last executing test programs: 9m36.25745888s ago: executing program 0 (id=327): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0xff7f}}, 0x20}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) 9m34.647268672s ago: executing program 0 (id=328): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)={{0x12, 0x1, 0x110, 0x27, 0xaa, 0x18, 0x8, 0x402, 0x5602, 0x4983, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x52, 0xb4, 0xa6, 0x2c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9m19.806361238s ago: executing program 0 (id=341): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="18010000", @ANYRES16=r2, @ANYBLOB="0100fefffffffbdbdf2567000000080001"], 0x118}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) 9m19.596760092s ago: executing program 0 (id=342): userfaultfd(0x80001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="810100000000000081", @ANYRES32=r0], 0x10) 9m19.226542929s ago: executing program 0 (id=343): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) userfaultfd(0x80801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x1, 0x0, 0x12) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x0, [0xfff, 0x22d, 0x5317, 0xffff0000, 0xffffffff]}, &(0x7f00000002c0)=0x54) syz_usb_control_io$uac3(r6, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) 9m2.896445635s ago: executing program 0 (id=353): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup(0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000383afffe80000000000044f54a870000000000000000aaff0200000000000000000000000000010401907800000001637c364d00062fffff020000000000000000000000000001fc000000000016000000"], 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/138, 0x8a) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f00000000c0)) 8m17.657734225s ago: executing program 32 (id=353): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup(0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000383afffe80000000000044f54a870000000000000000aaff0200000000000000000000000000010401907800000001637c364d00062fffff020000000000000000000000000001fc000000000016000000"], 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/138, 0x8a) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f00000000c0)) 8m1.800994801s ago: executing program 2 (id=366): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x1a}, 0x28) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 7m16.756614808s ago: executing program 33 (id=366): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x1a}, 0x28) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5m54.674367383s ago: executing program 3 (id=492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x2}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0x20b, 0xffffffff, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0x7, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r7, &(0x7f0000000380)="fad33075218151db00316f3a277fedbc86dd46fe766f486d7ce218d5be2cf4380cc23b64201f3516", 0x28, 0x6008092, &(0x7f0000000080)={0x11, 0x88a8, r6, 0x1, 0xda, 0x6, @remote}, 0x14) 5m53.359809769s ago: executing program 3 (id=494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 5m53.164333593s ago: executing program 3 (id=495): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x4, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x85, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x25fd, 0x1, 0x3b40, 0x0, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x7, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x103, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0x1354, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x3, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x4, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e23, 0x2, @empty, 0x3}, @ib={0x1b, 0xfffe, 0x8000000, {"7d900600080000000900"}, 0x0, 0x0, 0x6}}}, 0x118) 5m52.685994302s ago: executing program 3 (id=496): syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}}}}}, 0x0) 5m52.194387622s ago: executing program 3 (id=497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 5m50.655867783s ago: executing program 3 (id=498): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 5m2.222624388s ago: executing program 34 (id=498): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 1m52.06005813s ago: executing program 1 (id=513): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002700)=[{{&(0x7f0000000180)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000380)="2bd9652066ad96c0b822444f831ba410fc9b4bdfb2e86301b5b57de187782ce8b378b3bbae37ab63ae26c5d6b2cb72e52d3f78bacbd23dbbf6aca61287ed1cbe9f6cdc6b238841da6f009f508db069bd3224094981f7a93e3c9d4208bbf6ac", 0x5f}, {&(0x7f0000000440)="ea135e7405c84f54f2167466795f9fe5b0a3373feff6de061cc3d458e0fc80c215bbf292acf5a19ae96576afc1f81f29bc24299a411c12219f5a86735e48d21464c9a5f56513156a1f726dd6bf347961c02b313d9eac307d9206c3248af5201335a408b3741c3108b663b8590aab6ae0a331739df453bc8deae0b8f6ebf3", 0x7e}, {&(0x7f00000004c0)="90efa89920537f7ba2845e7b2d10753c7c52c59b0583a273f2b5647d957ceaf0255a6a39e247cfdadc8dc3e03c18236a975731a2b15dcaa3cf090df4ee60ebcc12e65444a343d688d590603846acee57008a2bb0d55621288b98ea6ffea6ab4d0a35c9601933048cf0c8d30574a1d9ac847c2e0f107c24d7af3d2db7e9f118b2ce61895064a9de850d0709d3f5388342690237bdceb5f78b46715c91018a006bfea2e9d2ea47ca0fb0c6d835281bd41d33b61f74446bf2fada213ba9447b25fda424058ede245e0c4daed54f1ec77db02d96a8b8f9a9246ab79434d924231e27d836e4aeadb7582bc83728da93720f86eac1eb35", 0xf4}, {&(0x7f0000000dc0)="b10c893043f04c813ae43100ffe440f0ef70e53fe5586c08fb31790122323e66c213444dc800eef168d2b45a34fa591d5db0a74d309ec33ec8459f066671b1f86eaab559156283ad58973a8fa51ecad3991669b798b939a2ef61105e7d0ced4bb2f5f4fbe867848eb5d897c278d9e556cc437c001bdf9c0de4b004d2ce588bfcb5d2dfdb32314e07fa1231", 0x8b}, {&(0x7f0000000e80)="32c0745bcbe13db3843df864b6c58b051927bf0c8633f2876eec3ef1a1ae9a6bf57bce3e11e342be4103ba36d0e0a4c896eddc979ee397d494f84040bcf7f9e4450a42878a8af8db69846f7f9bce43cb7b6666c7435b494f9cb2910fa19c71084d9b3bde1d0e93790ad4c25e1726da8cb4d41c002118255a5687ca787c6ee1d76bf5f127bc4a29621a09a5637e721d1206e04b76e44387b86cd1d2a127df14389d5dd92fea04824262af1d9a1053076478ec2420d5314251b1f9e3d0f914229879675c2603bf05804227dfcc342fe262acb5b3520d54ab84992e32de0aaa7fd18c68ed36547029f8ddc10a089e33c7fc7b594981a7f99597ca8c323e1a3eb5162766d84295bf184a55b99f5243d3c54c92d6907d68bfd09e9e514fdeb9fb68cedba2fd4f6dbe7a9e75c5ecc91c5184f08d1d06662980e2e96a8e0df00031f9d7cd22dea46aa45838ae417cbc6fcc0875081dba80b44173eaf31c53d008eb32eda900746dd0175082d2df1b94465e6a2600d9e2ac3baf0f1e7975d26548e9112257c485e2d95740402e73bb8198f1b34cc965cf1262658fa58817adca690d514170122df94b33624e351cfe694adfd8bd5c07146e63c328a5608987547ebf00bfbda3b55b49afc4b46037e4a5bc2ee52e232b74e55746b051017d0b11cd341422539b259891f2ac178c955facdf2dddbd374e7c32831c7017ea4694bf63d32e2019d909f0ced89759d692d1d24581af660e96108d9cab229cf7ae51d9e1e9f28f1f2cedf935017909408db3603c360855198e97f24b5526ff2d2b9e848b952a69475961826744607ef64f3e11c2ce8985d382f5be809dd5a73fa953add05d943b367c798562f1f5f827ec810a9594f14c15690dfaa1c39ebe6e11d0bc42e1ca5fa1ce18f3907e6e502134aca345ecb2a80f335b23c5702cd5386fb4777992d5f9570ced599d5b40f929f7974898acd8cca7d7d970549582fe01c72c9f05bbe8255998e6327cf73d337922e89e7b594cb593d9a4d7746e091b3c2bb060139d0650241452303081a9ca5aa6e18984ea461a029e110adc18ab19e95e37878bf3657a1a117d6636055ed3c608e0a4126a37a60d3dfadf21112a4853b963cae6671929ce6bbd144da12b65c3d77a8509c44c9e44d27efa4ee0851238736cbe0bbc0894be07c4eb62754d04c038333cb75291a6c391db097bfddc2b0b288e595077e5b1ebacc58a7d", 0x365}], 0x5}}], 0x2, 0x2000c044) writev(r1, &(0x7f0000003bc0)=[{&(0x7f0000002780)="10f35c7c8a80f2a91a1de4085fb28639fcbc950afd52990dcc52e21d0a11e15580c8ffd651c46eaa812e6f7cc667489b7fe9b5110113680c406a5f2bd6105c77a786981b26371d5f4496fa2ec186ef37c7976895fa8619baa34fd7914b9cc0ebd2eb220d628069d4ee042fc3d5eeb918b5d251fa8d15d84073e5e6f592b89bce0bda6391b94e5b7f8b78c87005618ea98be701d5a63aac1a6374f289f2a542", 0x9f}], 0x1) 1m39.827971319s ago: executing program 1 (id=514): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0xc244efabf448d323, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') syz_ublk_setup_io_uring(0x925, &(0x7f00000003c0)={0x0, 0xcf2a, 0x1, 0x2, 0xd2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1m25.416243072s ago: executing program 1 (id=515): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x7, 0xfff7, 0x8, 0x3, 0x17, "a9b39ba517c50901"}) write(r1, &(0x7f0000000180)="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", 0x186) 1m14.168574781s ago: executing program 1 (id=516): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r0, 0xf89e8000) 1m3.89863161s ago: executing program 1 (id=517): r0 = socket(0x1e, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 45.326805578s ago: executing program 1 (id=518): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x11, 0x6}, 0x10) 0s ago: executing program 35 (id=518): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x11, 0x6}, 0x10) kernel console output (not intermixed with test programs): [ 52.028974][ T28] audit: type=1400 audit(51.910:91): avc: denied { read write } for pid=3090 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.031265][ T28] audit: type=1400 audit(51.910:92): avc: denied { open } for pid=3090 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:62656' (ED25519) to the list of known hosts. [ 69.716900][ T28] audit: type=1400 audit(69.590:93): avc: denied { name_bind } for pid=3093 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 71.668677][ T28] audit: type=1400 audit(71.550:94): avc: denied { execute } for pid=3094 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 71.673581][ T28] audit: type=1400 audit(71.560:95): avc: denied { execute_no_trans } for pid=3094 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 75.229925][ T28] audit: type=1400 audit(75.110:96): avc: denied { mounton } for pid=3094 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 75.237462][ T28] audit: type=1400 audit(75.120:97): avc: denied { mount } for pid=3094 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 75.256167][ T3094] cgroup: Unknown subsys name 'net' [ 75.267388][ T28] audit: type=1400 audit(75.150:98): avc: denied { unmount } for pid=3094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 75.411954][ T3094] cgroup: Unknown subsys name 'cpuset' [ 75.418049][ T3094] cgroup: Unknown subsys name 'hugetlb' [ 75.421549][ T3094] cgroup: Unknown subsys name 'rlimit' [ 75.656038][ T28] audit: type=1400 audit(75.540:99): avc: denied { setattr } for pid=3094 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.659641][ T28] audit: type=1400 audit(75.540:100): avc: denied { mounton } for pid=3094 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 75.664067][ T28] audit: type=1400 audit(75.550:101): avc: denied { mount } for pid=3094 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 75.889236][ T3096] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 75.894390][ T28] audit: type=1400 audit(75.780:102): avc: denied { relabelto } for pid=3096 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 75.902489][ T28] audit: type=1400 audit(75.780:103): avc: denied { write } for pid=3096 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 75.941696][ T28] audit: type=1400 audit(75.820:104): avc: denied { read } for pid=3094 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 75.944323][ T28] audit: type=1400 audit(75.820:105): avc: denied { open } for pid=3094 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 83.303586][ T3094] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.007621][ T28] audit: type=1400 audit(85.890:106): avc: denied { execmem } for pid=3097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.083475][ T28] audit: type=1400 audit(85.970:107): avc: denied { read } for pid=3099 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 86.087080][ T28] audit: type=1400 audit(85.970:108): avc: denied { open } for pid=3099 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 86.100354][ T28] audit: type=1400 audit(85.980:109): avc: denied { mounton } for pid=3099 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 86.140437][ T28] audit: type=1400 audit(86.020:110): avc: denied { module_request } for pid=3099 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 86.144770][ T28] audit: type=1400 audit(86.020:111): avc: denied { module_request } for pid=3100 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 86.253634][ T28] audit: type=1400 audit(86.140:112): avc: denied { sys_module } for pid=3100 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 87.143447][ T28] audit: type=1400 audit(87.020:113): avc: denied { ioctl } for pid=3099 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.136807][ T3100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.148885][ T3100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.445424][ T3099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.457528][ T3099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.255673][ T3100] hsr_slave_0: entered promiscuous mode [ 89.264008][ T3100] hsr_slave_1: entered promiscuous mode [ 89.727786][ T3099] hsr_slave_0: entered promiscuous mode [ 89.734194][ T3099] hsr_slave_1: entered promiscuous mode [ 89.735603][ T3099] debugfs: 'hsr0' already exists in 'hsr' [ 89.736128][ T3099] Cannot create hsr debugfs directory [ 89.849726][ T28] audit: type=1400 audit(89.730:114): avc: denied { create } for pid=3100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.850255][ T28] audit: type=1400 audit(89.730:115): avc: denied { write } for pid=3100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.867224][ T3100] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.883517][ T3100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.888974][ T3100] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.900634][ T3100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.908200][ T3100] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.919182][ T3100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.937349][ T3100] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.948592][ T3100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.235353][ T3099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.248505][ T3099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.255338][ T3099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.276253][ T3099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.280304][ T3099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.292889][ T3099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.296539][ T3099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.304145][ T3099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.969055][ T3100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.276417][ T3099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.069912][ T3100] veth0_vlan: entered promiscuous mode [ 94.095782][ T3100] veth1_vlan: entered promiscuous mode [ 94.154439][ T3100] veth0_macvtap: entered promiscuous mode [ 94.174073][ T3100] veth1_macvtap: entered promiscuous mode [ 94.264040][ T2561] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.264980][ T2561] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.265373][ T2561] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.266077][ T2561] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.404830][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 94.405292][ T28] audit: type=1400 audit(94.270:117): avc: denied { mount } for pid=3100 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.423856][ T28] audit: type=1400 audit(94.310:118): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/syzkaller.VAeEnc/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 94.432766][ T28] audit: type=1400 audit(94.320:119): avc: denied { mount } for pid=3100 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 94.443835][ T28] audit: type=1400 audit(94.330:120): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/syzkaller.VAeEnc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 94.448574][ T28] audit: type=1400 audit(94.330:121): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/syzkaller.VAeEnc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 94.469817][ T28] audit: type=1400 audit(94.350:122): avc: denied { unmount } for pid=3100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 94.481480][ T28] audit: type=1400 audit(94.360:123): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 94.485583][ T28] audit: type=1400 audit(94.370:124): avc: denied { mount } for pid=3100 comm="syz-executor" name="/" dev="gadgetfs" ino=3105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 94.499253][ T28] audit: type=1400 audit(94.380:125): avc: denied { mount } for pid=3100 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 94.505606][ T28] audit: type=1400 audit(94.390:126): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 94.604863][ T3100] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.033381][ T3099] veth0_vlan: entered promiscuous mode [ 95.075109][ T3099] veth1_vlan: entered promiscuous mode [ 95.193111][ T3099] veth0_macvtap: entered promiscuous mode [ 95.225386][ T3099] veth1_macvtap: entered promiscuous mode [ 95.336633][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.337205][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.337614][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.338082][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.666320][ T40] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.002381][ T40] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.002817][ T40] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 98.003483][ T40] usb 1-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=e0.4b [ 98.003563][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.010459][ T40] usb 1-1: config 0 descriptor?? [ 98.356416][ T3085] usb 1-1: USB disconnect, device number 2 [ 102.391854][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 102.392312][ T28] audit: type=1400 audit(102.270:150): avc: denied { name_bind } for pid=3751 comm="syz.1.16" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 105.566090][ T28] audit: type=1400 audit(105.450:151): avc: denied { create } for pid=3759 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.796070][ T28] audit: type=1400 audit(105.680:152): avc: denied { write } for pid=3759 comm="syz.1.18" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.181908][ T28] audit: type=1400 audit(108.060:153): avc: denied { create } for pid=3767 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.207979][ T28] audit: type=1400 audit(108.090:154): avc: denied { write } for pid=3767 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.491629][ T90] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 121.662681][ T90] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 121.664366][ T90] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.670358][ T90] usb 1-1: config 0 has no interface number 0 [ 121.692262][ T90] usb 1-1: New USB device found, idVendor=045b, idProduct=024d, bcdDevice=27.16 [ 121.693175][ T90] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.693784][ T90] usb 1-1: Product: syz [ 121.694242][ T90] usb 1-1: Manufacturer: syz [ 121.694760][ T90] usb 1-1: SerialNumber: syz [ 121.703310][ T90] usb 1-1: config 0 descriptor?? [ 121.934453][ T90] cdc_acm 1-1:0.106: Control and data interfaces are not separated! [ 121.946046][ T90] cdc_acm 1-1:0.106: This needs exactly 3 endpoints [ 121.949448][ T90] cdc_acm 1-1:0.106: probe with driver cdc_acm failed with error -22 [ 121.966755][ T90] usb 1-1: USB disconnect, device number 3 [ 122.784597][ T3800] cgroup: Unknown subsys name 'cpuset' [ 126.404220][ T28] audit: type=1400 audit(126.290:155): avc: denied { ioctl } for pid=3805 comm="syz.0.34" path="socket:[3226]" dev="sockfs" ino=3226 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.694249][ T28] audit: type=1400 audit(127.580:156): avc: denied { accept } for pid=3809 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.017693][ T3817] capability: warning: `syz.0.37' uses deprecated v2 capabilities in a way that may be insecure [ 129.331498][ T28] audit: type=1400 audit(129.190:157): avc: denied { create } for pid=3818 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 129.387186][ T28] audit: type=1400 audit(129.270:158): avc: denied { sys_admin } for pid=3818 comm="syz.0.38" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 130.905156][ T28] audit: type=1400 audit(130.790:159): avc: denied { read } for pid=3821 comm="syz.0.39" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 130.915623][ T28] audit: type=1400 audit(130.800:160): avc: denied { open } for pid=3821 comm="syz.0.39" path="/19/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 131.006873][ T28] audit: type=1400 audit(130.880:161): avc: denied { unmount } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 132.771058][ T28] audit: type=1400 audit(132.650:162): avc: denied { setopt } for pid=3832 comm="syz.0.43" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.812936][ T3085] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.021489][ T3085] usb 2-1: Using ep0 maxpacket: 32 [ 134.034356][ T3085] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.035966][ T3085] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 134.037088][ T3085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.065734][ T3085] usb 2-1: config 0 descriptor?? [ 134.104901][ T3085] rndis_host 2-1:0.0: rndis: master #0/860e0800 slave #1/00000000 [ 134.299724][ T3085] usb 2-1: USB disconnect, device number 2 [ 135.329541][ T28] audit: type=1400 audit(135.210:163): avc: denied { setopt } for pid=3866 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.347477][ T28] audit: type=1400 audit(135.230:164): avc: denied { write } for pid=3866 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.374184][ T28] audit: type=1400 audit(135.260:165): avc: denied { read } for pid=3866 comm="syz.0.52" path="socket:[3277]" dev="sockfs" ino=3277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.636168][ T28] audit: type=1400 audit(137.520:166): avc: denied { connect } for pid=3875 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.424230][ T3883] netlink: 'syz.0.58': attribute type 5 has an invalid length. [ 140.948097][ T28] audit: type=1400 audit(140.830:167): avc: denied { append } for pid=3897 comm="syz.1.64" name="ptmx" dev="devtmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.625182][ T28] audit: type=1400 audit(141.510:168): avc: denied { nlmsg_write } for pid=3902 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.093010][ T28] audit: type=1400 audit(145.980:169): avc: denied { create } for pid=3920 comm="syz.1.72" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 147.539696][ T28] audit: type=1400 audit(147.420:170): avc: denied { setopt } for pid=3934 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.652161][ T3741] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 150.771602][ T3085] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 150.824863][ T3741] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.825287][ T3741] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 150.825663][ T3741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.833451][ T3741] usb 2-1: config 0 descriptor?? [ 150.848977][ T3741] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 150.922110][ T3085] usb 1-1: Using ep0 maxpacket: 8 [ 150.937273][ T3085] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.937720][ T3085] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.937944][ T3085] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 150.938097][ T3085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.940486][ T3085] usb 1-1: config 0 descriptor?? [ 151.157797][ T3085] usb 1-1: USB disconnect, device number 4 [ 151.745901][ T28] audit: type=1400 audit(151.630:171): avc: denied { shutdown } for pid=3971 comm="syz.0.83" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.791209][ T28] audit: type=1400 audit(151.670:172): avc: denied { read } for pid=3971 comm="syz.0.83" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.268242][ T28] audit: type=1400 audit(155.150:173): avc: denied { create } for pid=3983 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.283228][ T28] audit: type=1400 audit(155.160:174): avc: denied { write } for pid=3983 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.872964][ T28] audit: type=1400 audit(156.760:175): avc: denied { mounton } for pid=3992 comm="syz.0.90" path="/56/file0" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 158.262143][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 158.411250][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 158.429501][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 158.439849][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.442335][ T9] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 158.443101][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 158.459445][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.459727][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.460049][ T9] usb 1-1: Product: syz [ 158.460177][ T9] usb 1-1: Manufacturer: syz [ 158.460264][ T9] usb 1-1: SerialNumber: syz [ 158.693576][ T9] cdc_ether 1-1:1.0: skipping garbage [ 158.694729][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 158.710400][ T9] usb 1-1: USB disconnect, device number 5 [ 158.800161][ T28] audit: type=1400 audit(158.680:176): avc: denied { ioctl } for pid=4020 comm="syz.0.96" path="socket:[2735]" dev="sockfs" ino=2735 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.811090][ T28] audit: type=1400 audit(158.690:177): avc: denied { write } for pid=4020 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.086857][ T28] audit: type=1400 audit(158.970:178): avc: denied { create } for pid=4024 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 159.095135][ T28] audit: type=1400 audit(158.980:179): avc: denied { getopt } for pid=4024 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.387850][ T90] usb 2-1: USB disconnect, device number 3 [ 165.909565][ T4050] Zero length message leads to an empty skb [ 177.831256][ T23] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 178.062343][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 178.074133][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 178.132603][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.133176][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 178.265858][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.266257][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 178.266671][ T23] usb 1-1: Product: syz [ 178.266853][ T23] usb 1-1: Manufacturer: syz [ 178.267025][ T23] usb 1-1: SerialNumber: syz [ 178.313405][ T4077] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 178.593131][ T23] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 178.624584][ T23] usb 1-1: USB disconnect, device number 6 [ 179.581543][ T28] audit: type=1400 audit(179.460:180): avc: denied { write } for pid=4092 comm="syz.0.116" name="file1" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 179.582003][ T28] audit: type=1400 audit(179.460:181): avc: denied { open } for pid=4092 comm="syz.0.116" path="/71/file0/file1" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 185.487566][ T28] audit: type=1400 audit(185.370:182): avc: denied { unmount } for pid=4112 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 186.019039][ T28] audit: type=1400 audit(185.900:183): avc: denied { create } for pid=4116 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 186.046554][ T28] audit: type=1400 audit(185.930:184): avc: denied { getopt } for pid=4116 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.690391][ T28] audit: type=1400 audit(200.570:185): avc: denied { create } for pid=4135 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.717898][ T28] audit: type=1400 audit(200.600:186): avc: denied { getopt } for pid=4135 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.745940][ T4146] netlink: 36 bytes leftover after parsing attributes in process `syz.1.135'. [ 209.867069][ T28] audit: type=1400 audit(209.750:187): avc: denied { setopt } for pid=4156 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.455775][ T28] audit: type=1400 audit(212.340:188): avc: denied { create } for pid=4158 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 212.482200][ T28] audit: type=1400 audit(212.360:189): avc: denied { setopt } for pid=4158 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.591766][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 216.956676][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 216.957304][ T9] usb 1-1: no configurations [ 216.957826][ T9] usb 1-1: can't read configurations, error -22 [ 218.071487][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 218.335271][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.335674][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.360213][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.362042][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 218.369104][ T9] usb 1-1: SerialNumber: syz [ 218.624637][ T9] usb 1-1: 0:2 : does not exist [ 218.978576][ T9] usb 1-1: USB disconnect, device number 8 [ 222.670170][ T28] audit: type=1400 audit(222.550:190): avc: denied { create } for pid=4218 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 222.688387][ T28] audit: type=1400 audit(222.570:191): avc: denied { create } for pid=4218 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 225.825304][ T28] audit: type=1400 audit(225.710:192): avc: denied { read } for pid=4227 comm="syz.0.154" path="socket:[3582]" dev="sockfs" ino=3582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 230.362197][ T4255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.167'. [ 230.857957][ T28] audit: type=1400 audit(230.740:193): avc: denied { read } for pid=4264 comm="syz.0.172" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 230.868490][ T28] audit: type=1400 audit(230.750:194): avc: denied { open } for pid=4264 comm="syz.0.172" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 247.562356][ T28] audit: type=1400 audit(247.450:195): avc: denied { write } for pid=4294 comm="syz.0.184" path="socket:[3692]" dev="sockfs" ino=3692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 249.683102][ T11] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 249.864625][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.865786][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.866947][ T11] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.867467][ T11] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.867544][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.881658][ T11] usb 1-1: config 0 descriptor?? [ 250.330545][ T11] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 251.797106][ T28] audit: type=1400 audit(251.680:196): avc: denied { map } for pid=4350 comm="syz.0.201" path="/dev/comedi4" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.347563][ T90] usb 1-1: USB disconnect, device number 9 [ 252.608977][ T28] audit: type=1400 audit(252.480:197): avc: denied { ioctl } for pid=4352 comm="syz.0.202" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4131 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 259.065647][ T28] audit: type=1400 audit(258.950:198): avc: denied { write } for pid=4368 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 259.242257][ T28] audit: type=1400 audit(259.130:199): avc: denied { create } for pid=4371 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 259.282761][ T28] audit: type=1400 audit(259.170:200): avc: denied { write } for pid=4371 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 262.099477][ T28] audit: type=1400 audit(261.980:201): avc: denied { execute } for pid=4373 comm="syz.1.206" name="file0" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 262.113302][ T4376] process 'syz.1.206' launched './file0' with NULL argv: empty string added [ 262.118889][ T28] audit: type=1400 audit(262.000:202): avc: denied { execute_no_trans } for pid=4373 comm="syz.1.206" path="/84/file0" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 262.168555][ T28] audit: type=1400 audit(262.050:203): avc: denied { remount } for pid=4373 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 262.231474][ T28] audit: type=1400 audit(262.110:204): avc: denied { bind } for pid=4373 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 262.262035][ T28] audit: type=1400 audit(262.140:205): avc: denied { connect } for pid=4373 comm="syz.1.206" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.815772][ T28] audit: type=1326 audit(263.700:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.0.207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 263.826127][ T28] audit: type=1326 audit(263.710:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.0.207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 264.351408][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 264.351753][ T28] audit: type=1326 audit(264.230:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.208" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 264.352291][ T28] audit: type=1326 audit(264.230:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.208" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 264.352524][ T28] audit: type=1326 audit(264.230:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.208" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 264.352764][ T28] audit: type=1326 audit(264.230:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.208" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 264.353084][ T28] audit: type=1326 audit(264.230:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.208" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 264.353282][ T28] audit: type=1326 audit(264.230:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.208" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 264.353471][ T28] audit: type=1326 audit(264.230:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.208" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 264.353657][ T28] audit: type=1326 audit(264.230:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.208" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 264.353843][ T28] audit: type=1326 audit(264.230:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.208" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 264.368911][ T28] audit: type=1326 audit(264.230:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.208" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 300.987215][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 300.988197][ T28] audit: type=1400 audit(300.870:285): avc: denied { bind } for pid=4452 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 301.033021][ T28] audit: type=1400 audit(300.920:286): avc: denied { listen } for pid=4452 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 301.038206][ T28] audit: type=1400 audit(300.920:287): avc: denied { connect } for pid=4452 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 303.848418][ T4465] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 307.503536][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 307.681638][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 307.711060][ T43] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 307.714133][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 307.717577][ T43] usb 1-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 307.719088][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.744108][ T43] usb 1-1: config 0 descriptor?? [ 307.935854][ T28] audit: type=1400 audit(307.820:288): avc: denied { write } for pid=4452 comm="syz.1.238" path="socket:[3881]" dev="sockfs" ino=3881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 307.999397][ T28] audit: type=1400 audit(307.880:289): avc: denied { setopt } for pid=4452 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 308.407864][ T43] asus 0003:0B05:1822.0002: unknown main item tag 0x0 [ 308.409378][ T43] asus 0003:0B05:1822.0002: unknown main item tag 0x0 [ 308.411254][ T43] asus 0003:0B05:1822.0002: unknown main item tag 0x0 [ 308.412627][ T43] asus 0003:0B05:1822.0002: unknown main item tag 0x0 [ 308.414599][ T43] asus 0003:0B05:1822.0002: unknown main item tag 0x0 [ 308.415801][ T43] asus 0003:0B05:1822.0002: unknown main item tag 0x0 [ 308.416864][ T43] asus 0003:0B05:1822.0002: unknown main item tag 0x0 [ 308.420066][ T43] asus 0003:0B05:1822.0002: report_id 0 is invalid [ 308.423493][ T43] asus 0003:0B05:1822.0002: item 0 1 1 8 parsing failed [ 308.429384][ T43] asus 0003:0B05:1822.0002: Asus hid parse failed: -22 [ 308.432562][ T43] asus 0003:0B05:1822.0002: probe with driver asus failed with error -22 [ 308.733138][ T90] usb 1-1: USB disconnect, device number 10 [ 310.873655][ T28] audit: type=1400 audit(310.760:290): avc: denied { block_suspend } for pid=4502 comm="syz.0.250" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 324.071628][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 324.251518][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 324.269659][ T23] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 324.269899][ T23] usb 1-1: config 0 has no interface number 0 [ 324.270254][ T23] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 324.285697][ T23] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 324.285910][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.286011][ T23] usb 1-1: Product: syz [ 324.286134][ T23] usb 1-1: Manufacturer: syz [ 324.286270][ T23] usb 1-1: SerialNumber: syz [ 324.303673][ T23] usb 1-1: config 0 descriptor?? [ 324.306944][ T4522] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 324.524762][ T4522] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 325.162217][ T23] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 325.162964][ T23] asix 1-1:0.188: probe with driver asix failed with error -71 [ 325.198663][ T23] usb 1-1: USB disconnect, device number 11 [ 325.452322][ T4538] syz.0.257 uses obsolete (PF_INET,SOCK_PACKET) [ 332.232357][ T43] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 332.437085][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 332.438486][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.441536][ T43] usb 1-1: Product: syz [ 332.443891][ T43] usb 1-1: Manufacturer: syz [ 332.445042][ T43] usb 1-1: SerialNumber: syz [ 332.459910][ T43] usb 1-1: config 0 descriptor?? [ 337.515379][ T4629] netlink: 'syz.1.290': attribute type 10 has an invalid length. [ 342.721736][ T2883] usb 1-1: USB disconnect, device number 12 [ 344.852052][ T40] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 345.012363][ T40] usb 1-1: Using ep0 maxpacket: 8 [ 345.022285][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 345.022713][ T40] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 345.022777][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.038706][ T40] usb 1-1: config 0 descriptor?? [ 345.263038][ T40] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 351.879812][ T28] audit: type=1326 audit(351.760:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 351.893105][ T28] audit: type=1326 audit(351.770:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 351.893557][ T28] audit: type=1326 audit(351.770:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 351.894368][ T28] audit: type=1326 audit(351.770:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 351.894862][ T28] audit: type=1326 audit(351.770:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 351.895099][ T28] audit: type=1326 audit(351.770:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 351.895314][ T28] audit: type=1326 audit(351.770:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 351.895523][ T28] audit: type=1400 audit(351.780:298): avc: denied { write } for pid=4712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.928016][ T28] audit: type=1326 audit(351.810:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000028 syscall=426 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 351.936196][ T28] audit: type=1326 audit(351.820:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 355.504402][ T3719] usb 1-1: USB disconnect, device number 13 [ 356.472960][ T4746] netlink: 'syz.0.327': attribute type 1 has an invalid length. [ 356.702771][ T4746] bond1: entered promiscuous mode [ 356.703577][ T4746] bond1: entered allmulticast mode [ 356.705830][ T4746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.708283][ T9] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 358.017473][ T9] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 358.017893][ T9] usb 1-1: config 0 has no interface number 0 [ 358.084991][ T9] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 358.085397][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.085709][ T9] usb 1-1: Product: syz [ 358.085804][ T9] usb 1-1: Manufacturer: syz [ 358.085842][ T9] usb 1-1: SerialNumber: syz [ 358.097215][ T9] usb 1-1: config 0 descriptor?? [ 358.866575][ T4791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 359.222268][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 359.222673][ T28] audit: type=1400 audit(359.100:310): avc: denied { bind } for pid=4790 comm="syz.1.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 361.764578][ T28] audit: type=1400 audit(361.630:311): avc: denied { create } for pid=4799 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 361.784942][ T28] audit: type=1400 audit(361.670:312): avc: denied { write } for pid=4799 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 361.952355][ T28] audit: type=1400 audit(361.830:313): avc: denied { create } for pid=4804 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 371.938201][ T2883] usb 1-1: USB disconnect, device number 14 [ 375.362669][ T28] audit: type=1400 audit(375.250:314): avc: denied { ioctl } for pid=4832 comm="syz.0.343" path="socket:[4574]" dev="sockfs" ino=4574 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 375.911492][ T3719] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 376.071514][ T3719] usb 1-1: Using ep0 maxpacket: 32 [ 376.148106][ T3719] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 376.148503][ T3719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.148846][ T3719] usb 1-1: Product: syz [ 376.148898][ T3719] usb 1-1: Manufacturer: syz [ 376.148929][ T3719] usb 1-1: SerialNumber: syz [ 376.163940][ T3719] usb 1-1: config 0 descriptor?? [ 384.029696][ T28] audit: type=1400 audit(383.910:315): avc: denied { mounton } for pid=4860 comm="syz.1.351" path="/173/file0" dev="tmpfs" ino=907 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 384.029790][ T4861] fuse: Bad value for 'fd' [ 386.559625][ T28] audit: type=1400 audit(386.440:316): avc: denied { create } for pid=4863 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 388.784159][ T3719] usb 1-1: USB disconnect, device number 15 [ 390.223893][ T4879] netlink: 104 bytes leftover after parsing attributes in process `syz.1.352'. [ 391.599208][ T28] audit: type=1400 audit(391.480:317): avc: denied { ioctl } for pid=4882 comm="syz.1.354" path="socket:[5247]" dev="sockfs" ino=5247 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 421.166057][ T28] audit: type=1400 audit(421.050:318): avc: denied { connect } for pid=4907 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 421.212621][ T28] audit: type=1400 audit(421.100:319): avc: denied { ioctl } for pid=4907 comm="syz.1.362" path="socket:[5256]" dev="sockfs" ino=5256 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 433.165550][ T28] audit: type=1400 audit(433.050:320): avc: denied { bind } for pid=4919 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 433.167709][ T28] audit: type=1400 audit(433.050:321): avc: denied { name_bind } for pid=4919 comm="syz.1.365" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 433.173999][ T28] audit: type=1400 audit(433.050:322): avc: denied { node_bind } for pid=4919 comm="syz.1.365" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 439.257913][ T4922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.278500][ T4922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.954429][ T4922] hsr_slave_0: entered promiscuous mode [ 440.957127][ T4922] hsr_slave_1: entered promiscuous mode [ 440.962980][ T4922] debugfs: 'hsr0' already exists in 'hsr' [ 440.963315][ T4922] Cannot create hsr debugfs directory [ 441.595086][ T4922] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 441.624340][ T4922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.628195][ T4922] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 441.646497][ T4922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.669645][ T4922] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 441.682781][ T4922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.685226][ T4922] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 441.695448][ T4922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.015079][ T4922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.368251][ T4922] veth0_vlan: entered promiscuous mode [ 449.418284][ T4922] veth1_vlan: entered promiscuous mode [ 449.565668][ T4922] veth0_macvtap: entered promiscuous mode [ 449.585501][ T4922] veth1_macvtap: entered promiscuous mode [ 449.701715][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.702561][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.703747][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.704000][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.704544][ T28] audit: type=1400 audit(450.550:323): avc: denied { setopt } for pid=5237 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 459.223614][ T5262] netlink: 40 bytes leftover after parsing attributes in process `syz.1.377'. [ 459.224632][ T5262] netlink: 3 bytes leftover after parsing attributes in process `syz.1.377'. [ 459.225409][ T5262] bond_slave_0: entered allmulticast mode [ 459.227663][ T5262] netlink: 3 bytes leftover after parsing attributes in process `syz.1.377'. [ 466.211816][ T28] audit: type=1326 audit(466.040:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5286 comm="syz.1.386" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x0 [ 475.145769][ T2658] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.257933][ T2658] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.337940][ T2658] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.433801][ T2658] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.953709][ T2658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.976979][ T2658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.990188][ T2658] bond0 (unregistering): Released all slaves [ 476.006384][ T2658] bond1 (unregistering): Released all slaves [ 476.224864][ T2658] hsr_slave_0: left promiscuous mode [ 476.238422][ T2658] hsr_slave_1: left promiscuous mode [ 476.277552][ T2658] veth1_macvtap: left promiscuous mode [ 476.278863][ T2658] veth0_macvtap: left promiscuous mode [ 476.284813][ T2658] veth1_vlan: left promiscuous mode [ 476.287877][ T2658] veth0_vlan: left promiscuous mode [ 480.276492][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 480.294837][ T28] audit: type=1400 audit(480.170:325): avc: denied { write } for pid=5306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.009770][ T28] audit: type=1400 audit(480.890:326): avc: denied { write } for pid=5329 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.465512][ T2954] 8021q: adding VLAN 0 to HW filter on device eth1 [ 485.316570][ T28] audit: type=1400 audit(485.200:327): avc: denied { write } for pid=5345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.194403][ T28] audit: type=1400 audit(486.080:328): avc: denied { write } for pid=5352 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.564426][ T2954] 8021q: adding VLAN 0 to HW filter on device eth2 [ 487.429497][ T28] audit: type=1400 audit(487.310:329): avc: denied { write } for pid=5359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.891977][ T28] audit: type=1400 audit(487.780:330): avc: denied { write } for pid=5362 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.273732][ T2954] 8021q: adding VLAN 0 to HW filter on device eth3 [ 489.599454][ T28] audit: type=1400 audit(489.480:331): avc: denied { write } for pid=5373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.971825][ T28] audit: type=1400 audit(489.850:332): avc: denied { write } for pid=5377 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.245187][ T2954] 8021q: adding VLAN 0 to HW filter on device eth4 [ 491.746674][ T28] audit: type=1400 audit(491.630:333): avc: denied { create } for pid=5386 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 491.750232][ T28] audit: type=1400 audit(491.630:334): avc: denied { bind } for pid=5386 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 491.778828][ T28] audit: type=1400 audit(491.660:335): avc: denied { write } for pid=5386 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 500.536604][ T28] audit: type=1400 audit(500.420:336): avc: denied { create } for pid=5424 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 502.269652][ T28] audit: type=1400 audit(502.150:337): avc: denied { write } for pid=5429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.879708][ T28] audit: type=1400 audit(503.750:338): avc: denied { write } for pid=5455 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.838313][ T28] audit: type=1400 audit(505.720:339): avc: denied { write } for pid=5548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.388182][ T28] audit: type=1400 audit(506.270:340): avc: denied { write } for pid=5551 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.199054][ T5402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.205643][ T5402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.283267][ T28] audit: type=1400 audit(509.170:341): avc: denied { connect } for pid=5604 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 509.340451][ T28] audit: type=1400 audit(509.220:342): avc: denied { bind } for pid=5604 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 509.402130][ T28] audit: type=1400 audit(509.230:343): avc: denied { setopt } for pid=5604 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 509.402383][ T28] audit: type=1400 audit(509.270:344): avc: denied { write } for pid=5604 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 509.402551][ T28] audit: type=1400 audit(509.270:345): avc: denied { read } for pid=5604 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 510.058045][ T5402] hsr_slave_0: entered promiscuous mode [ 510.062647][ T5402] hsr_slave_1: entered promiscuous mode [ 510.066317][ T5402] debugfs: 'hsr0' already exists in 'hsr' [ 510.067251][ T5402] Cannot create hsr debugfs directory [ 510.659751][ T28] audit: type=1400 audit(510.540:346): avc: denied { write } for pid=5610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.683928][ T5402] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 510.704399][ T5402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.708286][ T5402] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 510.723215][ T5402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.728484][ T5402] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 510.748101][ T5402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 510.754997][ T5402] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 510.772792][ T5402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 511.258350][ T28] audit: type=1400 audit(511.140:347): avc: denied { write } for pid=5740 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.891859][ T28] audit: type=1400 audit(512.730:348): avc: denied { write } for pid=5752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 513.744054][ T5402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.826712][ T5766] netlink: 192 bytes leftover after parsing attributes in process `syz.1.433'. [ 514.005897][ T28] audit: type=1400 audit(513.890:349): avc: denied { write } for pid=5764 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.281888][ T28] audit: type=1400 audit(515.150:350): avc: denied { name_bind } for pid=5773 comm="syz.1.435" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 519.945432][ T5845] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.355206][ T5845] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.588874][ T5845] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.688627][ T5845] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.308198][ T28] audit: type=1400 audit(521.190:351): avc: denied { ioctl } for pid=5867 comm="syz.1.439" path="socket:[6673]" dev="sockfs" ino=6673 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 521.903820][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.973036][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.979833][ T5845] bond0 (unregistering): Released all slaves [ 522.098794][ T5845] hsr_slave_0: left promiscuous mode [ 522.146358][ T5845] hsr_slave_1: left promiscuous mode [ 522.205278][ T5845] veth1_macvtap: left promiscuous mode [ 522.206201][ T5845] veth0_macvtap: left promiscuous mode [ 522.206875][ T5845] veth1_vlan: left promiscuous mode [ 522.207027][ T5845] veth0_vlan: left promiscuous mode [ 522.320456][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 522.912107][ T28] audit: type=1400 audit(522.800:352): avc: denied { write } for pid=5879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.628832][ T28] audit: type=1400 audit(523.510:353): avc: denied { write } for pid=5882 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.909581][ T2954] 8021q: adding VLAN 0 to HW filter on device eth5 [ 524.293903][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 524.294313][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 524.956137][ T28] audit: type=1400 audit(524.840:354): avc: denied { write } for pid=5908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.979495][ T5402] veth0_vlan: entered promiscuous mode [ 525.036115][ T5402] veth1_vlan: entered promiscuous mode [ 525.139919][ T5402] veth0_macvtap: entered promiscuous mode [ 525.184739][ T5402] veth1_macvtap: entered promiscuous mode [ 525.269572][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.270142][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.270440][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.270506][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.382344][ T28] audit: type=1400 audit(525.250:355): avc: denied { write } for pid=5916 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.715444][ T2954] 8021q: adding VLAN 0 to HW filter on device eth6 [ 525.869856][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 525.872039][ T5927] bridge_slave_0: entered promiscuous mode [ 525.884636][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 525.979980][ T5929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.982516][ T5929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.239362][ T28] audit: type=1400 audit(527.120:356): avc: denied { write } for pid=5941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.697987][ T28] audit: type=1400 audit(527.580:357): avc: denied { write } for pid=5949 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.114483][ T2954] 8021q: adding VLAN 0 to HW filter on device eth7 [ 529.047069][ T28] audit: type=1400 audit(528.920:358): avc: denied { write } for pid=5958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.394517][ T5970] syzkaller0: entered promiscuous mode [ 529.395148][ T5970] syzkaller0: entered allmulticast mode [ 529.502099][ T5970] syzkaller0: left promiscuous mode [ 529.502669][ T5970] syzkaller0: left allmulticast mode [ 529.578203][ T28] audit: type=1400 audit(529.460:359): avc: denied { write } for pid=5967 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.919976][ T2954] 8021q: adding VLAN 0 to HW filter on device eth8 [ 530.262344][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.272409][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.853635][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.463'. [ 532.260641][ T28] audit: type=1400 audit(532.140:360): avc: denied { setopt } for pid=6010 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 535.683462][ T6024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.474'. [ 536.234919][ T28] audit: type=1400 audit(536.120:361): avc: denied { getopt } for pid=6023 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 542.161247][ T28] audit: type=1400 audit(542.040:362): avc: denied { write } for pid=6038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.181352][ T28] audit: type=1400 audit(544.060:363): avc: denied { write } for pid=6045 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.708349][ T28] audit: type=1400 audit(546.590:364): avc: denied { write } for pid=6048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.623819][ T28] audit: type=1400 audit(548.500:365): avc: denied { write } for pid=6051 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.890191][ T28] audit: type=1400 audit(550.770:366): avc: denied { write } for pid=6055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.502881][ T28] audit: type=1400 audit(551.380:367): avc: denied { write } for pid=6060 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.595637][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.612562][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.089635][ T28] audit: type=1400 audit(551.970:368): avc: denied { getopt } for pid=6068 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 552.376555][ T6069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.386866][ T6069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.258988][ T28] audit: type=1400 audit(553.140:369): avc: denied { write } for pid=6074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.361795][ T28] audit: type=1400 audit(554.240:370): avc: denied { write } for pid=6079 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.001485][ T6090] mmap: syz.3.487 (6090) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 575.474092][ T6117] netlink: 64 bytes leftover after parsing attributes in process `syz.3.489'. [ 577.803189][ T6127] syzkaller0: entered promiscuous mode [ 577.811289][ T6127] syzkaller0: entered allmulticast mode [ 578.061648][ T28] audit: type=1400 audit(577.940:371): avc: denied { connect } for pid=6130 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 655.007765][ C1] sched: DL replenish lagged too much [ 686.058297][ T5845] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.502537][ T5845] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.403701][ T5845] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.182436][ T5845] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.284035][ T28] audit: type=1400 audit(789.170:372): avc: denied { create } for pid=6211 comm="syz.1.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 790.803979][ T6213] fuse: Bad value for 'fd' [ 873.532662][ T28] audit: type=1400 audit(873.420:373): avc: denied { create } for pid=6229 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 932.881663][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.844904][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.514302][ T5845] bond0 (unregistering): Released all slaves [ 953.600369][ T5845] hsr_slave_0: left promiscuous mode [ 953.899116][ T5845] hsr_slave_1: left promiscuous mode [ 963.703383][ T5845] veth1_macvtap: left promiscuous mode [ 963.734085][ T5845] veth0_macvtap: left promiscuous mode [ 963.997891][ T5845] veth1_vlan: left promiscuous mode [ 964.093901][ T5845] veth0_vlan: left promiscuous mode [ 1385.549876][ T29] INFO: task dhcpcd:2954 blocked for more than 429 seconds. [ 1385.559573][ T29] Tainted: G L syzkaller #0 [ 1385.568763][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1385.577847][ T29] task:dhcpcd state:D stack:0 pid:2954 tgid:2954 ppid:2953 task_flags:0x400140 flags:0x00000004 [ 1385.595731][ T29] Call trace: [ 1385.613218][ T29] [<81b0a15c>] (__schedule) from [<81b0b5ec>] (schedule+0x2c/0x134) [ 1385.622345][ T29] r10:ebd39c1c r9:ebd39c24 r8:00000002 r7:60000013 r6:82e34428 r5:847a4980 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1385.758381][ T29] r4:847a4980 [ 1385.766697][ T29] [<81b0b5c0>] (schedule) from [<81b0b778>] (schedule_preempt_disabled+0x18/0x24) [ 1385.773291][ T29] r5:847a4980 r4:82e34424 [ 1385.785534][ T29] [<81b0b760>] (schedule_preempt_disabled) from [<81b0e858>] (__mutex_lock.constprop.0+0x530/0xa88) [ 1385.791810][ T29] [<81b0e328>] (__mutex_lock.constprop.0) from [<81b0ee84>] (__mutex_lock_slowpath+0x14/0x18) [ 1385.803482][ T29] r10:00002000 r9:00002000 r8:86805680 r7:868056e4 r6:831dd3c0 r5:86805680 [ 1385.816441][ T29] r4:816394fc [ 1385.823222][ T29] [<81b0ee70>] (__mutex_lock_slowpath) from [<81b0eec4>] (mutex_lock+0x3c/0x40) [ 1385.837118][ T29] [<81b0ee88>] (mutex_lock) from [<8162e890>] (rtnl_dumpit+0x70/0x8c) [ 1385.843182][ T29] [<8162e820>] (rtnl_dumpit) from [<8171454c>] (netlink_dump+0x16c/0x4a8) [ 1385.854834][ T29] r7:868056e4 r6:00001f00 r5:86805400 r4:831dd3c0 [ 1386.592139][ T29] [<817143e0>] (netlink_dump) from [<81714a6c>] (netlink_recvmsg+0x1e4/0x284) [ 1386.602644][ T29] r10:00002000 r9:00001f40 r8:855e67c0 r7:ebd39f20 r6:00000000 r5:85825540 [ 1386.611744][ T29] r4:86805400 [ 1386.622912][ T29] [<81714888>] (netlink_recvmsg) from [<815dee4c>] (sock_recvmsg+0x50/0x78) [ 1386.631637][ T29] r10:ebd39de4 r9:00000000 r8:7eea21c8 r7:00000000 r6:855e67c0 r5:ebd39f20 [ 1387.357394][ T29] r4:81714888 [ 1387.362815][ T29] [<815dedfc>] (sock_recvmsg) from [<815df04c>] (____sys_recvmsg+0x90/0x184) [ 1387.373680][ T29] r7:00000000 r6:855e67c0 r5:7eea21d4 r4:ebd39f20 [ 1387.382921][ T29] [<815defbc>] (____sys_recvmsg) from [<815e0764>] (___sys_recvmsg+0x88/0xbc) [ 1387.391799][ T29] r10:00000129 r9:847a4980 r8:855e67c0 r7:00000000 r6:7eea21d4 r5:ebd39f20 [ 1387.403398][ T29] r4:00000000 [ 1387.411361][ T29] [<815e06dc>] (___sys_recvmsg) from [<815e2a20>] (__sys_recvmsg+0x88/0xdc) [ 1387.422111][ T29] r8:83fc0400 r7:00000000 r6:7eea21d4 r5:83fc0400 r4:00000025 [ 1387.433282][ T29] [<815e2998>] (__sys_recvmsg) from [<815e2a88>] (sys_recvmsg+0x14/0x18) [ 1387.448160][ T29] r8:8020029c r7:00000129 r6:76f84140 r5:00000000 r4:00000000 [ 1387.457616][ T29] [<815e2a74>] (sys_recvmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1387.466985][ T29] Exception stack(0xebd39fa8 to 0xebd39ff0) [ 1387.973098][ T29] 9fa0: 00000000 00000000 00000025 7eea21d4 00000000 00000000 [ 1387.979686][ T29] 9fc0: 00000000 00000000 76f84140 00000129 7eea227c 00000000 013cd7b8 7eea21c8 [ 1387.985086][ T29] 9fe0: 00000001 7eea2158 00000000 76e88590 [ 1387.990328][ T29] INFO: task dhcpcd:2954 is blocked on a mutex likely owned by task kworker/u8:20:5845. [ 1387.996575][ T29] task:kworker/u8:20 state:R running task stack:0 pid:5845 tgid:5845 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 1388.019195][ T29] Workqueue: netns cleanup_net [ 1388.041987][ T29] Call trace: [ 1388.054454][ T29] [<81b0a15c>] (__schedule) from [<81b0b880>] (preempt_schedule+0x4c/0xb4) [ 1388.925713][ T29] r10:e8455bb0 r9:e8455bbc r8:81b07380 r7:81b074b4 r6:e8455ba0 r5:e8455bac [ 1388.934328][ T29] r4:e8455c20 [ 1388.942654][ T29] [<8025a3e8>] (do_softirq) from [<8025a518>] (__local_bh_enable_ip+0xcc/0xd0) [ 1388.951371][ T29] r5:00000001 r4:86b93d40 [ 1388.966575][ T29] [<8025a44c>] (__local_bh_enable_ip) from [<81b148b4>] (_raw_spin_unlock_bh+0x34/0x38) [ 1388.975273][ T29] r5:00000000 r4:85f59400 [ 1389.157021][ T29] [<81b14880>] (_raw_spin_unlock_bh) from [<818e7360>] (addrconf_ifdown+0x150/0x768) [ 1389.162339][ T29] [<818e7210>] (addrconf_ifdown) from [<818edc7c>] (addrconf_notify+0x60/0x8d0) [ 1389.172804][ T29] r10:00000006 r9:00000000 r8:e8455da4 r7:85d24000 r6:00000006 r5:85f59400 [ 1389.183733][ T29] r4:85c74000 [ 1389.193170][ T29] [<818edc1c>] (addrconf_notify) from [<80284310>] (notifier_call_chain+0x8c/0x220) [ 1389.202930][ T29] r10:00000006 r9:00000000 r8:ffffffd1 r7:00000002 r6:82bf1a18 r5:82bf2750 [ 1389.214619][ T29] r4:818edc1c [ 1389.226670][ T29] [<80284284>] (notifier_call_chain) from [<80284588>] (raw_notifier_call_chain+0x20/0x28) [ 1389.233885][ T29] r10:8161f1ec r9:00000000 r8:85c74648 r7:00000002 r6:85d24000 r5:00000006 [ 1389.241772][ T29] r4:e8455da4 [ 1389.283825][ T29] [<80284568>] (raw_notifier_call_chain) from [<81613960>] (call_netdevice_notifiers_info+0x54/0xa0) [ 1389.576757][ T29] [<8161390c>] (call_netdevice_notifiers_info) from [<81620014>] (unregister_netdevice_many_notify+0x600/0xc1c) [ 1389.586851][ T29] r6:00000180 r5:00000000 r4:85c74000 [ 1389.596770][ T29] [<8161fa14>] (unregister_netdevice_many_notify) from [<816214a4>] (default_device_exit_batch+0x304/0x384) [ 1389.606611][ T29] r10:e8455e98 r9:e8455e58 r8:e8455eb8 r7:82e33300 r6:e8455e98 r5:85d24190 [ 1390.635336][ T29] r4:85d24094 [ 1390.643830][ T29] [<816211a0>] (default_device_exit_batch) from [<816010f4>] (ops_undo_list+0x10c/0x238) [ 1390.653240][ T29] r10:00000001 r9:e8455e58 r8:82bdf098 r7:82bdf6ac r6:82bdf098 r5:e8455e98 [ 1390.662369][ T29] r4:e8455eb8 [ 1390.679095][ T29] [<81600fe8>] (ops_undo_list) from [<81603390>] (cleanup_net+0x20c/0x3c4) [ 1390.688047][ T29] r10:85d25000 r9:82bdf07c r8:00000cc0 r7:85d24020 r6:e8455eb8 r5:ffffffd4 [ 1390.697201][ T29] r4:82e332c0 [ 1390.944999][ T29] [<81603184>] (cleanup_net) from [<80276320>] (process_one_work+0x1c8/0x5a0) [ 1390.955378][ T29] r10:8302d215 r9:86b93d40 r8:02000000 r7:83012a00 r6:8302d200 r5:82bdf06c [ 1390.964013][ T29] r4:86a20500 [ 1390.972381][ T29] [<80276158>] (process_one_work) from [<802770e4>] (worker_thread+0x16c/0x318) [ 1390.988452][ T29] r10:83012a00 r9:86a20530 r8:86b93d40 r7:82a03d80 r6:83012a20 r5:83012a00 [ 1390.997948][ T29] r4:86a20500 [ 1391.006683][ T29] [<80276f78>] (worker_thread) from [<8028113c>] (kthread+0x11c/0x154) [ 1391.119914][ T29] r10:00000000 r9:e844de88 r8:86442080 r7:86a20500 r6:80276f78 r5:86b93d40 [ 1391.133348][ T29] r4:86a76840 [ 1391.142877][ T29] [<80281020>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 1391.151954][ T29] Exception stack(0xe8455fb0 to 0xe8455ff8) [ 1391.168576][ T29] 5fa0: 00000000 00000000 00000000 00000000 [ 1391.177513][ T29] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 1391.186812][ T29] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 1391.195845][ T29] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281020 r4:86a76840 [ 1391.205700][ T29] INFO: task syz-executor:6165 blocked for more than 435 seconds. [ 1391.214343][ T29] Tainted: G L syzkaller #0 [ 1391.223411][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1391.233442][ T29] task:syz-executor state:D stack:0 pid:6165 tgid:6165 ppid:1 task_flags:0x400140 flags:0x00000001 [ 1391.252430][ T29] Call trace: [ 1391.465818][ T29] [<81b0a15c>] (__schedule) from [<81b0b5ec>] (schedule+0x2c/0x134) [ 1391.474810][ T29] r10:dfc55dbc r9:dfc55dc4 r8:00000002 r7:60000013 r6:82e34428 r5:83996e40 [ 1391.483581][ T29] r4:83996e40 [ 1391.492430][ T29] [<81b0b5c0>] (schedule) from [<81b0b778>] (schedule_preempt_disabled+0x18/0x24) [ 1391.814217][ T29] r5:83996e40 r4:82e34424 [ 1391.823186][ T29] [<81b0b760>] (schedule_preempt_disabled) from [<81b0e858>] (__mutex_lock.constprop.0+0x530/0xa88) [ 1391.831203][ T29] [<81b0e328>] (__mutex_lock.constprop.0) from [<81b0ee84>] (__mutex_lock_slowpath+0x14/0x18) [ 1391.847821][ T29] r10:00000000 r9:86000080 r8:86834200 r7:00000006 r6:86000000 r5:84df3a80 [ 1392.327615][ T29] r4:86000000 [ 1392.336098][ T29] [<81b0ee70>] (__mutex_lock_slowpath) from [<81b0eec4>] (mutex_lock+0x3c/0x40) [ 1392.345677][ T29] [<81b0ee88>] (mutex_lock) from [<8162e804>] (rtnl_lock+0x14/0x1c) [ 1392.355835][ T29] [<8162e7f0>] (rtnl_lock) from [<8160bc38>] (register_netdevice_notifier_net+0x18/0x38) [ 1392.536800][ T29] [<8160bc20>] (register_netdevice_notifier_net) from [<8168ca84>] (rtnl_net_debug_net_init+0x44/0x48) [ 1392.544170][ T29] r5:84df3a80 r4:86000000 [ 1392.551497][ T29] [<8168ca40>] (rtnl_net_debug_net_init) from [<81601b08>] (ops_init+0xb0/0x100) [ 1392.630245][ T29] r5:84df3a80 r4:82be9a0c [ 1392.638768][ T29] [<81601a58>] (ops_init) from [<81601e78>] (setup_net+0x90/0x170) [ 1392.787717][ T29] r9:86000080 r8:dfc55e90 r7:82bdf06c r6:82bdf098 r5:86000000 r4:82be9a0c [ 1392.796900][ T29] [<81601de8>] (setup_net) from [<81603688>] (copy_net_ns+0x120/0x2b4) [ 1393.280046][ T29] r10:82c7c6f4 r9:82a205c0 r8:82a206c0 r7:82a218e0 r6:00000000 r5:82a205c0 [ 1393.287142][ T29] r4:86000000 [ 1393.294399][ T29] [<81603568>] (copy_net_ns) from [<80281d08>] (create_new_namespaces+0x12c/0x348) [ 1393.304924][ T29] r9:82a205c0 r8:40000000 r7:00000000 r6:83996e40 r5:86abed20 r4:85b4e600 [ 1393.313107][ T29] [<80281bdc>] (create_new_namespaces) from [<80282134>] (unshare_nsproxy_namespaces+0x84/0xa4) [ 1393.327315][ T29] r10:00000151 r9:83996e40 r8:00000000 r7:82a205c0 r6:dfc55f60 r5:85fce780 [ 1393.335306][ T29] r4:40000000 [ 1393.343318][ T29] [<802820b0>] (unshare_nsproxy_namespaces) from [<8024fbb4>] (ksys_unshare+0x154/0x418) [ 1393.357223][ T29] r7:00000000 r6:00000000 r5:83996e40 r4:40000000 [ 1393.364918][ T29] [<8024fa60>] (ksys_unshare) from [<8024fe88>] (sys_unshare+0x10/0x14) [ 1393.504477][ T29] r10:00000151 r9:83996e40 r8:8020029c r7:00000151 r6:00310000 r5:7ea14c80 [ 1393.518325][ T29] r4:00330000 [ 1393.527215][ T29] [<8024fe78>] (sys_unshare) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1393.535328][ T29] Exception stack(0xdfc55fa8 to 0xdfc55ff0) [ 1393.542446][ T29] 5fa0: 00330000 7ea14c80 40000000 00000000 00000000 00000000 [ 1393.556258][ T29] 5fc0: 00330000 7ea14c80 00310000 00000151 7ea14c84 00000008 7ea14e94 00000001 [ 1393.564552][ T29] 5fe0: 00000001 7ea14c24 00012b40 00131c1c [ 1393.573485][ T29] INFO: task syz-executor:6165 is blocked on a mutex likely owned by task kworker/u8:20:5845. [ 1393.587913][ T29] task:kworker/u8:20 state:R running task stack:0 pid:5845 tgid:5845 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 1393.847303][ T29] Workqueue: netns cleanup_net [ 1393.904784][ T29] Call trace: [ 1393.919427][ T29] [<81b0a15c>] (__schedule) from [<81b0b880>] (preempt_schedule+0x4c/0xb4) [ 1393.927647][ T29] r10:85d247e4 r9:85f6d890 r8:00000094 r7:8025a4b8 r6:00000001 r5:86b93d40 [ 1393.936412][ T29] r4:8025a4b8 [ 1393.944251][ T29] [<81b0b834>] (preempt_schedule) from [<8025a4b8>] (__local_bh_enable_ip+0x6c/0xd0) [ 1393.953145][ T29] r7:e8455c20 r6:00000000 r5:00000001 r4:86b93d40 [ 1393.974400][ T29] [<8025a44c>] (__local_bh_enable_ip) from [<81b148b4>] (_raw_spin_unlock_bh+0x34/0x38) [ 1393.995796][ T29] r5:00000000 r4:85cb9400 [ 1394.485020][ T29] [<81b14880>] (_raw_spin_unlock_bh) from [<818e7360>] (addrconf_ifdown+0x150/0x768) [ 1394.573656][ T29] [<818e7210>] (addrconf_ifdown) from [<818edc7c>] (addrconf_notify+0x60/0x8d0) [ 1394.593894][ T29] r10:00000006 r9:00000000 r8:e8455da4 r7:85d24000 r6:00000006 r5:85cb9400 [ 1395.602667][ T29] r4:8510d000 [ 1395.627749][ T29] [<818edc1c>] (addrconf_notify) from [<80284310>] (notifier_call_chain+0x8c/0x220) [ 1395.638201][ T29] r10:00000006 r9:00000000 r8:ffffffd1 r7:00000002 r6:82bf1a18 r5:82bf2750 [ 1395.649356][ T29] r4:818edc1c [ 1395.658364][ T29] [<80284284>] (notifier_call_chain) from [<80284588>] (raw_notifier_call_chain+0x20/0x28) [ 1396.334415][ T29] r10:8161f1ec r9:00000000 r8:8510d648 r7:00000002 r6:85d24000 r5:00000006 [ 1396.339593][ T29] r4:e8455da4 [ 1396.345231][ T29] [<80284568>] (raw_notifier_call_chain) from [<81613960>] (call_netdevice_notifiers_info+0x54/0xa0) [ 1396.355223][ T29] [<8161390c>] (call_netdevice_notifiers_info) from [<81620014>] (unregister_netdevice_many_notify+0x600/0xc1c) [ 1396.372972][ T29] r6:00000180 r5:00000000 r4:8510d000 [ 1396.383527][ T29] [<8161fa14>] (unregister_netdevice_many_notify) from [<816214a4>] (default_device_exit_batch+0x304/0x384) [ 1397.535788][ T29] r10:e8455e98 r9:e8455e58 r8:e8455eb8 r7:82e33300 r6:e8455e98 r5:85d24190 [ 1397.544310][ T29] r4:85d24094 [ 1397.553118][ T29] [<816211a0>] (default_device_exit_batch) from [<816010f4>] (ops_undo_list+0x10c/0x238) [ 1397.561855][ T29] r10:00000001 r9:e8455e58 r8:82bdf098 r7:82bdf6ac r6:82bdf098 r5:e8455e98 [ 1397.577546][ T29] r4:e8455eb8 [ 1397.586244][ T29] [<81600fe8>] (ops_undo_list) from [<81603390>] (cleanup_net+0x20c/0x3c4) [ 1397.595326][ T29] r10:85d25000 r9:82bdf07c r8:00000cc0 r7:85d24020 r6:e8455eb8 r5:ffffffd4 [ 1397.603758][ T29] r4:82e332c0 [ 1397.612470][ T29] [<81603184>] (cleanup_net) from [<80276320>] (process_one_work+0x1c8/0x5a0) [ 1397.612687][ T29] r10:8302d215 r9:86b93d40 r8:02000000 r7:83012a00 r6:8302d200 r5:82bdf06c [ 1397.612746][ T29] r4:86a20500 [ 1397.612766][ T29] [<80276158>] (process_one_work) from [<802770e4>] (worker_thread+0x16c/0x318) [ 1397.612831][ T29] r10:83012a00 r9:86a20530 r8:86b93d40 r7:82a03d80 r6:83012a20 r5:83012a00 [ 1397.612851][ T29] r4:86a20500 [ 1397.612867][ T29] [<80276f78>] (worker_thread) from [<8028113c>] (kthread+0x11c/0x154) [ 1397.612931][ T29] r10:00000000 r9:e844de88 r8:86442080 r7:86a20500 r6:80276f78 r5:86b93d40 [ 1397.612952][ T29] r4:86a76840 [ 1397.612967][ T29] [<80281020>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 1397.613035][ T29] Exception stack(0xe8455fb0 to 0xe8455ff8) [ 1397.613070][ T29] 5fa0: 00000000 00000000 00000000 00000000 [ 1397.613103][ T29] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 1397.613130][ T29] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 1397.613162][ T29] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281020 r4:86a76840 [ 1397.613431][ T29] INFO: task syz.1.518:6235 blocked for more than 442 seconds. [ 1397.613491][ T29] Tainted: G L syzkaller #0 [ 1397.613569][ T29] Blocked by coredump. [ 1397.613597][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1397.613614][ T29] task:syz.1.518 state:D stack:0 pid:6235 tgid:6234 ppid:3100 task_flags:0x40054c flags:0x00000004 [ 1397.613688][ T29] Call trace: [ 1397.613718][ T29] [<81b0a15c>] (__schedule) from [<81b0b5ec>] (schedule+0x2c/0x134) [ 1397.613794][ T29] r10:dfa39d84 r9:dfa39d8c r8:00000002 r7:600d0013 r6:82e34428 r5:868c6200 [ 1397.613817][ T29] r4:868c6200 [ 1397.613835][ T29] [<81b0b5c0>] (schedule) from [<81b0b778>] (schedule_preempt_disabled+0x18/0x24) [ 1397.613891][ T29] r5:868c6200 r4:82e34424 [ 1397.613908][ T29] [<81b0b760>] (schedule_preempt_disabled) from [<81b0e858>] (__mutex_lock.constprop.0+0x530/0xa88) [ 1397.613964][ T29] [<81b0e328>] (__mutex_lock.constprop.0) from [<81b0ee84>] (__mutex_lock_slowpath+0x14/0x18) [ 1397.614042][ T29] r10:8382c540 r9:00000000 r8:830ecb50 r7:83e8d0f0 r6:834217f8 r5:0c0e001b [ 1397.614063][ T29] r4:85125000 [ 1397.614080][ T29] [<81b0ee70>] (__mutex_lock_slowpath) from [<81b0eec4>] (mutex_lock+0x3c/0x40) [ 1397.614131][ T29] [<81b0ee88>] (mutex_lock) from [<8162e804>] (rtnl_lock+0x14/0x1c) [ 1397.614188][ T29] [<8162e7f0>] (rtnl_lock) from [<80da7eec>] (tun_chr_close+0x14/0xa8) [ 1397.614246][ T29] [<80da7ed8>] (tun_chr_close) from [<80582e70>] (__fput+0xd8/0x2f4) [ 1397.614308][ T29] r5:0c0e001b r4:83887700 [ 1397.614327][ T29] [<80582d98>] (__fput) from [<80583120>] (____fput+0x14/0x18) [ 1397.614393][ T29] r9:00000000 r8:868c6ad4 r7:82c7c6ac r6:868c6200 r5:868c6aa0 r4:84de13d8 [ 1397.614413][ T29] [<8058310c>] (____fput) from [<8027d190>] (task_work_run+0x8c/0xb4) [ 1397.614473][ T29] [<8027d104>] (task_work_run) from [<80257564>] (do_exit+0x2ac/0xae4) [ 1397.614544][ T29] r9:00000000 r8:dfa39e90 r7:868c6ad0 r6:851c100c r5:868c6200 r4:851c0f00 [ 1397.614563][ T29] [<802572b8>] (do_exit) from [<80257f68>] (do_group_exit+0x40/0x8c) [ 1397.614611][ T29] r7:00000126 [ 1397.614629][ T29] [<80257f28>] (do_group_exit) from [<80268f90>] (get_signal+0xa8c/0xab4) [ 1397.614704][ T29] r7:00000126 r4:868c6200 [ 1397.614723][ T29] [<80268504>] (get_signal) from [<8022a648>] (do_work_pending+0x11c/0x4e8) [ 1397.614794][ T29] r10:00000126 r9:868c6200 r8:ffffffed r7:00000126 r6:8020029c r5:dfa39fb0 [ 1397.614813][ T29] r4:868c6200 [ 1397.614831][ T29] [<8022a52c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 1397.614882][ T29] Exception stack(0xdfa39fb0 to 0xdfa39ff8) [ 1397.614910][ T29] 9fa0: ffffffed 00000107 00000001 200002c0 [ 1397.614943][ T29] 9fc0: 00000010 00000000 00346318 00000126 003462d8 00000000 00000001 76f550dc [ 1397.614974][ T29] 9fe0: 76f54e88 76f54e78 00018e58 001307a0 60000010 00000003 [ 1397.615021][ T29] r10:00000126 r9:868c6200 r8:8020029c r7:00000126 r6:00346318 r5:00000000 [ 1397.615046][ T29] r4:00000010 [ 1397.615380][ T29] INFO: task syz.1.518:6235 is blocked on a mutex likely owned by task kworker/u8:20:5845. [ 1397.615416][ T29] task:kworker/u8:20 state:R running task stack:0 pid:5845 tgid:5845 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 1397.615489][ T29] Workqueue: netns cleanup_net [ 1397.615537][ T29] Call trace: [ 1397.615563][ T29] [<81b0a15c>] (__schedule) from [<81b0b880>] (preempt_schedule+0x4c/0xb4) [ 1397.615628][ T29] r10:00000100 r9:85cb9530 r8:85cb952c r7:8025a4b8 r6:00000001 r5:86b93d40 [ 1397.615648][ T29] r4:8025a4b8 [ 1397.615664][ T29] [<81b0b834>] (preempt_schedule) from [<8025a4b8>] (__local_bh_enable_ip+0x6c/0xd0) [ 1397.615723][ T29] r7:85cb9508 r6:85cb9400 r5:00000001 r4:86b93d40 [ 1397.615740][ T29] [<8025a44c>] (__local_bh_enable_ip) from [<81b148b4>] (_raw_spin_unlock_bh+0x34/0x38) [ 1397.615798][ T29] r5:00000000 r4:85cb9400 [ 1397.615812][ T29] [<81b14880>] (_raw_spin_unlock_bh) from [<8191accc>] (ipv6_mc_destroy_dev+0xa0/0x1dc) [ 1397.615863][ T29] [<8191ac2c>] (ipv6_mc_destroy_dev) from [<818e7890>] (addrconf_ifdown+0x680/0x768) [ 1397.615923][ T29] r9:85cb9544 r8:85cb9400 r7:e8455c20 r6:85d24000 r5:00000000 r4:85cb9400 [ 1397.615943][ T29] [<818e7210>] (addrconf_ifdown) from [<818edc7c>] (addrconf_notify+0x60/0x8d0) [ 1397.616013][ T29] r10:00000006 r9:00000000 r8:e8455da4 r7:85d24000 r6:00000006 r5:85cb9400 [ 1397.616035][ T29] r4:8510d000 [ 1397.616053][ T29] [<818edc1c>] (addrconf_notify) from [<80284310>] (notifier_call_chain+0x8c/0x220) [ 1397.616124][ T29] r10:00000006 r9:00000000 r8:ffffffd1 r7:00000002 r6:82bf1a18 r5:82bf2750 [ 1397.616144][ T29] r4:818edc1c [ 1397.616159][ T29] [<80284284>] (notifier_call_chain) from [<80284588>] (raw_notifier_call_chain+0x20/0x28) [ 1397.616224][ T29] r10:8161f1ec r9:00000000 r8:8510d648 r7:00000002 r6:85d24000 r5:00000006 [ 1397.616245][ T29] r4:e8455da4 [ 1397.616261][ T29] [<80284568>] (raw_notifier_call_chain) from [<81613960>] (call_netdevice_notifiers_info+0x54/0xa0) [ 1397.616324][ T29] [<8161390c>] (call_netdevice_notifiers_info) from [<81620014>] (unregister_netdevice_many_notify+0x600/0xc1c) [ 1397.616382][ T29] r6:00000180 r5:00000000 r4:8510d000 [ 1397.616402][ T29] [<8161fa14>] (unregister_netdevice_many_notify) from [<816214a4>] (default_device_exit_batch+0x304/0x384) [ 1397.616462][ T29] r10:e8455e98 r9:e8455e58 r8:e8455eb8 r7:82e33300 r6:e8455e98 r5:85d24190 [ 1397.616486][ T29] r4:85d24094 [ 1397.616503][ T29] [<816211a0>] (default_device_exit_batch) from [<816010f4>] (ops_undo_list+0x10c/0x238) [ 1397.616567][ T29] r10:00000001 r9:e8455e58 r8:82bdf098 r7:82bdf6ac r6:82bdf098 r5:e8455e98 [ 1397.616586][ T29] r4:e8455eb8 [ 1397.616603][ T29] [<81600fe8>] (ops_undo_list) from [<81603390>] (cleanup_net+0x20c/0x3c4) [ 1397.616668][ T29] r10:85d25000 r9:82bdf07c r8:00000cc0 r7:85d24020 r6:e8455eb8 r5:ffffffd4 [ 1397.616686][ T29] r4:82e332c0 [ 1397.616730][ T29] [<81603184>] (cleanup_net) from [<80276320>] (process_one_work+0x1c8/0x5a0) [ 1397.616801][ T29] r10:8302d215 r9:86b93d40 r8:02000000 r7:83012a00 r6:8302d200 r5:82bdf06c [ 1397.616820][ T29] r4:86a20500 [ 1397.616835][ T29] [<80276158>] (process_one_work) from [<802770e4>] (worker_thread+0x16c/0x318) [ 1397.616938][ T29] r10:83012a00 r9:86a20530 r8:86b93d40 r7:82a03d80 r6:83012a20 r5:83012a00 [ 1397.616969][ T29] r4:86a20500 [ 1397.617001][ T29] [<80276f78>] (worker_thread) from [<8028113c>] (kthread+0x11c/0x154) [ 1397.617089][ T29] r10:00000000 r9:e844de88 r8:86442080 r7:86a20500 r6:80276f78 r5:86b93d40 [ 1397.617117][ T29] r4:86a76840 [ 1397.617138][ T29] [<80281020>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 1397.617190][ T29] Exception stack(0xe8455fb0 to 0xe8455ff8) [ 1397.617237][ T29] 5fa0: 00000000 00000000 00000000 00000000 [ 1397.617271][ T29] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 1397.617300][ T29] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 1397.617333][ T29] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281020 r4:86a76840 [ 1397.617390][ T29] INFO: task syz-executor:6238 blocked for more than 442 seconds. [ 1397.617438][ T29] Tainted: G L syzkaller #0 [ 1397.617463][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1397.617480][ T29] task:syz-executor state:D stack:0 pid:6238 tgid:6238 ppid:1 task_flags:0x400140 flags:0x00000001 [ 1397.617550][ T29] Call trace: [ 1397.617597][ T29] [<81b0a15c>] (__schedule) from [<81b0b5ec>] (schedule+0x2c/0x134) [ 1397.617713][ T29] r10:dfa35bd4 r9:dfa35bdc r8:00000002 r7:60000013 r6:82e34428 r5:8478e200 [ 1397.617734][ T29] r4:8478e200 [ 1397.617752][ T29] [<81b0b5c0>] (schedule) from [<81b0b778>] (schedule_preempt_disabled+0x18/0x24) [ 1397.617807][ T29] r5:8478e200 r4:82e34424 [ 1397.617822][ T29] [<81b0b760>] (schedule_preempt_disabled) from [<81b0e858>] (__mutex_lock.constprop.0+0x530/0xa88) [ 1397.617877][ T29] [<81b0e328>] (__mutex_lock.constprop.0) from [<81b0ee84>] (__mutex_lock_slowpath+0x14/0x18) [ 1397.617940][ T29] r10:ffffffff r9:ffffffff r8:86295d80 r7:dfa35d30 r6:81e79a1c r5:84ec86c0 [ 1397.617963][ T29] r4:00000000 [ 1397.617978][ T29] [<81b0ee70>] (__mutex_lock_slowpath) from [<81b0eec4>] (mutex_lock+0x3c/0x40) [ 1397.618041][ T29] [<81b0ee88>] (mutex_lock) from [<8162e804>] (rtnl_lock+0x14/0x1c) [ 1397.618098][ T29] [<8162e7f0>] (rtnl_lock) from [<81833240>] (inet_rtm_newaddr+0xf4/0x51c) [ 1397.618156][ T29] [<8183314c>] (inet_rtm_newaddr) from [<81630e44>] (rtnetlink_rcv_msg+0x2dc/0x340) [ 1397.618225][ T29] r10:00000000 r9:00000000 r8:82e34420 r7:86295d80 r6:00000002 r5:8183314c [ 1397.618248][ T29] r4:84ec86c0 [ 1397.618264][ T29] [<81630b68>] (rtnetlink_rcv_msg) from [<81716a38>] (netlink_rcv_skb+0xc0/0x120) [ 1397.618334][ T29] r10:86806d84 r9:82e33300 r8:86295d80 r7:84ec86c0 r6:81630b68 r5:86295d80 [ 1397.618356][ T29] r4:00000000 [ 1397.618372][ T29] [<81716978>] (netlink_rcv_skb) from [<8162f9a4>] (rtnetlink_rcv+0x18/0x1c) [ 1397.618453][ T29] r7:83847500 r6:00000028 r5:83810064 r4:83810000 [ 1397.618482][ T29] [<8162f98c>] (rtnetlink_rcv) from [<81716204>] (netlink_unicast+0x270/0x380) [ 1397.618544][ T29] [<81715f94>] (netlink_unicast) from [<817164dc>] (netlink_sendmsg+0x1c8/0x444) [ 1397.618614][ T29] r10:00000000 r9:00000000 r8:00000000 r7:86806c00 r6:00000028 r5:86295d80 [ 1397.618639][ T29] r4:dfa35e98 [ 1397.618658][ T29] [<81716314>] (netlink_sendmsg) from [<815df278>] (__sock_sendmsg+0x44/0x78) [ 1397.618727][ T29] r10:00000122 r9:84de0c00 r8:854e3bc0 r7:7eca8a44 r6:854e3bc0 r5:dfa35e98 [ 1397.618750][ T29] r4:00000000 [ 1397.618766][ T29] [<815df234>] (__sock_sendmsg) from [<815e2034>] (__sys_sendto+0x110/0x160) [ 1397.618825][ T29] r7:7eca8a44 r6:84de0c00 r5:00000000 r4:00000000 [ 1397.618861][ T29] [<815e1f24>] (__sys_sendto) from [<815e20a0>] (sys_sendto+0x1c/0x24) [ 1397.618932][ T29] r9:8478e200 r8:8020029c r7:00000122 r6:00000028 r5:0000000c r4:7eca8a44 [ 1397.618949][ T29] [<815e2084>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1397.619005][ T29] Exception stack(0xdfa35fa8 to 0xdfa35ff0) [ 1397.619040][ T29] 5fa0: 7eca8a44 0000000c 00000003 00e74218 00000028 00000000 [ 1397.619105][ T29] 5fc0: 7eca8a44 0000000c 00000028 00000122 00000004 00000001 00e74218 00e74230 [ 1397.619137][ T29] 5fe0: 00000001 7eca89d8 0010b964 0010b9f4 [ 1397.619404][ T29] INFO: task syz-executor:6238 is blocked on a mutex likely owned by task kworker/u8:20:5845. [ 1397.619465][ T29] task:kworker/u8:20 state:R running task stack:0 pid:5845 tgid:5845 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 1397.619535][ T29] Workqueue: netns cleanup_net [ 1397.619599][ T29] Call trace: [ 1397.619643][ T29] [<81b0a15c>] (__schedule) from [<81b0b880>] (preempt_schedule+0x4c/0xb4) [ 1397.619718][ T29] r10:00000100 r9:85cb9530 r8:85cb952c r7:8025a4b8 r6:00000001 r5:86b93d40 [ 1397.619769][ T29] r4:8025a4b8 [ 1397.619791][ T29] [<81b0b834>] (preempt_schedule) from [<8025a4b8>] (__local_bh_enable_ip+0x6c/0xd0) [ 1397.619868][ T29] r7:85cb9508 r6:85cb9400 r5:00000001 r4:86b93d40 [ 1397.619891][ T29] [<8025a44c>] (__local_bh_enable_ip) from [<81b148b4>] (_raw_spin_unlock_bh+0x34/0x38) [ 1397.619955][ T29] r5:00000000 r4:85cb9400 [ 1397.619974][ T29] [<81b14880>] (_raw_spin_unlock_bh) from [<8191accc>] (ipv6_mc_destroy_dev+0xa0/0x1dc) [ 1397.620045][ T29] [<8191ac2c>] (ipv6_mc_destroy_dev) from [<818e7890>] (addrconf_ifdown+0x680/0x768) [ 1397.620916][ T29] r9:85cb9544 r8:85cb9400 r7:e8455c20 r6:85d24000 r5:00000000 r4:85cb9400 [ 1397.656433][ T29] [<818e7210>] (addrconf_ifdown) from [<818edc7c>] (addrconf_notify+0x60/0x8d0) [ 1397.656619][ T29] r10:00000006 r9:00000000 r8:e8455da4 r7:85d24000 r6:00000006 r5:85cb9400 [ 1397.656649][ T29] r4:8510d000 [ 1397.656665][ T29] [<818edc1c>] (addrconf_notify) from [<80284310>] (notifier_call_chain+0x8c/0x220) [ 1397.656793][ T29] r10:00000006 r9:00000000 r8:ffffffd1 r7:00000002 r6:82bf1a18 r5:82bf2750 [ 1397.656832][ T29] r4:818edc1c [ 1397.656862][ T29] [<80284284>] (notifier_call_chain) from [<80284588>] (raw_notifier_call_chain+0x20/0x28) [ 1397.656941][ T29] r10:8161f1ec r9:00000000 r8:8510d648 r7:00000002 r6:85d24000 r5:00000006 [ 1397.656965][ T29] r4:e8455da4 [ 1397.656998][ T29] [<80284568>] (raw_notifier_call_chain) from [<81613960>] (call_netdevice_notifiers_info+0x54/0xa0) [ 1397.657069][ T29] [<8161390c>] (call_netdevice_notifiers_info) from [<81620014>] (unregister_netdevice_many_notify+0x600/0xc1c) [ 1397.657129][ T29] r6:00000180 r5:00000000 r4:8510d000 [ 1397.657146][ T29] [<8161fa14>] (unregister_netdevice_many_notify) from [<816214a4>] (default_device_exit_batch+0x304/0x384) [ 1397.657203][ T29] r10:e8455e98 r9:e8455e58 r8:e8455eb8 r7:82e33300 r6:e8455e98 r5:85d24190 [ 1397.657221][ T29] r4:85d24094 [ 1397.657236][ T29] [<816211a0>] (default_device_exit_batch) from [<816010f4>] (ops_undo_list+0x10c/0x238) [ 1397.657299][ T29] r10:00000001 r9:e8455e58 r8:82bdf098 r7:82bdf6ac r6:82bdf098 r5:e8455e98 [ 1397.657316][ T29] r4:e8455eb8 [ 1397.657330][ T29] [<81600fe8>] (ops_undo_list) from [<81603390>] (cleanup_net+0x20c/0x3c4) [ 1397.657389][ T29] r10:85d25000 r9:82bdf07c r8:00000cc0 r7:85d24020 r6:e8455eb8 r5:ffffffd4 [ 1397.657406][ T29] r4:82e332c0 [ 1397.657421][ T29] [<81603184>] (cleanup_net) from [<80276320>] (process_one_work+0x1c8/0x5a0) [ 1397.657481][ T29] r10:8302d215 r9:86b93d40 r8:02000000 r7:83012a00 r6:8302d200 r5:82bdf06c [ 1397.657499][ T29] r4:86a20500 [ 1397.657514][ T29] [<80276158>] (process_one_work) from [<802770e4>] (worker_thread+0x16c/0x318) [ 1397.657572][ T29] r10:83012a00 r9:86a20530 r8:86b93d40 r7:82a03d80 r6:83012a20 r5:83012a00 [ 1397.657591][ T29] r4:86a20500 [ 1397.657606][ T29] [<80276f78>] (worker_thread) from [<8028113c>] (kthread+0x11c/0x154) [ 1397.657701][ T29] r10:00000000 r9:e844de88 r8:86442080 r7:86a20500 r6:80276f78 r5:86b93d40 [ 1397.657720][ T29] r4:86a76840 [ 1397.657735][ T29] [<80281020>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 1397.657781][ T29] Exception stack(0xe8455fb0 to 0xe8455ff8) [ 1397.657815][ T29] 5fa0: 00000000 00000000 00000000 00000000 [ 1397.657846][ T29] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 1397.657891][ T29] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 1397.657929][ T29] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281020 r4:86a76840 [ 1397.658788][ T29] NMI backtrace for cpu 1 [ 1397.659296][ T29] CPU: 1 UID: 0 PID: 29 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 1397.659462][ T29] Tainted: [L]=SOFTLOCKUP [ 1397.659506][ T29] Hardware name: ARM-Versatile Express [ 1397.659578][ T29] Call trace: [ 1397.659630][ T29] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1397.659701][ T29] r7:60070093 r6:60070093 r5:8231c74c r4:00000000 [ 1397.659718][ T29] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 1397.659770][ T29] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 1397.659825][ T29] r7:00000000 r6:00070013 r5:00000001 r4:00000001 [ 1397.659839][ T29] [<8021e360>] (dump_stack) from [<81af3a34>] (nmi_cpu_backtrace+0x150/0x170) [ 1397.659891][ T29] [<81af38e4>] (nmi_cpu_backtrace) from [<81af3b84>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8) [ 1397.659942][ T29] r7:00000001 r6:82a0b550 r5:82a19fb4 r4:ffffffff [ 1397.659958][ T29] [<81af3a54>] (nmi_trigger_cpumask_backtrace) from [<8022f104>] (arch_trigger_cpumask_backtrace+0x18/0x1c) [ 1397.660037][ T29] r9:82a0b6d8 r8:00000004 r7:00000048 r6:82cc2de4 r5:00007f38 r4:00000048 [ 1397.660055][ T29] [<8022f0ec>] (arch_trigger_cpumask_backtrace) from [<81afb6d0>] (sys_info+0x68/0xa8) [ 1397.660107][ T29] [<81afb668>] (sys_info) from [<80385c90>] (watchdog+0x3a0/0x84c) [ 1397.660157][ T29] r5:00007f38 r4:0000000a [ 1397.660173][ T29] [<803858f0>] (watchdog) from [<8028113c>] (kthread+0x11c/0x154) [ 1397.660231][ T29] r10:00000000 r9:df819e58 r8:83352680 r7:00000000 r6:803858f0 r5:833a0c40 [ 1397.660251][ T29] r4:831f7480 [ 1397.660265][ T29] [<80281020>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 1397.660311][ T29] Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) [ 1397.660338][ T29] 5fa0: 00000000 00000000 00000000 00000000 [ 1397.660365][ T29] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 1397.660391][ T29] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 1397.660422][ T29] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281020 r4:831f7480 [ 1397.668312][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1397.668895][ C0] NMI backtrace for cpu 0 [ 1397.669080][ C0] CPU: 0 UID: 0 PID: 5841 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT [ 1397.669141][ C0] Tainted: [L]=SOFTLOCKUP [ 1397.669155][ C0] Hardware name: ARM-Versatile Express [ 1397.669181][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1397.669397][ C0] PC is at __csum_ipv6_magic+0x0/0xc8 [ 1397.669467][ C0] LR is at synproxy_send_tcp_ipv6+0x78/0x24c [ 1397.669521][ C0] pc : [<81ad3ec0>] lr : [<81776af8>] psr: 40070013 [ 1397.669554][ C0] sp : df801a98 ip : df801b08 fp : df801b3c [ 1397.669587][ C0] r10: 85d25000 r9 : 862d0c68 r8 : 862d0c58 [ 1397.669619][ C0] r7 : 00000000 r6 : 86aa5500 r5 : 862d0c48 r4 : 861d5300 [ 1397.669659][ C0] r3 : 06000000 r2 : 14000000 r1 : 862d0c58 r0 : 862d0c48 [ 1397.669764][ C0] Flags: nZcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 1397.669834][ C0] Control: 30c5387d Table: 84fbb5c0 DAC: fffffffd [ 1397.669889][ C0] Call trace: frame pointer underflow [ 1397.669943][ C0] [<81776a80>] (synproxy_send_tcp_ipv6) from [<817776ac>] (synproxy_send_client_synack_ipv6+0x1a0/0x1f8) [ 1397.670022][ C0] r10:85d44100 r9:85d44128 r8:df801ba8 r7:86295b40 r6:862d0c68 r5:00000005 [ 1397.670042][ C0] r4:861d5300 [ 1397.670056][ C0] [<8177750c>] (synproxy_send_client_synack_ipv6) from [<817b2f54>] (nft_synproxy_do_eval+0x344/0x37c) [ 1397.670116][ C0] r10:81e766e8 r9:85d44128 r8:84df05c0 r7:85bcf3d8 r6:df801c74 r5:85d25000 [ 1397.670132][ C0] r4:86295b40 [ 1397.670144][ C0] [<817b2c10>] (nft_synproxy_do_eval) from [<817b2fb8>] (nft_synproxy_eval+0x14/0x18) [ 1397.670212][ C0] r9:df801d10 r8:85bcf3c8 r7:81e7698c r6:81e766a8 r5:85bcf3e0 r4:85bcf3d0 [ 1397.670233][ C0] [<817b2fa4>] (nft_synproxy_eval) from [<8177a900>] (nft_do_chain+0x130/0x570) [ 1397.670278][ C0] [<8177a7d0>] (nft_do_chain) from [<81794c94>] (nft_do_chain_inet+0x5c/0x150) [ 1397.670337][ C0] r10:81e70bd6 r9:860622a0 r8:df801d74 r7:86295b40 r6:86062280 r5:8614c700 [ 1397.670354][ C0] r4:00000000 [ 1397.670367][ C0] [<81794c38>] (nft_do_chain_inet) from [<81740764>] (nf_hook_slow+0x44/0x104) [ 1397.670420][ C0] r5:00000004 r4:00000001 [ 1397.670433][ C0] [<81740720>] (nf_hook_slow) from [<818e0b78>] (ip6_input+0xb8/0xd8) [ 1397.670489][ C0] r10:dddd2460 r9:dddd2348 r8:00000040 r7:00000000 r6:85d25000 r5:85148000 [ 1397.670507][ C0] r4:86295b40 r3:00000000 [ 1397.670520][ C0] [<818e0ac0>] (ip6_input) from [<818dffd4>] (ipv6_rcv+0x154/0x15c) [ 1397.670613][ C0] r6:85d25000 r5:85148000 r4:86295b40 [ 1397.670634][ C0] [<818dfe80>] (ipv6_rcv) from [<81619d34>] (__netif_receive_skb_one_core+0x60/0x84) [ 1397.670691][ C0] r6:00000000 r5:818dfe80 r4:85148000 [ 1397.670706][ C0] [<81619cd4>] (__netif_receive_skb_one_core) from [<81619da0>] (__netif_receive_skb+0x18/0x5c) [ 1397.670756][ C0] r5:00000026 r4:86295b40 [ 1397.670770][ C0] [<81619d88>] (__netif_receive_skb) from [<8161a0fc>] (process_backlog+0xa0/0x17c) [ 1397.670818][ C0] r5:00000026 r4:86295b40 [ 1397.670830][ C0] [<8161a05c>] (process_backlog) from [<8161a8e8>] (__napi_poll+0x34/0x270) [ 1397.670886][ C0] r10:df801ec8 r9:00000000 r8:0000012c r7:00000040 r6:df801ec3 r5:dddd2460 [ 1397.670903][ C0] r4:00000001 [ 1397.670915][ C0] [<8161a8b4>] (__napi_poll) from [<8161ae80>] (net_rx_action+0x35c/0x3e8) [ 1397.670969][ C0] r9:00000000 r8:0000012c r7:dddd2460 r6:dddd2464 r5:dddd2340 r4:ffffffff [ 1397.671006][ C0] [<8161ab24>] (net_rx_action) from [<80259dc0>] (handle_softirqs+0x160/0x4f4) [ 1397.671074][ C0] r10:868c8c40 r9:00000208 r8:00000102 r7:0000000c r6:00000004 r5:00000003 [ 1397.671091][ C0] r4:82a0308c [ 1397.671103][ C0] [<80259c60>] (handle_softirqs) from [<802012f0>] (__do_softirq+0x14/0x18) [ 1397.671159][ C0] r10:81d9f0e8 r9:815f0d9c r8:00000820 r7:00000000 r6:830e4c00 r5:00000002 [ 1397.671175][ C0] r4:60070013 [ 1397.671188][ C0] [<802012dc>] (__do_softirq) from [<802272a0>] (____do_softirq+0x10/0x14) [ 1397.671232][ C0] [<80227290>] (____do_softirq) from [<81ad367c>] (call_with_stack+0x1c/0x20) [ 1397.671274][ C0] [<81ad3660>] (call_with_stack) from [<802272dc>] (do_softirq_own_stack+0x38/0x3c) [ 1397.671313][ C0] [<802272a4>] (do_softirq_own_stack) from [<8025a444>] (do_softirq+0x5c/0x64) [ 1397.671353][ C0] [<8025a3e8>] (do_softirq) from [<8025a518>] (__local_bh_enable_ip+0xcc/0xd0) [ 1397.671397][ C0] r5:00000002 r4:868c8c40 [ 1397.671412][ C0] [<8025a44c>] (__local_bh_enable_ip) from [<815f0e30>] (__alloc_skb+0x2b8/0x2c0) [ 1397.671464][ C0] r5:ffffffff r4:dddd0708 [ 1397.671478][ C0] [<815f0b78>] (__alloc_skb) from [<80ec6534>] (nsim_dev_trap_report_work+0xf0/0x438) [ 1397.671533][ C0] r9:86040680 r8:00000000 r7:860406c4 r6:00000030 r5:86040630 r4:85869198 [ 1397.671548][ C0] [<80ec6444>] (nsim_dev_trap_report_work) from [<80276320>] (process_one_work+0x1c8/0x5a0) [ 1397.671603][ C0] r10:83029c05 r9:868c8c40 r8:02000000 r7:83012a00 r6:83029c00 r5:86040680 [ 1397.671621][ C0] r4:86199e00 [ 1397.671633][ C0] [<80276158>] (process_one_work) from [<802770e4>] (worker_thread+0x16c/0x318) [ 1397.671684][ C0] r10:83012a00 r9:86199e30 r8:868c8c40 r7:82a03d80 r6:83012a20 r5:83012a00 [ 1397.671700][ C0] r4:86199e00 [ 1397.671713][ C0] [<80276f78>] (worker_thread) from [<8028113c>] (kthread+0x11c/0x154) [ 1397.671766][ C0] r10:00000000 r9:e8435e88 r8:86442680 r7:86199e00 r6:80276f78 r5:868c8c40 [ 1397.671784][ C0] r4:85f1e340 [ 1397.671796][ C0] [<80281020>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 1397.671833][ C0] Exception stack(0xe8445fb0 to 0xe8445ff8) [ 1397.671859][ C0] 5fa0: 00000000 00000000 00000000 00000000 [ 1397.671887][ C0] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 1397.671911][ C0] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 1397.671938][ C0] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281020 r4:85f1e340 [ 1397.688057][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1397.753370][ T29] CPU: 1 UID: 0 PID: 29 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 1397.754312][ T29] Tainted: [L]=SOFTLOCKUP [ 1397.754586][ T29] Hardware name: ARM-Versatile Express [ 1397.754809][ T29] Call trace: [ 1397.755126][ T29] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1397.755549][ T29] r7:82a1e778 r6:00000000 r5:8231c74c r4:00000001 [ 1397.755802][ T29] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 1397.756110][ T29] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 1397.756438][ T29] r7:82a1e778 r6:00000000 r5:833a0c40 r4:82c7bd3c [ 1397.756670][ T29] [<8021e360>] (dump_stack) from [<8020260c>] (vpanic+0x114/0x320) [ 1397.757019][ T29] [<802024f8>] (vpanic) from [<8020284c>] (trace_suspend_resume+0x0/0x104) [ 1397.757345][ T29] r7:00000048 [ 1397.757503][ T29] [<80202818>] (panic) from [<80385ca8>] (watchdog+0x3b8/0x84c) [ 1397.757894][ T29] r3:00000001 r2:00000000 r1:00000000 r0:8231d448 [ 1397.758153][ T29] [<803858f0>] (watchdog) from [<8028113c>] (kthread+0x11c/0x154) [ 1397.758476][ T29] r10:00000000 r9:df819e58 r8:83352680 r7:00000000 r6:803858f0 r5:833a0c40 [ 1397.758784][ T29] r4:831f7480 [ 1397.758936][ T29] [<80281020>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 1397.759249][ T29] Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) [ 1397.759489][ T29] 5fa0: 00000000 00000000 00000000 00000000 [ 1397.759819][ T29] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 1397.760198][ T29] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 1397.760486][ T29] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281020 r4:831f7480 [ 1397.763289][ T29] Rebooting in 86400 seconds..