last executing test programs: 6.532062291s ago: executing program 1 (id=110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x4c, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@void, @val={0xc, 0x99, {0x0, 0xdffffffa}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x4c}}, 0x40) 6.213171656s ago: executing program 1 (id=112): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x1001, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5.913448269s ago: executing program 1 (id=113): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60a4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x27, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0xc0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x20, 0x22, 0x28, {0x28, 0x21, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c554438"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.683155684s ago: executing program 1 (id=120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x400, 0x0, 0x1, 0x1, 0x9, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @remote}, 0x400, 0x2, 0x0, 0x8, 0x8, 0x1}, 0x20) 4.438923691s ago: executing program 1 (id=121): request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10r&st\x05d*sgrVdn:Dd', 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_read(r0, 0x3, 0x4000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x80000) epoll_create1(0x0) epoll_create1(0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0x6, {0xffff, 0x1}, {0x48, 0x2}, @cond=[{0x8, 0x3, 0x8, 0x800, 0x80cb, 0x3}, {0x1, 0x5, 0x1, 0x7, 0x6, 0x1}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 4.072707111s ago: executing program 1 (id=123): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x83, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, 0x0) 861.544645ms ago: executing program 0 (id=129): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='\v\x00\x00\x00', @ANYRESDEC], 0x119) 739.123828ms ago: executing program 0 (id=130): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000200)={@val={0xa, 0x88e5}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x30, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, "3be0e6", 0xd, 0x3a, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}}, 0x6a) 449.49036ms ago: executing program 0 (id=131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="850000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="04000e"], 0x50}}, 0x0) 252.756932ms ago: executing program 0 (id=132): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) brk(0x200000ffc000) 140.460774ms ago: executing program 0 (id=133): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) file_getattr(0xffffffffffffff9c, 0x0, &(0x7f0000000280), 0x18, 0x100) close(r0) 0s ago: executing program 0 (id=134): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) kernel console output (not intermixed with test programs): [ 40.857854][ T28] audit: type=1400 audit(40.760:88): avc: denied { write } for pid=3080 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.110237][ T28] audit: type=1400 audit(44.010:89): avc: denied { read write } for pid=3086 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.115481][ T28] audit: type=1400 audit(44.020:90): avc: denied { open } for pid=3086 comm="scp" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.184297][ T28] audit: type=1400 audit(44.090:91): avc: denied { write } for pid=3087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.443635][ T28] audit: type=1400 audit(44.350:92): avc: denied { write } for pid=3090 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:17927' (ED25519) to the list of known hosts. [ 64.586691][ T28] audit: type=1400 audit(64.460:93): avc: denied { name_bind } for pid=3095 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 65.776571][ T28] audit: type=1400 audit(65.680:94): avc: denied { execute } for pid=3096 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 65.784521][ T28] audit: type=1400 audit(65.690:95): avc: denied { execute_no_trans } for pid=3096 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 69.372235][ T28] audit: type=1400 audit(69.280:96): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 69.379059][ T28] audit: type=1400 audit(69.280:97): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.401496][ T3096] cgroup: Unknown subsys name 'net' [ 69.410402][ T28] audit: type=1400 audit(69.310:98): avc: denied { unmount } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.588685][ T3096] cgroup: Unknown subsys name 'cpuset' [ 69.597990][ T3096] cgroup: Unknown subsys name 'hugetlb' [ 69.598950][ T3096] cgroup: Unknown subsys name 'rlimit' [ 69.888552][ T28] audit: type=1400 audit(69.790:99): avc: denied { setattr } for pid=3096 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.899092][ T28] audit: type=1400 audit(69.800:100): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 69.902769][ T28] audit: type=1400 audit(69.810:101): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 70.124113][ T3098] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 70.125410][ T28] audit: type=1400 audit(70.030:102): avc: denied { relabelto } for pid=3098 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 70.129967][ T28] audit: type=1400 audit(70.030:103): avc: denied { write } for pid=3098 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 70.168472][ T28] audit: type=1400 audit(70.070:104): avc: denied { read } for pid=3096 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 70.172531][ T28] audit: type=1400 audit(70.070:105): avc: denied { open } for pid=3096 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 78.857049][ T3096] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.750198][ T28] audit: type=1400 audit(81.650:106): avc: denied { execmem } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 81.863920][ T28] audit: type=1400 audit(81.760:107): avc: denied { read } for pid=3101 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.871945][ T28] audit: type=1400 audit(81.780:108): avc: denied { open } for pid=3101 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.877943][ T28] audit: type=1400 audit(81.780:109): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 81.908110][ T28] audit: type=1400 audit(81.810:110): avc: denied { module_request } for pid=3101 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 81.996573][ T28] audit: type=1400 audit(81.900:111): avc: denied { sys_module } for pid=3101 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 82.744371][ T28] audit: type=1400 audit(82.650:112): avc: denied { ioctl } for pid=3101 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=678 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.122276][ T3102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.142142][ T3102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.457901][ T3101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.468753][ T3101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.125805][ T3102] hsr_slave_0: entered promiscuous mode [ 85.131712][ T3102] hsr_slave_1: entered promiscuous mode [ 85.576586][ T3101] hsr_slave_0: entered promiscuous mode [ 85.578253][ T3101] hsr_slave_1: entered promiscuous mode [ 85.583810][ T3101] debugfs: 'hsr0' already exists in 'hsr' [ 85.586016][ T3101] Cannot create hsr debugfs directory [ 85.688706][ T28] audit: type=1400 audit(85.590:113): avc: denied { create } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.696675][ T28] audit: type=1400 audit(85.600:114): avc: denied { write } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.703861][ T28] audit: type=1400 audit(85.610:115): avc: denied { read } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.715614][ T3102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.730841][ T3102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.735523][ T3102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.747158][ T3102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.753857][ T3102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.764032][ T3102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.779069][ T3102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.792302][ T3102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.131539][ T3101] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.147854][ T3101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.153893][ T3101] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.167267][ T3101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.173902][ T3101] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.186143][ T3101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.192893][ T3101] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.204488][ T3101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.853497][ T3102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.082907][ T3101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.976779][ T3102] veth0_vlan: entered promiscuous mode [ 89.995582][ T3102] veth1_vlan: entered promiscuous mode [ 90.061587][ T3102] veth0_macvtap: entered promiscuous mode [ 90.076197][ T3102] veth1_macvtap: entered promiscuous mode [ 90.174499][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.175138][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.175229][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.175285][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.259933][ T28] audit: type=1400 audit(90.160:116): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.267077][ T28] audit: type=1400 audit(90.170:117): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.pvvEkm/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.287175][ T28] audit: type=1400 audit(90.190:118): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 90.302278][ T28] audit: type=1400 audit(90.210:119): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.pvvEkm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 90.308003][ T28] audit: type=1400 audit(90.210:120): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.pvvEkm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 90.334719][ T28] audit: type=1400 audit(90.240:121): avc: denied { unmount } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 90.356469][ T28] audit: type=1400 audit(90.260:122): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 90.369987][ T28] audit: type=1400 audit(90.270:123): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="gadgetfs" ino=3078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 90.370398][ T28] audit: type=1400 audit(90.270:124): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.374140][ T28] audit: type=1400 audit(90.280:125): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 90.561989][ T3102] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.580745][ T3101] veth0_vlan: entered promiscuous mode [ 90.611299][ T3101] veth1_vlan: entered promiscuous mode [ 90.725303][ T3101] veth0_macvtap: entered promiscuous mode [ 90.761974][ T3101] veth1_macvtap: entered promiscuous mode [ 90.858250][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.861634][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.861980][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.862229][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.170062][ T3730] netlink: 'syz.0.10': attribute type 21 has an invalid length. [ 95.180251][ T3730] netlink: 'syz.0.10': attribute type 4 has an invalid length. [ 95.180671][ T3730] netlink: 'syz.0.10': attribute type 23 has an invalid length. [ 95.180948][ T3730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10'. [ 95.964800][ T3732] fuse: Bad value for 'fd' [ 96.457895][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 96.459101][ T28] audit: type=1400 audit(96.360:137): avc: denied { create } for pid=3734 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 96.893108][ T28] audit: type=1400 audit(96.770:138): avc: denied { create } for pid=3738 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.142435][ T28] audit: type=1400 audit(97.050:139): avc: denied { setopt } for pid=3738 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.318675][ T28] audit: type=1400 audit(97.220:140): avc: denied { write } for pid=3738 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.951456][ T3747] fuse: Bad value for 'fd' [ 98.657855][ T3751] fuse: Bad value for 'fd' [ 98.834151][ T28] audit: type=1400 audit(98.740:141): avc: denied { create } for pid=3752 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.847759][ T28] audit: type=1400 audit(98.750:142): avc: denied { setopt } for pid=3752 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.583863][ T3763] fuse: Bad value for 'fd' [ 100.842785][ T28] audit: type=1400 audit(100.750:143): avc: denied { create } for pid=3764 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.314434][ T3772] syz.1.27 uses obsolete (PF_INET,SOCK_PACKET) [ 101.332182][ T28] audit: type=1400 audit(101.240:144): avc: denied { ioctl } for pid=3771 comm="syz.1.27" path="socket:[2412]" dev="sockfs" ino=2412 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.873633][ T28] audit: type=1400 audit(101.780:145): avc: denied { create } for pid=3773 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.964556][ T28] audit: type=1400 audit(101.870:146): avc: denied { write } for pid=3773 comm="syz.0.28" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.457558][ T3778] fuse: Invalid rootmode [ 103.609822][ T28] audit: type=1400 audit(103.510:147): avc: denied { create } for pid=3779 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.221755][ T3788] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.33'. [ 105.070756][ T3792] fuse: Invalid rootmode [ 105.891970][ T3798] fuse: Invalid rootmode [ 108.183196][ T3812] fuse: Invalid rootmode [ 109.533769][ T3824] fuse: Invalid rootmode [ 110.392985][ T28] audit: type=1400 audit(110.300:148): avc: denied { mounton } for pid=3830 comm="syz.1.53" path="/28/file0" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 115.777045][ T3853] fuse: Bad value for 'rootmode' [ 117.296719][ T3860] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 117.738734][ T3862] fuse: Unknown parameter 'use00000000000000000000' [ 118.111595][ T3864] fuse: Unknown parameter 'use00000000000000000000' [ 121.303507][ T28] audit: type=1400 audit(121.210:149): avc: denied { create } for pid=3878 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.125097][ T3904] fuse: Unknown parameter 'user_i00000000000000000000' [ 127.411463][ T28] audit: type=1400 audit(127.310:150): avc: denied { relabelfrom } for pid=3923 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 127.417259][ T28] audit: type=1400 audit(127.310:151): avc: denied { relabelto } for pid=3923 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 128.072532][ T28] audit: type=1400 audit(127.980:152): avc: denied { create } for pid=3936 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 128.825980][ T28] audit: type=1400 audit(128.730:153): avc: denied { unmount } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 131.437950][ T28] audit: type=1400 audit(131.340:154): avc: denied { load_policy } for pid=3966 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 131.456677][ T3968] SELinux: unknown common [ 131.464978][ T3968] SELinux: failed to load policy [ 131.721761][ T28] audit: type=1400 audit(131.630:155): avc: denied { ioctl } for pid=3978 comm="syz.1.108" path="socket:[2669]" dev="sockfs" ino=2669 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.360012][ T28] audit: type=1400 audit(132.260:156): avc: denied { read } for pid=3990 comm="syz.1.112" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.361671][ T28] audit: type=1400 audit(132.260:157): avc: denied { open } for pid=3990 comm="syz.1.112" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.374700][ T28] audit: type=1400 audit(132.280:158): avc: denied { ioctl } for pid=3990 comm="syz.1.112" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.384168][ T28] audit: type=1400 audit(132.280:159): avc: denied { set_context_mgr } for pid=3990 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.447251][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 132.451177][ T28] audit: type=1400 audit(132.350:161): avc: denied { map } for pid=3990 comm="syz.1.112" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.476389][ T28] audit: type=1400 audit(132.380:162): avc: denied { call } for pid=3990 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.488091][ T28] audit: type=1400 audit(132.390:163): avc: denied { transfer } for pid=3990 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.844941][ T28] audit: type=1400 audit(132.750:164): avc: denied { execute } for pid=4002 comm="syz.0.115" name="file0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.845924][ T4003] process 'syz.0.115' launched './file0' with NULL argv: empty string added [ 132.853925][ T28] audit: type=1400 audit(132.760:165): avc: denied { execute_no_trans } for pid=4002 comm="syz.0.115" path="/48/file0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.890730][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 133.051121][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 133.067377][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.067919][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 133.068708][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.084165][ T9] usb 2-1: config 0 descriptor?? [ 133.105058][ T28] audit: type=1400 audit(133.010:166): avc: denied { create } for pid=4006 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.124008][ T28] audit: type=1400 audit(133.030:167): avc: denied { write } for pid=4006 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.139553][ T28] audit: type=1400 audit(133.040:168): avc: denied { nlmsg_write } for pid=4006 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.551930][ T9] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x2 [ 133.552485][ T9] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x6 [ 133.553480][ T9] lenovo 0003:17EF:60A4.0001: ignoring exceeding usage max [ 133.561561][ T9] lenovo 0003:17EF:60A4.0001: hidraw0: USB HID v0.c1 Device [HID 17ef:60a4] on usb-dummy_hcd.1-1/input0 [ 133.730173][ T3834] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 133.746333][ T3907] usb 2-1: USB disconnect, device number 2 [ 133.898705][ T3834] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.904856][ T3834] usb 1-1: not running at top speed; connect to a high speed hub [ 133.916701][ T3834] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 133.947721][ T3834] usb 1-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 133.947990][ T3834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.950330][ T3834] usb 1-1: Product: syz [ 133.951297][ T3834] usb 1-1: Manufacturer: syz [ 133.951355][ T3834] usb 1-1: SerialNumber: syz [ 134.206173][ T3834] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 134.212757][ T3834] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 134.214379][ T3834] usb 1-1: 2:1: All rates were zero [ 134.238960][ T3834] usb 1-1: USB disconnect, device number 2 [ 134.388968][ T28] audit: type=1400 audit(134.290:169): avc: denied { allowed } for pid=4065 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 134.412258][ T28] audit: type=1400 audit(134.310:170): avc: denied { create } for pid=4065 comm="syz.0.122" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 137.820245][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 137.820746][ T28] audit: type=1400 audit(137.720:178): avc: denied { setopt } for pid=4096 comm="syz.0.130" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.835875][ T28] audit: type=1400 audit(137.740:179): avc: denied { append } for pid=4096 comm="syz.0.130" name="tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.580365][ T4112] ------------[ cut here ]------------ [ 138.581057][ T4112] WARNING: fs/exec.c:118 at path_noexec+0x80/0x88, CPU#0: syz.0.134/4112 [ 138.587362][ T4112] Modules linked in: [ 138.589058][ T4112] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 138.590164][ T4112] CPU: 0 UID: 0 PID: 4112 Comm: syz.0.134 Not tainted syzkaller #0 PREEMPT [ 138.590768][ T4112] Hardware name: ARM-Versatile Express [ 138.591230][ T4112] Call trace: [ 138.591738][ T4112] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 138.592449][ T4112] r7:82a1eab8 r6:00000000 r5:8231e1c4 r4:00000001 [ 138.593401][ T4112] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 138.595400][ T4112] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 138.596298][ T4112] r7:82a1eab8 r6:00000000 r5:8505b200 r4:82c7bd3c [ 138.596648][ T4112] [<8021e390>] (dump_stack) from [<8020260c>] (vpanic+0x114/0x320) [ 138.597044][ T4112] [<802024f8>] (vpanic) from [<8020284c>] (trace_suspend_resume+0x0/0x104) [ 138.597455][ T4112] r7:80590fa8 [ 138.597718][ T4112] [<80202818>] (panic) from [<80250844>] (get_taint+0x0/0x1c) [ 138.598261][ T4112] r3:82a0b544 r2:00000001 r1:82304c8c r0:8230c588 [ 138.598537][ T4112] [<802507cc>] (check_panic_on_warn) from [<802509c0>] (__warn+0x98/0x1ac) [ 138.599198][ T4112] [<80250928>] (__warn) from [<80250c4c>] (warn_slowpath_fmt+0x178/0x1f4) [ 138.599558][ T4112] r8:00000009 r7:82340800 r6:e0265e4c r5:8505b200 r4:00000000 [ 138.601080][ T4112] [<80250ad8>] (warn_slowpath_fmt) from [<80590fa8>] (path_noexec+0x80/0x88) [ 138.602034][ T4112] r10:83312200 r9:85066d00 r8:8505b200 r7:20000000 r6:0300000f r5:00000011 [ 138.602492][ T4112] r4:83312228 [ 138.602658][ T4112] [<80590f28>] (path_noexec) from [<804fa6d8>] (do_mmap+0x334/0x53c) [ 138.603296][ T4112] r5:00000011 r4:00003000 [ 138.603515][ T4112] [<804fa3a4>] (do_mmap) from [<804c3670>] (vm_mmap_pgoff+0x128/0x20c) [ 138.603843][ T4112] r10:85066d00 r9:20000000 r8:00003000 r7:e0265f18 r6:83312200 r5:0300000f [ 138.604134][ T4112] r4:00000000 [ 138.604305][ T4112] [<804c3548>] (vm_mmap_pgoff) from [<804f9b98>] (ksys_mmap_pgoff+0xa4/0xec) [ 138.604709][ T4112] r10:000000c0 r9:8505b200 r8:83312200 r7:20000000 r6:00003000 r5:0300000f [ 138.605018][ T4112] r4:00000011 [ 138.605184][ T4112] [<804f9af4>] (ksys_mmap_pgoff) from [<804f9bfc>] (sys_mmap_pgoff+0x1c/0x24) [ 138.605614][ T4112] r8:8020029c r7:000000c0 r6:0034631c r5:00000000 r4:00000005 [ 138.605968][ T4112] [<804f9be0>] (sys_mmap_pgoff) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 138.606372][ T4112] Exception stack(0xe0265fa8 to 0xe0265ff0) [ 138.606785][ T4112] 5fa0: 00000005 00000000 20000000 00003000 0300000f 00000011 [ 138.607179][ T4112] 5fc0: 00000005 00000000 0034631c 000000c0 003462d8 00000000 00000001 76feb0dc [ 138.607479][ T4112] 5fe0: 76feae88 76feae78 00018ebc 00130810 [ 138.612282][ T4112] Rebooting in 86400 seconds..