last executing test programs: 2.470687673s ago: executing program 0 (id=1): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x101, 0x2, 0x10000, 0x800004, 0x1001, 0x4, 0x4, 0xffff, 0x3, 0x104, 0xffffffff, 0x1001, 0xffffffff, 0x800800, 0xa237, 0x7fffffff, 0xded9, 0xc7d5, 0x7, 0x40000003, 0x89, 0xcaa7, 0x0, 0x5ca3, 0xb, 0x3, 0x3c, 0xb, 0x6, 0xefcb, 0x8]}) 1.980094519s ago: executing program 0 (id=3): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x28502, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8902}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) ptrace$getregs(0xe, 0xffffffffffffffff, 0xc, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r9, &(0x7f00000001c0)=""/200, 0xc8, 0x0) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000140), &(0x7f0000000080)=0x4) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x4, 0xfffffffffffffffd) vmsplice(r11, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000018c0)='GPL\x00'}, 0x94) 1.773338949s ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 902.426763ms ago: executing program 1 (id=4): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x80800, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000580)=0x3) 617.828788ms ago: executing program 1 (id=5): ioprio_set$uid(0x3, 0x0, 0x4000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x3}]) 171.721901ms ago: executing program 1 (id=6): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0x90}}, 0x0) 0s ago: executing program 1 (id=7): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) setuid(0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde']}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x8, 0x4, 0x8000000, 0x5]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x3) kernel console output (not intermixed with test programs): [ 53.752444][ T31] audit: type=1400 audit(53.660:56): avc: denied { read write } for pid=3113 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.753671][ T31] audit: type=1400 audit(53.660:57): avc: denied { open } for pid=3113 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:28817' (ED25519) to the list of known hosts. [ 65.582172][ T31] audit: type=1400 audit(65.480:58): avc: denied { name_bind } for pid=3116 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 67.298704][ T31] audit: type=1400 audit(67.190:59): avc: denied { execute } for pid=3117 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 67.341093][ T31] audit: type=1400 audit(67.240:60): avc: denied { execute_no_trans } for pid=3117 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 71.388978][ T31] audit: type=1400 audit(71.300:61): avc: denied { mounton } for pid=3117 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 71.393187][ T31] audit: type=1400 audit(71.300:62): avc: denied { mount } for pid=3117 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 71.414172][ T3117] cgroup: Unknown subsys name 'net' [ 71.424729][ T31] audit: type=1400 audit(71.330:63): avc: denied { unmount } for pid=3117 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 71.596884][ T3117] cgroup: Unknown subsys name 'cpuset' [ 71.605153][ T3117] cgroup: Unknown subsys name 'hugetlb' [ 71.607405][ T3117] cgroup: Unknown subsys name 'rlimit' [ 71.835556][ T31] audit: type=1400 audit(71.740:64): avc: denied { setattr } for pid=3117 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.839765][ T31] audit: type=1400 audit(71.750:65): avc: denied { mounton } for pid=3117 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 71.839936][ T31] audit: type=1400 audit(71.750:66): avc: denied { mount } for pid=3117 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 72.016333][ T3119] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 72.023834][ T31] audit: type=1400 audit(71.930:67): avc: denied { relabelto } for pid=3119 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 72.034874][ T31] audit: type=1400 audit(71.940:68): avc: denied { write } for pid=3119 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 72.075451][ T31] audit: type=1400 audit(71.980:69): avc: denied { read } for pid=3117 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 72.075991][ T31] audit: type=1400 audit(71.980:70): avc: denied { open } for pid=3117 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 79.794288][ T3117] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.784474][ T31] audit: type=1400 audit(81.690:71): avc: denied { execmem } for pid=3120 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 81.831166][ T31] audit: type=1400 audit(81.740:72): avc: denied { read } for pid=3122 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.834158][ T31] audit: type=1400 audit(81.740:73): avc: denied { open } for pid=3122 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.844201][ T31] audit: type=1400 audit(81.750:74): avc: denied { mounton } for pid=3122 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 81.860156][ T31] audit: type=1400 audit(81.770:75): avc: denied { module_request } for pid=3123 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 81.933335][ T31] audit: type=1400 audit(81.840:76): avc: denied { sys_module } for pid=3122 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 82.489454][ T31] audit: type=1400 audit(82.390:77): avc: denied { ioctl } for pid=3123 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=676 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.661218][ T3122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.668872][ T3122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.851985][ T3123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.858793][ T3123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.324347][ T3122] hsr_slave_0: entered promiscuous mode [ 84.326930][ T3122] hsr_slave_1: entered promiscuous mode [ 84.538749][ T3123] hsr_slave_0: entered promiscuous mode [ 84.540386][ T3123] hsr_slave_1: entered promiscuous mode [ 84.541751][ T3123] debugfs: 'hsr0' already exists in 'hsr' [ 84.542316][ T3123] Cannot create hsr debugfs directory [ 84.696120][ T31] audit: type=1400 audit(84.600:78): avc: denied { create } for pid=3122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.696605][ T31] audit: type=1400 audit(84.600:79): avc: denied { write } for pid=3122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.702060][ T31] audit: type=1400 audit(84.610:80): avc: denied { read } for pid=3122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.706538][ T3122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.715900][ T3122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.722460][ T3122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.727053][ T3122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.056651][ T3123] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.071862][ T3123] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.082466][ T3123] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.094900][ T3123] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.570886][ T3122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.906954][ T3123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.365976][ T3122] veth0_vlan: entered promiscuous mode [ 88.385481][ T3122] veth1_vlan: entered promiscuous mode [ 88.460827][ T3122] veth0_macvtap: entered promiscuous mode [ 88.472752][ T3122] veth1_macvtap: entered promiscuous mode [ 88.551234][ T11] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.553107][ T11] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.553411][ T11] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.553628][ T11] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.712458][ T31] audit: type=1400 audit(88.620:81): avc: denied { mount } for pid=3122 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.724373][ T31] audit: type=1400 audit(88.630:82): avc: denied { mounton } for pid=3122 comm="syz-executor" path="/syzkaller.UOtFUC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.734450][ T31] audit: type=1400 audit(88.640:83): avc: denied { mount } for pid=3122 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 88.745689][ T31] audit: type=1400 audit(88.650:84): avc: denied { mounton } for pid=3122 comm="syz-executor" path="/syzkaller.UOtFUC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 88.752464][ T31] audit: type=1400 audit(88.660:85): avc: denied { mounton } for pid=3122 comm="syz-executor" path="/syzkaller.UOtFUC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 88.773563][ T31] audit: type=1400 audit(88.680:86): avc: denied { unmount } for pid=3122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 88.789232][ T31] audit: type=1400 audit(88.700:87): avc: denied { mounton } for pid=3122 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 88.791810][ T31] audit: type=1400 audit(88.700:88): avc: denied { mount } for pid=3122 comm="syz-executor" name="/" dev="gadgetfs" ino=2246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 88.799841][ T31] audit: type=1400 audit(88.710:89): avc: denied { mount } for pid=3122 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 88.802442][ T31] audit: type=1400 audit(88.710:90): avc: denied { mounton } for pid=3122 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 88.886387][ T3122] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.102881][ T3123] veth0_vlan: entered promiscuous mode [ 89.131245][ T3123] veth1_vlan: entered promiscuous mode [ 89.231506][ T3123] veth0_macvtap: entered promiscuous mode [ 89.246822][ T3815] comedi: valid board names for 8255 driver are: [ 89.247334][ T3815] 8255 [ 89.247624][ T3815] comedi: valid board names for vmk80xx driver are: [ 89.254738][ T3123] veth1_macvtap: entered promiscuous mode [ 89.255399][ T3815] vmk80xx [ 89.255575][ T3815] comedi: valid board names for usbduxsigma driver are: [ 89.255609][ T3815] usbduxsigma [ 89.255625][ T3815] comedi: valid board names for usbduxfast driver are: [ 89.255643][ T3815] usbduxfast [ 89.255657][ T3815] comedi: valid board names for usbdux driver are: [ 89.255673][ T3815] usbdux [ 89.255725][ T3815] comedi: valid board names for ni6501 driver are: [ 89.255773][ T3815] ni6501 [ 89.255794][ T3815] comedi: valid board names for dt9812 driver are: [ 89.255809][ T3815] dt9812 [ 89.255823][ T3815] comedi: valid board names for ni_labpc_cs driver are: [ 89.255841][ T3815] ni_labpc_cs [ 89.255857][ T3815] comedi: valid board names for ni_daq_700 driver are: [ 89.255874][ T3815] ni_daq_700 [ 89.255888][ T3815] comedi: valid board names for labpc_pci driver are: [ 89.255906][ T3815] labpc_pci [ 89.255922][ T3815] comedi: valid board names for adl_pci9118 driver are: [ 89.255965][ T3815] pci9118dg [ 89.256012][ T3815] pci9118hg [ 89.256029][ T3815] pci9118hr [ 89.256045][ T3815] comedi: valid board names for 8255_pci driver are: [ 89.256087][ T3815] 8255_pci [ 89.256110][ T3815] comedi: valid board names for comedi_parport driver are: [ 89.256158][ T3815] comedi_parport [ 89.256178][ T3815] comedi: valid board names for comedi_test driver are: [ 89.256194][ T3815] comedi_test [ 89.256211][ T3815] comedi: valid board names for comedi_bond driver are: [ 89.256230][ T3815] comedi_bond [ 89.397264][ T3809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.403330][ T3809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.404109][ T3809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.404497][ T3809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.153587][ T3835] process 'syz.1.7' launched './file0' with NULL argv: empty string added [ 92.186042][ T3835] 8<--- cut here --- [ 92.186195][ T3835] Unable to handle kernel paging request at virtual address fee04f2a when write [ 92.186337][ T3835] [fee04f2a] *pgd=80000080007003, *pmd=00000000 [ 92.187316][ T3835] Internal error: Oops: a06 [#1] SMP ARM [ 92.190025][ T3835] Modules linked in: [ 92.190872][ T3835] CPU: 0 UID: 0 PID: 3835 Comm: syz.1.7 Not tainted syzkaller #0 PREEMPT [ 92.191513][ T3835] Hardware name: ARM-Versatile Express [ 92.192325][ T3835] PC is at subdev_8255_io+0x60/0x6c [ 92.193969][ T3835] LR is at subdev_8255_io+0x4c/0x6c [ 92.194243][ T3835] pc : [<813b8568>] lr : [<813b8554>] psr: 60000013 [ 92.194575][ T3835] sp : dfe71cb8 ip : dfe71cb8 fp : dfe71cd4 [ 92.194857][ T3835] r10: 00000000 r9 : 00000000 r8 : 00000084 [ 92.195139][ T3835] r7 : 00004f27 r6 : 0000009b r5 : 841436c0 r4 : 00004f2a [ 92.195459][ T3835] r3 : 0000009b r2 : fee04f2a r1 : 00000001 r0 : 841436c0 [ 92.195828][ T3835] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 92.196181][ T3835] Control: 30c5387d Table: 85b80f40 DAC: fffffffd [ 92.196503][ T3835] Register r0 information: slab kmalloc-192 start 841436c0 pointer offset 0 size 192 [ 92.197658][ T3835] Register r1 information: non-paged memory [ 92.198531][ T3835] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 92.199144][ T3835] Register r3 information: non-paged memory [ 92.199428][ T3835] Register r4 information: non-paged memory [ 92.199689][ T3835] Register r5 information: slab kmalloc-192 start 841436c0 pointer offset 0 size 192 [ 92.200176][ T3835] Register r6 information: non-paged memory [ 92.200447][ T3835] Register r7 information: non-paged memory [ 92.200707][ T3835] Register r8 information: non-paged memory [ 92.200954][ T3835] Register r9 information: NULL pointer [ 92.201177][ T3835] Register r10 information: NULL pointer [ 92.201408][ T3835] Register r11 information: 2-page vmalloc region starting at 0xdfe70000 allocated at kernel_clone+0xac/0x3ec [ 92.201883][ T3835] Register r12 information: 2-page vmalloc region starting at 0xdfe70000 allocated at kernel_clone+0xac/0x3ec [ 92.202352][ T3835] Process syz.1.7 (pid: 3835, stack limit = 0xdfe70000) [ 92.202706][ T3835] Stack: (0xdfe71cb8 to 0xdfe72000) [ 92.203107][ T3835] 1ca0: 813b8508 841436c0 [ 92.203529][ T3835] 1cc0: 00004f27 00004f27 dfe71cf4 dfe71cd8 813b8240 813b8514 00004f27 80503b98 [ 92.203875][ T3835] 1ce0: 8421c000 8421c000 dfe71d14 dfe71cf8 813b8600 813b81f4 8421c000 841436c0 [ 92.204204][ T3835] 1d00: dfe71da4 00004f27 dfe71d54 dfe71d18 813b87f4 813b8580 82ae3d60 84914a00 [ 92.204534][ T3835] 1d20: 82821598 00000000 00000000 829d00c4 841436c0 84143704 dfe71d90 841436c0 [ 92.204913][ T3835] 1d40: 00000000 82b16f00 dfe71d8c dfe71d58 813a76f8 813b8744 200000c0 00000000 [ 92.205266][ T3835] 1d60: dfe71d7c 200000c0 841436c0 b5403587 200000c0 8404ec00 40946400 00000003 [ 92.205607][ T3835] 1d80: dfe71e4c dfe71d90 813a3278 813a75fc 35353238 00000000 00000000 00000000 [ 92.205920][ T3835] 1da0: 00000000 00004f27 00000005 00000002 00000401 00000001 00000cc7 00000fff [ 92.206269][ T3835] 1dc0: 5c952399 00000005 000003ff 00000802 00001600 00000001 00000000 00000009 [ 92.206594][ T3835] 1de0: 0000e1cb 00000006 00000004 00000003 00000395 80000089 fffffffd 00000000 [ 92.206903][ T3835] 1e00: 00000006 ffffeadb 00000003 0001003c 00000008 00000004 08000000 00000005 [ 92.207224][ T3835] 1e20: 00000000 5a94e22d 00000000 848029c0 841436c0 200000c0 200000c0 8404ec00 [ 92.207575][ T3835] 1e40: dfe71f14 dfe71e50 813a4244 813a3184 00000000 00000000 00000000 5a94e22d [ 92.207907][ T3835] 1e60: 00000000 00000000 8247054c 0000005f 83c86058 841436f0 8425a324 8404ec00 [ 92.208558][ T3835] 1e80: dfe71ee4 dfe71e90 807979b4 8078dd18 00000064 00000001 00000000 dfe71eac [ 92.209006][ T3835] 1ea0: 847aad90 834dcc38 00006400 0000000b dfe71ea0 00000000 00000000 5a94e22d [ 92.209347][ T3835] 1ec0: 848029c0 40946400 200000c0 200000c0 848029c0 00000003 dfe71ef4 dfe71ee8 [ 92.209673][ T3835] 1ee0: 80797ad4 5a94e22d dfe71f14 40946400 00000000 848029c1 200000c0 848029c0 [ 92.210146][ T3835] 1f00: 00000003 8404ec00 dfe71fa4 dfe71f18 8056cd60 813a3c74 ecac8b10 8404ec00 [ 92.210509][ T3835] 1f20: dfe71f3c dfe71f30 81a394b8 81a39388 dfe71f54 dfe71f40 8025e490 8028ef64 [ 92.210876][ T3835] 1f40: dfe71fb0 40000000 dfe71f84 dfe71f58 802229ec 8025e44c 00000000 8281cddc [ 92.211215][ T3835] 1f60: dfe71fb0 0014c820 ecac8b10 80222940 00000000 5a94e22d dfe71fac 00000000 [ 92.211603][ T3835] 1f80: 00000000 002f6308 00000036 8020029c 8404ec00 00000036 00000000 dfe71fa8 [ 92.211982][ T3835] 1fa0: 80200060 8056cc3c 00000000 00000000 00000003 40946400 200000c0 00000000 [ 92.212344][ T3835] 1fc0: 00000000 00000000 002f6308 00000036 002e0000 00000000 00006364 76f010bc [ 92.212714][ T3835] 1fe0: 76f00ec0 76f00eb0 0001948c 001322c0 60000010 00000003 00000000 00000000 [ 92.213211][ T3835] Call trace: [ 92.213650][ T3835] [<813b8508>] (subdev_8255_io) from [<813b8240>] (subdev_8255_do_config+0x58/0x60) [ 92.214541][ T3835] r7:00004f27 r6:00004f27 r5:841436c0 r4:813b8508 [ 92.214898][ T3835] [<813b81e8>] (subdev_8255_do_config) from [<813b8600>] (subdev_8255_io_init+0x8c/0x9c) [ 92.215354][ T3835] r4:8421c000 [ 92.215525][ T3835] [<813b8574>] (subdev_8255_io_init) from [<813b87f4>] (dev_8255_attach+0xbc/0x114) [ 92.215892][ T3835] r7:00004f27 r6:dfe71da4 r5:841436c0 r4:8421c000 [ 92.216143][ T3835] [<813b8738>] (dev_8255_attach) from [<813a76f8>] (comedi_device_attach+0x108/0x250) [ 92.216572][ T3835] r10:82b16f00 r9:00000000 r8:841436c0 r7:dfe71d90 r6:84143704 r5:841436c0 [ 92.216921][ T3835] r4:829d00c4 [ 92.217173][ T3835] [<813a75f0>] (comedi_device_attach) from [<813a3278>] (do_devconfig_ioctl+0x100/0x220) [ 92.217612][ T3835] r10:00000003 r9:40946400 r8:8404ec00 r7:200000c0 r6:b5403587 r5:841436c0 [ 92.218138][ T3835] r4:200000c0 [ 92.218461][ T3835] [<813a3178>] (do_devconfig_ioctl) from [<813a4244>] (comedi_unlocked_ioctl+0x5dc/0x1c24) [ 92.219068][ T3835] r8:8404ec00 r7:200000c0 r6:200000c0 r5:841436c0 r4:848029c0 [ 92.219470][ T3835] [<813a3c68>] (comedi_unlocked_ioctl) from [<8056cd60>] (sys_ioctl+0x130/0xba0) [ 92.220096][ T3835] r10:8404ec00 r9:00000003 r8:848029c0 r7:200000c0 r6:848029c1 r5:00000000 [ 92.220600][ T3835] r4:40946400 [ 92.220754][ T3835] [<8056cc30>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 92.221274][ T3835] Exception stack(0xdfe71fa8 to 0xdfe71ff0) [ 92.221579][ T3835] 1fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 92.222071][ T3835] 1fc0: 00000000 00000000 002f6308 00000036 002e0000 00000000 00006364 76f010bc [ 92.222397][ T3835] 1fe0: 76f00ec0 76f00eb0 0001948c 001322c0 [ 92.222650][ T3835] r10:00000036 r9:8404ec00 r8:8020029c r7:00000036 r6:002f6308 r5:00000000 [ 92.223125][ T3835] r4:00000000 [ 92.223600][ T3835] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 92.224274][ T3835] ---[ end trace 0000000000000000 ]--- [ 92.225096][ T3835] Kernel panic - not syncing: Fatal exception [ 92.229245][ T3835] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:38:24 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=dfe71648 R02=dfe71644 R03=821ba5dc R04=820ff68c R05=813b8568 R06=80008000 R07=0002ebd4 R08=dfe71648 R09=dfe71644 R10=dfe71640 R11=dfe715f4 R12=81e95044 R13=dfe715d4 R14=0002ebd4 R15=8034e334 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=8226023c R02=000001ff R03=deffd003 R04=df74471f R05=8404bc00 R06=00c00000 R07=df74471f R08=00000001 R09=84838480 R10=20afa000 R11=dfe61dac R12=000df744 R13=dfe61cf0 R14=802914dc R15=8022bda8 PSR=200e0013 --C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000