last executing test programs: 7m50.18913607s ago: executing program 0 (id=17): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 7m49.82125774s ago: executing program 0 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) statx(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x100, 0x240291832fe86794, &(0x7f0000000240)) 7m49.205302174s ago: executing program 0 (id=19): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103901) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) 7m48.571346359s ago: executing program 0 (id=20): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="980000000002010400000000000000000a00ffff04000180440003800c00028005000100000000002c00018014000300fc000000000000000000000000f2fea26c2dc92fcf8000000000000000000000000000bb06000340000200003c0002800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004"], 0x98}}, 0x0) 7m42.099597898s ago: executing program 0 (id=21): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 7m38.810476301s ago: executing program 0 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) 6m53.38819805s ago: executing program 32 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) 2m57.989632017s ago: executing program 2 (id=132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2m57.704079363s ago: executing program 2 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 2m57.300092976s ago: executing program 2 (id=134): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2m57.085482088s ago: executing program 2 (id=135): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 2m56.660715361s ago: executing program 2 (id=136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd70000000000012000000080007005ee600000c00018008000100", @ANYRES32, @ANYBLOB='\b\x00\t'], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2m56.451835402s ago: executing program 2 (id=137): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x18) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) 2m11.151045105s ago: executing program 33 (id=137): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x18) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) 34.0699312s ago: executing program 3 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) 28.060912323s ago: executing program 3 (id=191): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000300010000000336"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f00000002c0)={0x20, 0x2d, 0x2, {0x2, 0xf}}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x18, 0x5d, 0x6, "4288796c", "bd7467b2"}}, 0x0}, &(0x7f0000000b00)={0x84, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x4}, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x2}, 0x0}) 27.811081647s ago: executing program 3 (id=192): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r7, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 27.539655442s ago: executing program 3 (id=193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r5], 0x0, &(0x7f0000000580)=[0x0], &(0x7f0000000040)}) 7.660176635s ago: executing program 3 (id=200): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200002}, &(0x7f0000000480), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x7502, 0x400}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 5.060006269s ago: executing program 3 (id=201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f00000036c0)=ANY=[], 0xfce) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet_mtu(r2, 0x111, 0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000002060101000000000000000001000000140007800800124000070005050015001f0000000500010006000000050005000a00000005000400000000000900020073797a300000000012000300686173683a6e65742c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0xc951349034062a20) 3.123434447s ago: executing program 1 (id=203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4844}, 0x4000000) 2.929214717s ago: executing program 1 (id=204): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0xfffffffc, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffe}, 0xb) 2.809554614s ago: executing program 1 (id=205): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x44}}, 0x0) 2.566215527s ago: executing program 1 (id=206): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d00000905820200020000000905", @ANYRESDEC], 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x4000, 0x8000000b, 0x0, 0x1, 0x4, 0x10, 0x40, 0x6, 0xe, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 230.490877ms ago: executing program 1 (id=207): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32, @ANYBLOB="00000000000000006c001280090001"], 0x9c}, 0x1, 0xba01}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c"], 0x528}}, 0xc000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 1 (id=208): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000072000/0x4000)=nil, 0x3000, 0x3}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 47.565513][ T31] audit: type=1400 audit(47.490:56): avc: denied { read write } for pid=3092 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.566828][ T31] audit: type=1400 audit(47.490:57): avc: denied { open } for pid=3092 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:1806' (ED25519) to the list of known hosts. [ 59.107626][ T31] audit: type=1400 audit(59.030:58): avc: denied { name_bind } for pid=3095 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.910890][ T31] audit: type=1400 audit(60.820:59): avc: denied { execute } for pid=3096 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.952397][ T31] audit: type=1400 audit(60.870:60): avc: denied { execute_no_trans } for pid=3096 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.719866][ T31] audit: type=1400 audit(64.640:61): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.725131][ T31] audit: type=1400 audit(64.650:62): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.740809][ T3096] cgroup: Unknown subsys name 'net' [ 64.750137][ T31] audit: type=1400 audit(64.670:63): avc: denied { unmount } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.949528][ T3096] cgroup: Unknown subsys name 'cpuset' [ 64.956585][ T3096] cgroup: Unknown subsys name 'hugetlb' [ 64.957818][ T3096] cgroup: Unknown subsys name 'rlimit' [ 65.222781][ T31] audit: type=1400 audit(65.140:64): avc: denied { setattr } for pid=3096 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.225207][ T31] audit: type=1400 audit(65.150:65): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.225565][ T31] audit: type=1400 audit(65.150:66): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.416877][ T3098] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.420958][ T31] audit: type=1400 audit(65.340:67): avc: denied { relabelto } for pid=3098 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.428146][ T31] audit: type=1400 audit(65.350:68): avc: denied { write } for pid=3098 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.461717][ T31] audit: type=1400 audit(65.380:69): avc: denied { read } for pid=3096 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 65.468157][ T31] audit: type=1400 audit(65.390:70): avc: denied { open } for pid=3096 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 73.441024][ T3096] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.343380][ T31] audit: type=1400 audit(75.260:71): avc: denied { execmem } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 75.421005][ T31] audit: type=1400 audit(75.340:72): avc: denied { read } for pid=3101 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.426635][ T31] audit: type=1400 audit(75.350:73): avc: denied { open } for pid=3101 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.437148][ T31] audit: type=1400 audit(75.360:74): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 75.469733][ T31] audit: type=1400 audit(75.390:75): avc: denied { module_request } for pid=3102 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 75.473355][ T31] audit: type=1400 audit(75.390:76): avc: denied { module_request } for pid=3101 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 75.565608][ T31] audit: type=1400 audit(75.490:77): avc: denied { sys_module } for pid=3101 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 76.457337][ T31] audit: type=1400 audit(76.380:78): avc: denied { ioctl } for pid=3102 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=675 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.836788][ T3101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.850094][ T3101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.017398][ T3102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.027390][ T3102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.945479][ T3101] hsr_slave_0: entered promiscuous mode [ 78.949549][ T3101] hsr_slave_1: entered promiscuous mode [ 79.087867][ T3102] hsr_slave_0: entered promiscuous mode [ 79.090680][ T3102] hsr_slave_1: entered promiscuous mode [ 79.098638][ T3102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.099956][ T3102] Cannot create hsr debugfs directory [ 79.590585][ T31] audit: type=1400 audit(79.510:79): avc: denied { create } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.598486][ T31] audit: type=1400 audit(79.520:80): avc: denied { write } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.615610][ T3101] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.640729][ T3101] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.649724][ T3101] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.670309][ T3101] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.740762][ T3102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.758595][ T3102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.766053][ T3102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.779606][ T3102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.568150][ T3102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.589719][ T3101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.550813][ T3101] veth0_vlan: entered promiscuous mode [ 83.571808][ T3101] veth1_vlan: entered promiscuous mode [ 83.674650][ T3101] veth0_macvtap: entered promiscuous mode [ 83.690930][ T3101] veth1_macvtap: entered promiscuous mode [ 83.755944][ T3102] veth0_vlan: entered promiscuous mode [ 83.797455][ T3102] veth1_vlan: entered promiscuous mode [ 83.810429][ T3101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.815894][ T3101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.819860][ T3101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.826907][ T3101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.978814][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 83.981542][ T31] audit: type=1400 audit(83.900:82): avc: denied { mount } for pid=3101 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.007745][ T31] audit: type=1400 audit(83.930:83): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/syzkaller.Ma7gHC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.010639][ T31] audit: type=1400 audit(83.930:84): avc: denied { mount } for pid=3101 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.026120][ T31] audit: type=1400 audit(83.950:85): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/syzkaller.Ma7gHC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.033205][ T31] audit: type=1400 audit(83.960:86): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/syzkaller.Ma7gHC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.057966][ T3102] veth0_macvtap: entered promiscuous mode [ 84.067322][ T3102] veth1_macvtap: entered promiscuous mode [ 84.070348][ T31] audit: type=1400 audit(83.990:87): avc: denied { unmount } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.081823][ T31] audit: type=1400 audit(84.000:88): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.086264][ T31] audit: type=1400 audit(84.000:89): avc: denied { mount } for pid=3101 comm="syz-executor" name="/" dev="gadgetfs" ino=1937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 84.095096][ T31] audit: type=1400 audit(84.020:90): avc: denied { mount } for pid=3101 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.097021][ T31] audit: type=1400 audit(84.020:91): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 84.140255][ T3102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.140597][ T3102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.140687][ T3102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.140794][ T3102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.190977][ T3101] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.755241][ T94] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.913909][ T94] usb 2-1: Using ep0 maxpacket: 32 [ 84.930376][ T94] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.930898][ T94] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.932030][ T94] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 84.939013][ T94] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.951239][ T94] usb 2-1: config 0 descriptor?? [ 84.975895][ T94] hub 2-1:0.0: USB hub found [ 85.380742][ T3803] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.579483][ T94] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 85.628031][ T94] usbhid 2-1:0.0: can't add hid device: -71 [ 85.629120][ T94] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 85.666772][ T94] usb 2-1: USB disconnect, device number 2 [ 86.920633][ C0] hrtimer: interrupt took 7310064 ns [ 87.608819][ T3841] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 88.359711][ T3850] vlan2: entered allmulticast mode [ 88.360366][ T3850] bridge_slave_0: entered allmulticast mode [ 88.828176][ T3858] Illegal XDP return value 4294967274 on prog (id 6) dev N/A, expect packet loss! [ 89.831967][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 89.832567][ T31] audit: type=1400 audit(89.750:117): avc: denied { create } for pid=3865 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.849101][ T31] audit: type=1400 audit(89.770:118): avc: denied { write } for pid=3865 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.873363][ T31] audit: type=1400 audit(89.790:119): avc: denied { nlmsg_write } for pid=3865 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.366781][ T31] audit: type=1400 audit(90.290:120): avc: denied { create } for pid=3867 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.436267][ T31] audit: type=1400 audit(90.360:121): avc: denied { block_suspend } for pid=3867 comm="syz.1.13" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.213592][ T31] audit: type=1400 audit(91.130:122): avc: denied { execute } for pid=3867 comm="syz.1.13" name="file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.394279][ T3875] ptrace attach of "/syz-executor exec"[3876] was attempted by "/syz-executor exec"[3875] [ 92.111813][ T31] audit: type=1400 audit(92.030:123): avc: denied { bind } for pid=3873 comm="syz.0.14" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.122746][ T31] audit: type=1400 audit(92.040:124): avc: denied { node_bind } for pid=3873 comm="syz.0.14" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 92.192498][ T31] audit: type=1400 audit(92.110:125): avc: denied { write } for pid=3873 comm="syz.0.14" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.775700][ T3872] process 'syz.1.13' launched './file0' with NULL argv: empty string added [ 92.782695][ T31] audit: type=1400 audit(92.700:126): avc: denied { execute_no_trans } for pid=3867 comm="syz.1.13" path="/7/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.622647][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 102.628439][ T31] audit: type=1400 audit(102.540:129): avc: denied { create } for pid=3901 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.640661][ T31] audit: type=1400 audit(102.560:130): avc: denied { write } for pid=3901 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.651620][ T3902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'. [ 111.045544][ T31] audit: type=1400 audit(110.950:131): avc: denied { write } for pid=3910 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 136.690161][ T3921] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.443535][ T2890] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 143.609789][ T2890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.611444][ T2890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.613758][ T2890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.617816][ T2890] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.619143][ T2890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.626113][ T2890] usb 2-1: config 0 descriptor?? [ 144.086304][ T2890] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 145.316496][ C1] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 145.453118][ T47] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 145.593088][ T47] usb 2-1: device descriptor read/64, error -32 [ 145.832895][ T47] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 145.973078][ T47] usb 2-1: device descriptor read/64, error -32 [ 146.212780][ T47] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 146.233368][ T47] usb 2-1: device descriptor read/8, error -32 [ 147.135765][ T3864] usb 2-1: USB disconnect, device number 3 [ 157.231807][ T3952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.250231][ T3952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.588796][ T3952] hsr_slave_0: entered promiscuous mode [ 158.590654][ T3952] hsr_slave_1: entered promiscuous mode [ 158.596878][ T3952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.597349][ T3952] Cannot create hsr debugfs directory [ 159.070416][ T3952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 159.091441][ T3952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 159.113373][ T3952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 159.120382][ T3952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 160.260839][ T3952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.856820][ T3952] veth0_vlan: entered promiscuous mode [ 166.933350][ T3952] veth1_vlan: entered promiscuous mode [ 167.117357][ T3952] veth0_macvtap: entered promiscuous mode [ 167.139062][ T3952] veth1_macvtap: entered promiscuous mode [ 167.238362][ T3952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.254781][ T3952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.263615][ T3952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.264923][ T3952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.655473][ T4313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.676717][ T4313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.470079][ T4324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 184.083769][ T4334] futex_wake_op: syz.1.38 tries to shift op by -1; fix this program [ 184.700523][ T4338] SELinux: syz.1.40 (4338) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 185.039289][ T3864] hid-generic 0000:0009:0001.0002: unknown main item tag 0x0 [ 185.039851][ T3864] hid-generic 0000:0009:0001.0002: unknown main item tag 0x0 [ 185.052997][ T3864] hid-generic 0000:0009:0001.0002: unknown main item tag 0x0 [ 185.057934][ T3864] hid-generic 0000:0009:0001.0002: hidraw0: HID v0.04 Device [syz0] on syz1 [ 191.557830][ T4345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 191.602803][ T31] audit: type=1400 audit(191.490:132): avc: denied { setopt } for pid=4339 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 198.186041][ T31] audit: type=1400 audit(198.110:133): avc: denied { allowed } for pid=4353 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 198.242773][ T31] audit: type=1400 audit(198.160:134): avc: denied { create } for pid=4353 comm="syz.2.44" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.265554][ T31] audit: type=1400 audit(198.190:135): avc: denied { map } for pid=4353 comm="syz.2.44" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.273004][ T31] audit: type=1400 audit(198.190:136): avc: denied { read write } for pid=4353 comm="syz.2.44" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 203.437064][ T4368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 206.885219][ T31] audit: type=1400 audit(206.810:137): avc: denied { mounton } for pid=4372 comm="syz.1.52" path="/23/bus" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 206.900437][ T31] audit: type=1400 audit(206.820:138): avc: denied { getopt } for pid=4372 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.054674][ T31] audit: type=1400 audit(206.950:139): avc: denied { unmount } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 207.442991][ T31] audit: type=1400 audit(207.360:140): avc: denied { mount } for pid=4376 comm="syz.1.54" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 207.456063][ T31] audit: type=1400 audit(207.380:141): avc: denied { unmount } for pid=4376 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 212.162888][ T31] audit: type=1400 audit(212.080:142): avc: denied { watch watch_reads } for pid=4381 comm="syz.1.56" path="/27/control" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 219.488028][ T3039] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.615491][ T3039] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.715092][ T3039] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.796572][ T3039] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.433829][ T3039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.465261][ T3039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.475498][ T3039] bond0 (unregistering): Released all slaves [ 220.770223][ T3039] hsr_slave_0: left promiscuous mode [ 220.779510][ T3039] hsr_slave_1: left promiscuous mode [ 220.813807][ T3039] veth1_macvtap: left promiscuous mode [ 220.815237][ T3039] veth0_macvtap: left promiscuous mode [ 220.818221][ T3039] veth1_vlan: left promiscuous mode [ 220.819503][ T3039] veth0_vlan: left promiscuous mode [ 228.438449][ T31] audit: type=1400 audit(228.360:143): avc: denied { create } for pid=4411 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 228.447430][ T31] audit: type=1400 audit(228.370:144): avc: denied { write } for pid=4411 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 240.876085][ T31] audit: type=1400 audit(240.800:145): avc: denied { create } for pid=4452 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 266.513708][ T4516] netlink: 56 bytes leftover after parsing attributes in process `syz.1.73'. [ 271.233796][ T4522] block device autoloading is deprecated and will be removed. [ 274.366262][ T31] audit: type=1400 audit(274.280:146): avc: denied { setopt } for pid=4519 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 287.273659][ T31] audit: type=1400 audit(287.190:147): avc: denied { listen } for pid=4529 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 291.944772][ T4540] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 301.655655][ T4542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.81'. [ 302.618064][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 302.817249][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.820926][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.824529][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.833724][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.834906][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.838986][ T43] usb 2-1: config 0 descriptor?? [ 303.340253][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 303.358311][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 303.359623][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 303.363522][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 303.373621][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 303.374944][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 303.375951][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 303.376983][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 303.377947][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 303.379040][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 303.380275][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 303.404022][ T43] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 307.315461][ T43] usb 2-1: USB disconnect, device number 4 [ 308.315224][ T4580] input: syz1 as /devices/virtual/input/input4 [ 324.672480][ T31] audit: type=1400 audit(324.590:148): avc: denied { append } for pid=4636 comm="syz.2.99" name="ptmx" dev="devtmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 326.263552][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 326.433763][ T43] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 326.434834][ T43] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1 [ 326.435597][ T43] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.436457][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 326.438786][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.453833][ T4643] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.466207][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 326.473685][ T43] usb 2-1: invalid MIDI in EP 0 [ 326.537998][ T43] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 326.668834][ T43] usb 2-1: USB disconnect, device number 5 [ 337.958851][ T31] audit: type=1400 audit(337.880:149): avc: denied { create } for pid=4680 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 337.970200][ T31] audit: type=1400 audit(337.890:150): avc: denied { ioctl } for pid=4680 comm="syz.2.105" path="socket:[3778]" dev="sockfs" ino=3778 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 340.689344][ T31] audit: type=1400 audit(340.610:151): avc: denied { bind } for pid=4680 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 342.320244][ T31] audit: type=1400 audit(342.240:152): avc: denied { write } for pid=4689 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 344.096810][ T31] audit: type=1400 audit(344.020:153): avc: denied { ioctl } for pid=4699 comm="syz.2.111" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3812 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 360.093278][ T4734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.109109][ T4734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.353850][ T4738] *** NOT YET: opcode c3 *** [ 360.655204][ T4743] sch_fq: defrate 0 ignored. [ 366.716779][ T31] audit: type=1326 audit(366.630:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.1.123" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 379.490469][ T31] audit: type=1400 audit(379.410:155): avc: denied { mount } for pid=4783 comm="syz.1.125" name="/" dev="configfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 381.970370][ T31] audit: type=1400 audit(381.890:156): avc: denied { unmount } for pid=3952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 386.355980][ T4806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.356905][ T4806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.288084][ T31] audit: type=1400 audit(388.210:157): avc: denied { mount } for pid=4817 comm="syz.2.135" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 393.779117][ T4826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 428.433015][ T4383] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 428.583509][ T4383] usb 2-1: Using ep0 maxpacket: 32 [ 428.599248][ T4383] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 428.599682][ T4383] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 428.603200][ T4383] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 428.603540][ T4383] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 428.603767][ T4383] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 428.604054][ T4383] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 428.604173][ T4383] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 428.604240][ T4383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.616684][ T4383] usb 2-1: config 0 descriptor?? [ 428.883156][ T4383] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 429.098924][ T4383] usb 2-1: USB disconnect, device number 6 [ 429.111184][ T4383] usblp0: removed [ 431.627927][ T31] audit: type=1400 audit(431.550:158): avc: denied { ioctl } for pid=4886 comm="syz.1.150" path="socket:[4163]" dev="sockfs" ino=4163 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 431.667086][ T31] audit: type=1400 audit(431.590:159): avc: denied { setattr } for pid=4886 comm="syz.1.150" name="RAWv6" dev="sockfs" ino=4163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 435.904111][ T4903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'. [ 435.937032][ T4903] bond0: (slave bond_slave_1): Releasing backup interface [ 439.518397][ T4893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.535975][ T4893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.035917][ T4893] hsr_slave_0: entered promiscuous mode [ 442.037961][ T4893] hsr_slave_1: entered promiscuous mode [ 442.789143][ T4893] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 442.828112][ T4893] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 442.840101][ T4893] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 442.895966][ T4893] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 444.451145][ T4893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.138428][ T4893] veth0_vlan: entered promiscuous mode [ 449.168536][ T4893] veth1_vlan: entered promiscuous mode [ 449.286279][ T4893] veth0_macvtap: entered promiscuous mode [ 449.297354][ T4893] veth1_macvtap: entered promiscuous mode [ 449.361740][ T4893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.373651][ T4893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.374090][ T4893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.374376][ T4893] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.792987][ T31] audit: type=1400 audit(451.710:160): avc: denied { create } for pid=5255 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 477.715917][ T5286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.733537][ T5286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.363697][ T5298] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.366354][ T5298] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.383374][ T5298] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.383984][ T5298] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.242925][ T3874] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 480.491960][ T3874] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.493544][ T3874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.510747][ T3874] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 480.512926][ T3874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 480.514012][ T3874] usb 2-1: SerialNumber: syz [ 480.775554][ T3874] usb 2-1: 0:2 : does not exist [ 480.864148][ T3874] usb 2-1: USB disconnect, device number 7 [ 482.868621][ T31] audit: type=1400 audit(482.790:161): avc: denied { connect } for pid=5337 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 482.870603][ T31] audit: type=1400 audit(482.790:162): avc: denied { write } for pid=5337 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 498.259232][ T4733] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.345189][ T4733] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.424041][ T4733] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.455947][ T4733] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.786868][ T4733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.813751][ T4733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.825964][ T4733] bond0 (unregistering): Released all slaves [ 498.948543][ T4733] hsr_slave_0: left promiscuous mode [ 498.951245][ T4733] hsr_slave_1: left promiscuous mode [ 498.983584][ T4733] veth1_macvtap: left promiscuous mode [ 498.984071][ T4733] veth0_macvtap: left promiscuous mode [ 498.984523][ T4733] veth1_vlan: left promiscuous mode [ 498.984700][ T4733] veth0_vlan: left promiscuous mode [ 501.150691][ T5382] netlink: 96 bytes leftover after parsing attributes in process `syz.1.182'. [ 503.427656][ T31] audit: type=1400 audit(503.350:163): avc: denied { mounton } for pid=5396 comm="syz.1.186" path="/95/file0" dev="tmpfs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 511.882603][ T3904] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 512.056508][ T3904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.056727][ T3904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 512.063385][ T3904] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 512.064026][ T3904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 512.064325][ T3904] usb 2-1: SerialNumber: syz [ 517.145520][ T3904] usb 2-1: 0:2 : does not exist [ 517.146728][ T3904] usb 2-1: unit 5 not found! [ 528.020030][ T3893] usb 2-1: USB disconnect, device number 8 [ 537.083601][ T5493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.086865][ T5493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.336424][ T5497] Zero length message leads to an empty skb [ 548.324945][ T3893] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 548.523625][ T3893] usb 2-1: Using ep0 maxpacket: 8 [ 548.578603][ T3893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 548.579729][ T3893] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 548.636083][ T3893] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 548.637172][ T3893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.638109][ T3893] usb 2-1: Product: syz [ 548.638857][ T3893] usb 2-1: Manufacturer: syz [ 548.639525][ T3893] usb 2-1: SerialNumber: syz [ 548.645300][ T3893] usb 2-1: config 0 descriptor?? [ 549.149614][ T23] usb 2-1: USB disconnect, device number 9 [ 549.603155][ T31] audit: type=1400 audit(549.490:164): avc: denied { ioctl } for pid=5516 comm="syz.1.195" path="socket:[4710]" dev="sockfs" ino=4710 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 551.014302][ T31] audit: type=1400 audit(550.940:165): avc: denied { create } for pid=5527 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 563.343234][ T3893] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 563.510134][ T3893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 563.512904][ T3893] usb 2-1: config 1 has no interface number 0 [ 563.516320][ T3893] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.519584][ T3893] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 563.524032][ T3893] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x31, changing to 0x1 [ 563.527858][ T3893] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 563.552833][ T3893] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 563.553270][ T3893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.557655][ T3893] usb 2-1: Product: syz [ 563.558589][ T3893] usb 2-1: Manufacturer: syz [ 563.560141][ T3893] usb 2-1: SerialNumber: syz [ 564.484468][ T3893] cdc_ncm 2-1:1.1: bind() failure [ 564.725039][ T3877] usb 2-1: USB disconnect, device number 10 [ 565.275255][ T31] audit: type=1400 audit(565.200:166): avc: denied { create } for pid=5563 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 565.282601][ T31] audit: type=1400 audit(565.200:167): avc: denied { setopt } for pid=5563 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 566.134135][ T5565] ------------[ cut here ]------------ [ 566.134896][ T5565] WARNING: CPU: 0 PID: 5565 at mm/highmem.c:622 kunmap_local_indexed+0x20c/0x224 [ 566.136839][ T5565] Modules linked in: [ 566.141047][ T5565] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 566.142245][ T5565] CPU: 0 UID: 0 PID: 5565 Comm: syz.1.208 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 566.143046][ T5565] Hardware name: ARM-Versatile Express [ 566.143787][ T5565] Call trace: [ 566.144286][ T5565] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 566.145099][ T5565] r7:00000000 r6:8282083c r5:00000000 r4:8225b4e0 [ 566.145462][ T5565] [<80201ae4>] (show_stack) from [<8021fdf4>] (dump_stack_lvl+0x54/0x7c) [ 566.145896][ T5565] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 566.146294][ T5565] r5:00000000 r4:82a6dd18 [ 566.146548][ T5565] [<8021fe1c>] (dump_stack) from [<80202614>] (panic+0x120/0x374) [ 566.146919][ T5565] [<802024f4>] (panic) from [<80258578>] (get_taint+0x0/0x1c) [ 566.147282][ T5565] r3:8280c684 r2:00000001 r1:82242028 r0:822499c0 [ 566.147726][ T5565] r7:804bc12c [ 566.147896][ T5565] [<80258504>] (check_panic_on_warn) from [<802586dc>] (__warn+0x80/0x188) [ 566.148342][ T5565] [<8025865c>] (__warn) from [<8025895c>] (warn_slowpath_fmt+0x178/0x1f4) [ 566.148736][ T5565] r8:00000009 r7:822752b8 r6:dfb95d1c r5:83240000 r4:00000000 [ 566.149031][ T5565] [<802587e8>] (warn_slowpath_fmt) from [<804bc12c>] (kunmap_local_indexed+0x20c/0x224) [ 566.149517][ T5565] r10:00000000 r9:deb636b4 r8:deb62f2c r7:00a00000 r6:00000003 r5:83240000 [ 566.149891][ T5565] r4:ffefd000 [ 566.150061][ T5565] [<804bbf20>] (kunmap_local_indexed) from [<805373a0>] (move_pages+0xb24/0x19c8) [ 566.150523][ T5565] r7:00a00000 r6:fffffff0 r5:85dd640c r4:8551bc00 [ 566.150821][ T5565] [<8053687c>] (move_pages) from [<805be4b4>] (userfaultfd_ioctl+0xff8/0x21c4) [ 566.151221][ T5565] r10:8551bc00 r9:dfb95e98 r8:21000000 r7:00000001 r6:00000000 r5:20000240 [ 566.151752][ T5565] r4:8606e000 [ 566.152217][ T5565] [<805bd4bc>] (userfaultfd_ioctl) from [<805679c4>] (sys_ioctl+0x130/0xdc8) [ 566.153068][ T5565] r10:83240000 r9:85ef4540 r8:00000003 r7:20000240 r6:85ef4541 r5:00000000 [ 566.153423][ T5565] r4:c028aa05 [ 566.153592][ T5565] [<80567894>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 566.154095][ T5565] Exception stack(0xdfb95fa8 to 0xdfb95ff0) [ 566.154973][ T5565] 5fa0: 00000000 00000000 00000003 c028aa05 20000240 00000000 [ 566.155483][ T5565] 5fc0: 00000000 00000000 002f6398 00000036 002e0000 00000000 00006364 76b420bc [ 566.156035][ T5565] 5fe0: 76b41ec0 76b41eb0 000193a4 00131fc0 [ 566.156353][ T5565] r10:00000036 r9:83240000 r8:8020029c r7:00000036 r6:002f6398 r5:00000000 [ 566.156710][ T5565] r4:00000000 [ 566.159395][ T5565] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:10:39 Registers: info registers vcpu 0 CPU#0 R00=60000193 R01=5b70d000 R02=00000000 R03=826b7500 R04=82979a68 R05=00000000 R06=60000113 R07=00000000 R08=82a70268 R09=dfb95bc0 R10=00000001 R11=dfb95bac R12=dfb95b30 R13=dfb95b30 R14=802e5094 R15=802e5094 PSR=60000113 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=00000000 R02=00000008 R03=dfad1e14 R04=dfad1ef0 R05=dfad1ee0 R06=81a306f0 R07=83f1e794 R08=00000002 R09=dfad1cc4 R10=83f1e788 R11=dfad1c34 R12=dfad1c10 R13=dfad1c10 R14=80295adc R15=80295ae4 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000