 512 [ 42.220463][ T573] The buggy address is located 336 bytes inside of [ 42.220463][ T573] 512-byte region [ffff888136e12400, ffff888136e12600) [ 42.233860][ T573] [ 42.236727][ T573] The buggy address belongs to the physical page: [ 42.243151][ T573] page:ffffea0004db8400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x136e10 [ 42.253429][ T573] head:ffffea0004db8400 order:2 compound_mapcount:0 compound_pincount:0 [ 42.261856][ T573] flags: 0x4000000000010200(slab|head|zone=1) [ 42.268049][ T573] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00 [ 42.276657][ T573] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 42.285264][ T573] page dumped because: kasan: bad access detected [ 42.291737][ T573] page_owner tracks the page as allocated [ 42.297482][ T573] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 574, tgid 573 (syz.0.94), ts 41711791031, free_ts 41711718890 [ 42.319729][ T573] post_alloc_hook+0x1f5/0x210 [ 42.324526][ T573] prep_new_page+0x1c/0x110 [ 42.329060][ T573] get_page_from_freelist+0x2ca9/0x2d20 [ 42.334722][ T573] __alloc_pages+0x1fa/0x610 [ 42.339344][ T573] alloc_slab_page+0x6e/0xf0 [ 42.343971][ T573] new_slab+0x98/0x3e0 [ 42.348058][ T573] ___slab_alloc+0x70f/0xb70 [ 42.352773][ T573] __slab_alloc+0x5e/0xa0 [ 42.357111][ T573] __kmem_cache_alloc_node+0x204/0x2d0 [ 42.362599][ T573] __kmalloc+0xa4/0x1e0 [ 42.366776][ T573] l2tp_session_create+0x38/0xbd0 [ 42.371822][ T573] pppol2tp_connect+0xbf5/0x1640 [ 42.376785][ T573] __sys_connect+0x3da/0x460 [ 42.381401][ T573] __x64_sys_connect+0x7a/0x90 [ 42.386181][ T573] x64_sys_call+0x88d/0x9a0 [ 42.390705][ T573] do_syscall_64+0x4c/0xa0 [ 42.395137][ T573] page last free stack trace: [ 42.399823][ T573] free_unref_page_prepare+0x81b/0x820 [ 42.405304][ T573] free_unref_page+0x93/0x530 [ 42.410002][ T573] __free_pages+0x67/0x100 [ 42.414502][ T573] free_pages+0x82/0x90 [ 42.418707][ T573] __stack_depot_save+0x45f/0x490 [ 42.424753][ T573] kasan_set_track+0x60/0x70 [ 42.429375][ T573] kasan_save_alloc_info+0x1f/0x30 [ 42.434504][ T573] __kasan_slab_alloc+0x72/0x80 [ 42.439375][ T573] slab_post_alloc_hook+0x4f/0x2d0 [ 42.444633][ T573] kmem_cache_alloc+0x166/0x320 [ 42.449507][ T573] radix_tree_node_alloc+0x80/0x380 [ 42.454742][ T573] idr_get_free+0x2b1/0xa90 [ 42.459257][ T573] idr_alloc_u32+0x179/0x310 [ 42.463873][ T573] l2tp_tunnel_register+0x1af/0x1540 [ 42.469181][ T573] pppol2tp_connect+0x881/0x1640 [ 42.474144][ T573] __sys_connect+0x3da/0x460 [ 42.478752][ T573] [ 42.481095][ T573] Memory state around the buggy address: [ 42.486740][ T573] ffff888136e12400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.494815][ T573] ffff888136e12480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.502887][ T573] >ffff888136e12500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.510981][ T573] ^ [ 42.517682][ T573] ffff888136e12580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.525772][ T573] ffff888136e12600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.533972][ T573] ================================================================== [ 42.542719][ T573] Disabling lock debugging due to kernel taint [ 42.570507][ T316] usb 3-1: USB disconnect, device number 4 [ 42.578787][ T28] audit: type=1400 audit(1792577144.453:159): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 42.606903][ T307] usb 4-1: USB disconnect, device number 4 [ 42.610389][ T28] audit: type=1400 audit(1792577144.453:160): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.635676][ T28] audit: type=1400 audit(1792577144.453:161): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.657032][ T28] audit: type=1400 audit(1792577144.453:162): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.552073][ T39] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 43.563159][ T39] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 43.573470][ T39] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 43.583027][ T39] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 43.592745][ T39] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 43.600472][ T39] usb 2-1: USB disconnect, device number 5 [ 43.650081][ T24] usb 5-1: USB disconnect, device number 4