last executing test programs: 6.196368648s ago: executing program 1 (id=111): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5.939102061s ago: executing program 1 (id=112): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, 0x0) 4.663297295s ago: executing program 0 (id=114): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x2f8, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x2c2, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x0, '\x00\x00\x00'}, {0x0, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b3"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00"}, {0x0, 0xa, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf0"}, {0x0, 0x1, "d5170000dce9674a"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x0, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x0, 0xff, {"2a4332c3fefcb7080000000000000037"}, 0x101, 0x4, 0xfff}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000005c0)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r2, 0x2}}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_macvtap\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r7, 0x301}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x24010000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000140)={r10, 0x3, 0x6}, 0xfe5a) r11 = dup2(r9, r8) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f00000000c0)={r10, 0x1, 0x6, @dev}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) 3.289358277s ago: executing program 1 (id=115): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 2.967917086s ago: executing program 0 (id=116): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30004001) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x6, 0x3, &(0x7f00000000c0), 0x4) 2.655521284s ago: executing program 0 (id=117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="440000000b0605000000000000000000030000061c0007801800018014000240ff01000000000000000000000000000105000100070000000900020073797a31000000003af15119f3fe5f21cf35a6f93f093ce3ff1aef65f770c3d65a72e11e289f6de28ef901b66a6c79ae4692b1b756c1bb009e0b4c7074c2099e6b591946ea2ce923acecb6d9b392943dd03d941c573fcbcf10cccf5e5290d2c89c3c3dca149e0dab4bf59fb6c0e4c9aee9dfb4b976fb19b5"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) r1 = socket$inet(0x2, 0x4, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x2d) socket$igmp6(0xa, 0x3, 0x2) 2.377778018s ago: executing program 1 (id=118): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085520, 0x0) 2.13856883s ago: executing program 1 (id=119): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.110473071s ago: executing program 0 (id=120): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r0, 0x0, 0x0) 652.875432ms ago: executing program 0 (id=121): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = accept4$packet(r1, 0x0, 0x0, 0x0) getsockopt(r2, 0x1, 0x9, &(0x7f0000000040)=""/226, &(0x7f0000000140)=0xe2) 455.63357ms ago: executing program 0 (id=122): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0}, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) dup2(r2, r1) 0s ago: executing program 1 (id=123): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) kernel console output (not intermixed with test programs): [ 49.166444][ T31] audit: type=1400 audit(49.090:68): avc: denied { read write } for pid=2997 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.184284][ T31] audit: type=1400 audit(49.110:69): avc: denied { open } for pid=2997 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:30557' (ED25519) to the list of known hosts. [ 58.398311][ T31] audit: type=1400 audit(58.310:70): avc: denied { name_bind } for pid=2998 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.857774][ T31] audit: type=1400 audit(60.790:71): avc: denied { execute } for pid=3000 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.862912][ T31] audit: type=1400 audit(60.790:72): avc: denied { execute_no_trans } for pid=3000 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.810601][ T31] audit: type=1400 audit(63.740:73): avc: denied { mounton } for pid=3000 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.812712][ T31] audit: type=1400 audit(63.740:74): avc: denied { mount } for pid=3000 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.825907][ T3000] cgroup: Unknown subsys name 'net' [ 63.831298][ T31] audit: type=1400 audit(63.760:75): avc: denied { unmount } for pid=3000 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.074130][ T3000] cgroup: Unknown subsys name 'hugetlb' [ 64.074820][ T3000] cgroup: Unknown subsys name 'rlimit' [ 64.276577][ T31] audit: type=1400 audit(64.210:76): avc: denied { setattr } for pid=3000 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.277916][ T31] audit: type=1400 audit(64.210:77): avc: denied { mounton } for pid=3000 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.278756][ T31] audit: type=1400 audit(64.210:78): avc: denied { mount } for pid=3000 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.489213][ T3001] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 64.490672][ T31] audit: type=1400 audit(64.420:79): avc: denied { relabelto } for pid=3001 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 64.498578][ T31] audit: type=1400 audit(64.430:80): avc: denied { write } for pid=3001 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 64.530517][ T31] audit: type=1400 audit(64.460:81): avc: denied { read } for pid=3000 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 64.534357][ T31] audit: type=1400 audit(64.460:82): avc: denied { open } for pid=3000 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 70.189633][ T3000] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.974424][ T31] audit: type=1400 audit(71.900:83): avc: denied { execmem } for pid=3002 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.035718][ T31] audit: type=1400 audit(71.970:84): avc: denied { mounton } for pid=3004 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 72.042920][ T31] audit: type=1400 audit(71.970:85): avc: denied { mount } for pid=3005 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 72.049735][ T31] audit: type=1400 audit(71.980:86): avc: denied { read } for pid=3004 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.054691][ T31] audit: type=1400 audit(71.980:87): avc: denied { open } for pid=3004 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.057486][ T31] audit: type=1400 audit(71.990:88): avc: denied { mounton } for pid=3005 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 72.084649][ T31] audit: type=1400 audit(72.010:89): avc: denied { module_request } for pid=3004 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.085544][ T31] audit: type=1400 audit(72.010:90): avc: denied { module_request } for pid=3005 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.174635][ T31] audit: type=1400 audit(72.100:91): avc: denied { sys_module } for pid=3005 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.897240][ T31] audit: type=1400 audit(72.830:92): avc: denied { ioctl } for pid=3005 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=691 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.036616][ T3005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.045934][ T3005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.135239][ T3004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.141943][ T3004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.999031][ T3005] hsr_slave_0: entered promiscuous mode [ 75.002551][ T3005] hsr_slave_1: entered promiscuous mode [ 75.139036][ T3004] hsr_slave_0: entered promiscuous mode [ 75.141934][ T3004] hsr_slave_1: entered promiscuous mode [ 75.143083][ T3004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.143443][ T3004] Cannot create hsr debugfs directory [ 75.439678][ T3005] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.448280][ T3005] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.456884][ T3005] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.460929][ T3005] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.538152][ T3004] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.552094][ T3004] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.563644][ T3004] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.572054][ T3004] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.299678][ T3005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.384886][ T3004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.211574][ T3005] veth0_vlan: entered promiscuous mode [ 79.225938][ T3005] veth1_vlan: entered promiscuous mode [ 79.266195][ T3005] veth0_macvtap: entered promiscuous mode [ 79.271538][ T3005] veth1_macvtap: entered promiscuous mode [ 79.307975][ T3005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.308419][ T3005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.308617][ T3005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.308810][ T3005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.425504][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 79.425613][ T31] audit: type=1400 audit(79.350:96): avc: denied { mount } for pid=3005 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.464131][ T31] audit: type=1400 audit(79.370:97): avc: denied { mounton } for pid=3005 comm="syz-executor" path="/syzkaller.guzxaN/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.471367][ T31] audit: type=1400 audit(79.370:98): avc: denied { mount } for pid=3005 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 79.472059][ T31] audit: type=1400 audit(79.390:99): avc: denied { unmount } for pid=3005 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 79.472664][ T31] audit: type=1400 audit(79.400:100): avc: denied { mounton } for pid=3005 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 79.494478][ T31] audit: type=1400 audit(79.410:101): avc: denied { mount } for pid=3005 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.591387][ T3004] veth0_vlan: entered promiscuous mode [ 79.620181][ T3004] veth1_vlan: entered promiscuous mode [ 79.637992][ T31] audit: type=1400 audit(79.570:102): avc: denied { read write } for pid=3005 comm="syz-executor" name="loop1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.639164][ T31] audit: type=1400 audit(79.570:103): avc: denied { open } for pid=3005 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.643259][ T31] audit: type=1400 audit(79.570:104): avc: denied { ioctl } for pid=3005 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.694980][ T3004] veth0_macvtap: entered promiscuous mode [ 79.707392][ T3004] veth1_macvtap: entered promiscuous mode [ 79.763540][ T3004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.766129][ T3004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.766497][ T3004] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.766830][ T3004] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.798084][ T31] audit: type=1400 audit(79.730:105): avc: denied { map_create } for pid=3683 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.849250][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.910497][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.965784][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.021151][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.336491][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.368125][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.377520][ T11] bond0 (unregistering): Released all slaves [ 87.477649][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 87.477761][ T31] audit: type=1400 audit(87.410:113): avc: denied { ioctl } for pid=3729 comm="syz.0.18" path="socket:[3186]" dev="sockfs" ino=3186 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.555276][ T11] hsr_slave_0: left promiscuous mode [ 87.558139][ T11] hsr_slave_1: left promiscuous mode [ 87.566877][ T11] veth1_macvtap: left promiscuous mode [ 87.567550][ T11] veth0_macvtap: left promiscuous mode [ 87.567978][ T11] veth1_vlan: left promiscuous mode [ 87.568424][ T11] veth0_vlan: left promiscuous mode [ 87.921515][ T31] audit: type=1400 audit(87.850:114): avc: denied { create } for pid=3729 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.926780][ T31] audit: type=1400 audit(87.850:115): avc: denied { create } for pid=3729 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.932832][ T31] audit: type=1400 audit(87.860:116): avc: denied { ioctl } for pid=3729 comm="syz.0.18" path="socket:[3194]" dev="sockfs" ino=3194 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.316608][ T31] audit: type=1400 audit(88.250:117): avc: denied { setopt } for pid=3729 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.961348][ T31] audit: type=1400 audit(88.890:118): avc: denied { create } for pid=3824 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.928850][ T3720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.955839][ T3720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.979419][ T31] audit: type=1400 audit(93.910:119): avc: denied { create } for pid=3988 comm="syz.0.23" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.984677][ T31] audit: type=1400 audit(93.910:120): avc: denied { map } for pid=3988 comm="syz.0.23" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.985664][ T31] audit: type=1400 audit(93.910:121): avc: denied { read write } for pid=3988 comm="syz.0.23" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.221917][ T3720] hsr_slave_0: entered promiscuous mode [ 94.226996][ T3720] hsr_slave_1: entered promiscuous mode [ 95.535611][ T3720] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.549502][ T3720] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.573309][ T3720] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.666816][ T3720] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.156273][ T31] audit: type=1400 audit(97.060:122): avc: denied { create } for pid=4153 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.594614][ T31] audit: type=1400 audit(97.520:123): avc: denied { setopt } for pid=4153 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.863401][ T3720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.858006][ T4173] veth0_vlan: entered allmulticast mode [ 99.040065][ T4177] netlink: 830 bytes leftover after parsing attributes in process `syz.0.35'. [ 99.055296][ T4177] dummy0: entered promiscuous mode [ 100.198443][ T4190] netlink: 'syz.0.39': attribute type 29 has an invalid length. [ 100.202569][ T4190] netlink: 'syz.0.39': attribute type 29 has an invalid length. [ 100.214104][ T4190] netlink: 'syz.0.39': attribute type 29 has an invalid length. [ 100.226280][ T4190] netlink: 'syz.0.39': attribute type 29 has an invalid length. [ 100.238013][ T4190] netlink: 'syz.0.39': attribute type 29 has an invalid length. [ 102.226978][ T31] audit: type=1400 audit(102.160:124): avc: denied { relabelfrom } for pid=4217 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 102.243993][ T31] audit: type=1400 audit(102.170:125): avc: denied { relabelto } for pid=4217 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 102.310204][ T4218] syzkaller0: entered promiscuous mode [ 102.310878][ T4218] syzkaller0: entered allmulticast mode [ 107.560888][ T3720] veth0_vlan: entered promiscuous mode [ 107.598564][ T3720] veth1_vlan: entered promiscuous mode [ 107.809620][ T3720] veth0_macvtap: entered promiscuous mode [ 107.835296][ T3720] veth1_macvtap: entered promiscuous mode [ 107.967287][ T3720] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.967910][ T3720] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.968353][ T3720] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.968737][ T3720] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.189332][ T31] audit: type=1400 audit(111.120:126): avc: denied { create } for pid=4283 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.194484][ T31] audit: type=1400 audit(111.120:127): avc: denied { write } for pid=4283 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.627032][ T31] audit: type=1400 audit(126.560:128): avc: denied { getopt } for pid=4335 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.664379][ T31] audit: type=1400 audit(126.580:129): avc: denied { connect } for pid=4335 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.665283][ T31] audit: type=1400 audit(126.590:130): avc: denied { name_connect } for pid=4335 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 127.833383][ T31] audit: type=1400 audit(127.760:131): avc: denied { connect } for pid=4338 comm="syz.0.66" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.838589][ T31] audit: type=1400 audit(127.770:132): avc: denied { write } for pid=4338 comm="syz.0.66" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.892795][ T31] audit: type=1400 audit(127.820:133): avc: denied { create } for pid=4340 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.908493][ T31] audit: type=1400 audit(127.840:134): avc: denied { setopt } for pid=4340 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.975777][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 127.976762][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 129.544397][ T31] audit: type=1400 audit(129.480:135): avc: denied { setopt } for pid=4353 comm="syz.1.72" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.815154][ T31] audit: type=1400 audit(130.740:136): avc: denied { create } for pid=4359 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.834996][ T31] audit: type=1400 audit(130.760:137): avc: denied { bind } for pid=4359 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.640125][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 131.640183][ T31] audit: type=1400 audit(131.570:139): avc: denied { bind } for pid=4371 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.642357][ T31] audit: type=1400 audit(131.570:140): avc: denied { connect } for pid=4371 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.138866][ T4378] netlink: 'syz.0.80': attribute type 16 has an invalid length. [ 132.139475][ T4378] netlink: 'syz.0.80': attribute type 17 has an invalid length. [ 133.027239][ T31] audit: type=1400 audit(132.960:141): avc: denied { nlmsg_read } for pid=4386 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 133.878529][ T31] audit: type=1400 audit(133.810:142): avc: denied { ioctl } for pid=4393 comm="syz.1.84" path="socket:[2825]" dev="sockfs" ino=2825 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.525900][ T4407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 134.654760][ T31] audit: type=1400 audit(134.580:143): avc: denied { name_bind } for pid=4409 comm="syz.1.90" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 135.591290][ T31] audit: type=1400 audit(135.520:144): avc: denied { create } for pid=4406 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 135.631608][ T31] audit: type=1400 audit(135.560:145): avc: denied { write } for pid=4406 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 135.705935][ T4407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 136.919213][ T31] audit: type=1400 audit(136.850:146): avc: denied { ioctl } for pid=4418 comm="syz.0.92" path="socket:[2849]" dev="sockfs" ino=2849 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.846475][ T31] audit: type=1400 audit(137.780:147): avc: denied { create } for pid=4426 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.226958][ T4431] tap0: tun_chr_ioctl cmd 1074025677 [ 138.228433][ T4431] tap0: linktype set to 270 [ 138.257874][ T31] audit: type=1400 audit(138.190:148): avc: denied { getopt } for pid=4432 comm="syz.0.98" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.614025][ T31] audit: type=1400 audit(138.540:149): avc: denied { setopt } for pid=4440 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.615084][ T31] audit: type=1400 audit(138.550:150): avc: denied { accept } for pid=4440 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.616954][ T31] audit: type=1400 audit(138.550:151): avc: denied { write } for pid=4440 comm="syz.1.100" path="socket:[2871]" dev="sockfs" ino=2871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.629466][ T31] audit: type=1400 audit(138.560:152): avc: denied { read } for pid=4440 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.530031][ T31] audit: type=1400 audit(140.460:153): avc: denied { create } for pid=4459 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.570600][ T31] audit: type=1400 audit(140.500:154): avc: denied { connect } for pid=4459 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.804703][ T31] audit: type=1400 audit(140.720:155): avc: denied { write } for pid=4459 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.115227][ T93] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 143.374477][ T93] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 143.377428][ T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.378123][ T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.400822][ T93] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 143.435553][ T93] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 143.442789][ T93] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 143.443306][ T93] usb 2-1: Manufacturer: syz [ 143.509763][ T93] usb 2-1: config 0 descriptor?? [ 143.520176][ C1] hrtimer: interrupt took 2105376 ns [ 143.971156][ T93] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 143.998705][ T93] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 144.011931][ T93] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 146.059510][ T48] usb 2-1: USB disconnect, device number 2 [ 146.905220][ T86] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 147.154374][ T86] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.171033][ T86] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.171607][ T86] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.171921][ T86] usb 2-1: Product: syz [ 147.172113][ T86] usb 2-1: Manufacturer: syz [ 147.172339][ T86] usb 2-1: SerialNumber: syz [ 148.286738][ T86] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 148.287639][ T86] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 148.287973][ T86] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 148.500213][ T86] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 148.519894][ T86] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 148.555119][ T86] usb 2-1: USB disconnect, device number 3 [ 148.557005][ T86] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 148.637123][ T86] ------------[ cut here ]------------ [ 148.638199][ T86] WARNING: CPU: 1 PID: 86 at lib/debugobjects.c:515 debug_print_object+0xc4/0xd8 [ 148.639397][ T86] ODEBUG: free active (active state 0) object: 84fa47ac object type: work_struct hint: usbnet_deferred_kevent+0x0/0x388 [ 148.640586][ T86] Modules linked in: [ 148.641389][ T86] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 148.642481][ T86] CPU: 1 PID: 86 Comm: kworker/1:1 Not tainted 6.10.0-syzkaller #0 [ 148.643444][ T86] Hardware name: ARM-Versatile Express [ 148.644411][ T86] Workqueue: usb_hub_wq hub_event [ 148.645164][ T86] Call trace: [ 148.645643][ T86] [<818d8198>] (dump_backtrace) from [<818d8294>] (show_stack+0x18/0x1c) [ 148.646328][ T86] r7:00000000 r6:82622804 r5:00000000 r4:81fe1ef0 [ 148.646684][ T86] [<818d827c>] (show_stack) from [<818f5988>] (dump_stack_lvl+0x54/0x7c) [ 148.647150][ T86] [<818f5934>] (dump_stack_lvl) from [<818f59c8>] (dump_stack+0x18/0x1c) [ 148.647516][ T86] r5:00000000 r4:82860d18 [ 148.647715][ T86] [<818f59b0>] (dump_stack) from [<818d8d3c>] (panic+0x120/0x358) [ 148.648074][ T86] [<818d8c1c>] (panic) from [<802421ec>] (print_tainted+0x0/0xa0) [ 148.648483][ T86] r3:8260c5c4 r2:00000001 r1:81fcafcc r0:81fd26d0 [ 148.648742][ T86] r7:80827f7c [ 148.648951][ T86] [<80242178>] (check_panic_on_warn) from [<802423e0>] (__warn+0x7c/0x180) [ 148.649539][ T86] [<80242364>] (__warn) from [<802426cc>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 148.649955][ T86] r8:00000009 r7:820311e4 r6:df979a7c r5:83665400 r4:00000000 [ 148.650282][ T86] [<802424e8>] (warn_slowpath_fmt) from [<80827f7c>] (debug_print_object+0xc4/0xd8) [ 148.650794][ T86] r10:00000005 r9:84fa4000 r8:81a01bf4 r7:8205a370 r6:828c4454 r5:df979b24 [ 148.651106][ T86] r4:8260cda8 [ 148.651293][ T86] [<80827eb8>] (debug_print_object) from [<8082981c>] (debug_check_no_obj_freed+0x254/0x2a0) [ 148.651693][ T86] r8:84fa4800 r7:84fa47ac r6:00000100 r5:00000003 r4:00000000 [ 148.652046][ T86] [<808295c8>] (debug_check_no_obj_freed) from [<804b9af8>] (kfree+0x1a0/0x340) [ 148.652467][ T86] r10:82778be8 r9:844f4480 r8:84fa4000 r7:8045fc30 r6:82c023c0 r5:ddeac280 [ 148.652768][ T86] r4:84fa4000 [ 148.652934][ T86] [<804b9958>] (kfree) from [<8045fc30>] (kvfree+0x2c/0x30) [ 148.653359][ T86] r10:82778be8 r9:844f4480 r8:84fa4000 r7:00000000 r6:84fff100 r5:84e27a80 [ 148.653904][ T86] r4:84fa4000 [ 148.654152][ T86] [<8045fc04>] (kvfree) from [<8140dcc8>] (netdev_freemem+0x1c/0x20) [ 148.654520][ T86] r5:84e27a80 r4:84fa4000 [ 148.655011][ T86] [<8140dcac>] (netdev_freemem) from [<814496a8>] (netdev_release+0x2c/0x34) [ 148.655466][ T86] [<8144967c>] (netdev_release) from [<80a614f4>] (device_release+0x38/0xa8) [ 148.655940][ T86] r5:84e27a80 r4:84fa43b8 [ 148.656141][ T86] [<80a614bc>] (device_release) from [<818b2014>] (kobject_put+0xc8/0x1f8) [ 148.656592][ T86] r5:81b48be4 r4:84fa43b8 [ 148.657100][ T86] [<818b1f4c>] (kobject_put) from [<80a61720>] (put_device+0x18/0x1c) SYZFAIL: failed to recv rpc [ 148.657635][ T86] r7:844f4000 r6:84fa410c r5:84fa4000 r4:00000000 [ 148.658306][ T86] [<80a61708>] (put_device) from [<813fee5c>] (free_netdev+0x10c/0x18c) [ 148.658718][ T86] [<813fed50>] (free_netdev) from [<80d36068>] (usbnet_disconnect+0xac/0xf0) [ 148.659130][ T86] r6:84fa4774 r5:84fa4660 r4:00000000 [ 148.659367][ T86] [<80d35fbc>] (usbnet_disconnect) from [<80d95150>] (usb_unbind_interface+0x84/0x2c4) [ 148.659774][ T86] r8:00000044 r7:844f4030 r6:82778be8 r5:00000000 r4:844f4000 [ 148.660081][ T86] [<80d950cc>] (usb_unbind_interface) from [<80a695fc>] (device_remove+0x64/0x6c) [ 148.660498][ T86] r10:00000000 r9:844f4480 r8:00000044 r7:844f4074 r6:82778be8 r5:00000000 [ 148.660779][ T86] r4:844f4030 [ 148.660898][ T86] [<80a69598>] (device_remove) from [<80a6ab14>] (device_release_driver_internal+0x18c/0x200) [ 148.661314][ T86] r5:00000000 r4:844f4030 [ 148.661507][ T86] [<80a6a988>] (device_release_driver_internal) from [<80a6aba0>] (device_release_driver+0x18/0x1c) [ 148.661923][ T86] r9:844f4480 r8:82cda140 r7:82cda138 r6:82cda10c r5:844f4030 r4:82cda130 [ 148.662364][ T86] [<80a6ab88>] (device_release_driver) from [<80a68c84>] (bus_remove_device+0xcc/0x120) [ 148.662736][ T86] [<80a68bb8>] (bus_remove_device) from [<80a62d9c>] (device_del+0x148/0x38c) [ 148.663115][ T86] r9:844f4480 r8:83665400 r7:04208060 r6:00000000 r5:844f4030 r4:844f4074 [ 148.663675][ T86] [<80a62c54>] (device_del) from [<80d92ba8>] (usb_disable_device+0xdc/0x1f0) [ 148.664241][ T86] r10:00000000 r9:00000000 r8:844f4000 r7:844f4400 r6:84ec4188 r5:00000001 [ 148.664571][ T86] r4:00000038 [ 148.664748][ T86] [<80d92acc>] (usb_disable_device) from [<80d87a08>] (usb_disconnect+0xec/0x29c) [ 148.665121][ T86] r10:00000001 r9:84e71a00 r8:844f44c4 r7:836a8400 r6:844f4480 r5:844f4400 [ 148.665407][ T86] r4:60000013 [ 148.665566][ T86] [<80d8791c>] (usb_disconnect) from [<80d8a6b8>] (hub_event+0xe78/0x194c) [ 148.665929][ T86] r10:00000001 r9:00000100 r8:83950100 r7:844f4400 r6:836a7c00 r5:836a8610 [ 148.666210][ T86] r4:00000001 [ 148.666374][ T86] [<80d89840>] (hub_event) from [<80265b58>] (process_one_work+0x1b4/0x4f4) [ 148.666724][ T86] r10:82e5c805 r9:83665400 r8:01800000 r7:ddde4080 r6:82e5c800 r5:83950100 [ 148.667014][ T86] r4:82fa9d00 [ 148.667183][ T86] [<802659a4>] (process_one_work) from [<8026673c>] (worker_thread+0x1ec/0x3f4) [ 148.667533][ T86] r10:83665400 r9:82fa9d2c r8:61c88647 r7:ddde40a0 r6:82604d40 r5:ddde4080 [ 148.667836][ T86] r4:82fa9d00 [ 148.668003][ T86] [<80266550>] (worker_thread) from [<8026f6c0>] (kthread+0x104/0x134) [ 148.668334][ T86] r10:00000000 r9:df87de78 r8:834fabc0 r7:82fa9d00 r6:80266550 r5:83665400 [ 148.668614][ T86] r4:82fd9640 [ 148.668798][ T86] [<8026f5bc>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 148.669282][ T86] Exception stack(0xdf979fb0 to 0xdf979ff8) [ 148.669622][ T86] 9fa0: 00000000 00000000 00000000 00000000 [ 148.669959][ T86] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 148.670263][ T86] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 148.670572][ T86] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026f5bc r4:82fd9640 [ 148.672394][ T86] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:44:41 Registers: info registers vcpu 0 CPU#0 R00=000000b8 R01=00e24168 R02=000000b8 R03=00000000 R04=00e110f0 R05=76f39c80 R06=00e081d8 R07=00000004 R08=00000000 R09=00e03548 R10=7ea0727c R11=00000003 R12=005b0db0 R13=df981ff8 R14=76b2b39c R15=76b2b39c PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=005727e9 s17=0057a335 d08=0057a335005727e9 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=beda0d75 s33=866d5714 d16=866d5714beda0d75 s34=5b0333f9 s35=3d4ccff2 d17=3d4ccff25b0333f9 s36=6b2b4899 s37=ca0309b2 d18=ca0309b26b2b4899 s38=f4c403a9 s39=c3c58bba d19=c3c58bbaf4c403a9 s40=4c274d5d s41=fb95ead2 d20=fb95ead24c274d5d s42=c9dd0ca3 s43=0b3d00fa d21=0b3d00fac9dd0ca3 s44=b35a28f3 s45=cb77d97a d22=cb77d97ab35a28f3 s46=248c60e6 s47=ded7f905 d23=ded7f905248c60e6 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=00200000 s53=00080000 d26=0008000000200000 s54=0000000a s55=00080004 d27=000800040000000a s56=03e60000 s57=00000000 d28=0000000003e60000 s58=0010000a s59=0008000f d29=0008000f0010000a s60=000a0004 s61=000c0000 d30=000c0000000a0004 s62=000e0000 s63=00000000 d31=00000000000e0000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=04e804e7 R02=00000002 R03=ebb8f030 R04=84132840 R05=00000001 R06=20000193 R07=df9798a8 R08=828632d8 R09=0000003c R10=60000193 R11=df979824 R12=df9797e8 R13=df979800 R14=81902a88 R15=809b2b3c PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000