last executing test programs: 8.364338928s ago: executing program 0 (id=86): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'xfrm0\x00', 0x0}) sendto(r0, &(0x7f0000000140), 0x0, 0x4000, &(0x7f0000000300)=@xdp={0x2c, 0x8, r1, 0x18}, 0x80) 7.96882563s ago: executing program 0 (id=87): r0 = getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@cred={{0x18, 0x1, 0x2, {r0}}}], 0x18, 0x20000000}}], 0x1, 0x5) 7.800065919s ago: executing program 0 (id=88): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, r1}) 7.301299667s ago: executing program 0 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x44, r10, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x59cf, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x5, 0x25c, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6.73629234s ago: executing program 1 (id=90): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 5.969298543s ago: executing program 1 (id=91): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'xfrm0\x00', 0x0}) sendto(r0, &(0x7f0000000140), 0x0, 0x4000, &(0x7f0000000300)=@xdp={0x2c, 0x8, r1, 0x18}, 0x80) 5.778808024s ago: executing program 1 (id=92): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 5.538950437s ago: executing program 1 (id=93): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="c9824d", 0x3}], 0x1) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x1, 0x40000121, 0x0) 5.390131736s ago: executing program 1 (id=94): setresuid(0x0, 0xee00, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8936, 0x0) 5.388386916s ago: executing program 0 (id=95): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 5.277982412s ago: executing program 1 (id=96): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x9, &(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r1, @ANYRES16=r2, @ANYBLOB="8e283df5959e9218f5daf682ee7fa0749bcee27eb0c90055cf987a03929ab00c956bf9803eac345c159f783c8e8aa60ddd04e269d491e058d1750bceea7fd1d87cc34e92efdd1e96ae519a5e3087b48ff8aeec150faece63fad49f0001b17fa48729829480db1ca425ae0debf98afff451a3b609958d7fd3bac7354d6ed0c09e3da540838ba6b5535869be45a8563bec1a06aed6f3841dfb34922f361d72c5cc338df4c3c6b7405223fb3d70", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x9, 0x0, 0x100000, {}, [{0x90, 0x1, [@m_ct={0x44, 0x19, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffe, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4b, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r8) 0s ago: executing program 0 (id=97): munlockall() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) kernel console output (not intermixed with test programs): [ 37.575993][ T31] audit: type=1400 audit(37.530:58): avc: denied { read write } for pid=3093 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.577177][ T31] audit: type=1400 audit(37.530:59): avc: denied { open } for pid=3093 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:20940' (ED25519) to the list of known hosts. [ 45.423915][ T31] audit: type=1400 audit(45.370:60): avc: denied { name_bind } for pid=3096 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.811485][ T31] audit: type=1400 audit(46.760:61): avc: denied { execute } for pid=3097 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.844403][ T31] audit: type=1400 audit(46.780:62): avc: denied { execute_no_trans } for pid=3097 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.568740][ T31] audit: type=1400 audit(48.520:63): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.571548][ T31] audit: type=1400 audit(48.530:64): avc: denied { mount } for pid=3097 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.581669][ T3097] cgroup: Unknown subsys name 'net' [ 48.586201][ T31] audit: type=1400 audit(48.540:65): avc: denied { unmount } for pid=3097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.780758][ T3097] cgroup: Unknown subsys name 'cpuset' [ 48.788184][ T3097] cgroup: Unknown subsys name 'hugetlb' [ 48.789119][ T3097] cgroup: Unknown subsys name 'rlimit' [ 49.050200][ T31] audit: type=1400 audit(49.000:66): avc: denied { setattr } for pid=3097 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.054177][ T31] audit: type=1400 audit(49.010:67): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.055961][ T31] audit: type=1400 audit(49.010:68): avc: denied { mount } for pid=3097 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.251966][ T3099] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 49.255478][ T31] audit: type=1400 audit(49.210:69): avc: denied { relabelto } for pid=3099 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 53.611543][ T3097] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.142187][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 55.142738][ T31] audit: type=1400 audit(55.090:73): avc: denied { execmem } for pid=3100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.221815][ T31] audit: type=1400 audit(55.170:74): avc: denied { read } for pid=3102 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.222393][ T31] audit: type=1400 audit(55.170:75): avc: denied { open } for pid=3102 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.222497][ T31] audit: type=1400 audit(55.170:76): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.253795][ T31] audit: type=1400 audit(55.210:77): avc: denied { module_request } for pid=3102 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 55.332340][ T31] audit: type=1400 audit(55.290:78): avc: denied { sys_module } for pid=3102 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.713787][ T31] audit: type=1400 audit(55.670:79): avc: denied { ioctl } for pid=3102 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=675 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.378188][ T3103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.384732][ T3103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.578218][ T3102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.584473][ T3102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.023834][ T3103] hsr_slave_0: entered promiscuous mode [ 57.026023][ T3103] hsr_slave_1: entered promiscuous mode [ 57.138120][ T3102] hsr_slave_0: entered promiscuous mode [ 57.146145][ T3102] hsr_slave_1: entered promiscuous mode [ 57.148219][ T3102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.149374][ T3102] Cannot create hsr debugfs directory [ 57.399294][ T31] audit: type=1400 audit(57.350:80): avc: denied { create } for pid=3103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.400656][ T31] audit: type=1400 audit(57.350:81): avc: denied { write } for pid=3103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.404839][ T31] audit: type=1400 audit(57.360:82): avc: denied { read } for pid=3103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.410547][ T3103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.427119][ T3103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.438708][ T3103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.444245][ T3103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.505854][ T3102] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.519370][ T3102] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.527125][ T3102] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.536298][ T3102] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.948473][ T3102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.999721][ T3103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.007213][ T3103] veth0_vlan: entered promiscuous mode [ 60.019044][ T3103] veth1_vlan: entered promiscuous mode [ 60.059867][ T3103] veth0_macvtap: entered promiscuous mode [ 60.068617][ T3103] veth1_macvtap: entered promiscuous mode [ 60.100800][ T3103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.102283][ T3103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.103771][ T3103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.104937][ T3103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.189415][ T31] audit: type=1400 audit(60.140:83): avc: denied { mount } for pid=3103 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.194749][ T3102] veth0_vlan: entered promiscuous mode [ 60.196314][ T31] audit: type=1400 audit(60.150:84): avc: denied { mounton } for pid=3103 comm="syz-executor" path="/syzkaller.Wz7NOg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.211872][ T31] audit: type=1400 audit(60.160:85): avc: denied { mount } for pid=3103 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 60.216392][ T31] audit: type=1400 audit(60.170:86): avc: denied { mounton } for pid=3103 comm="syz-executor" path="/syzkaller.Wz7NOg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 60.222792][ T3102] veth1_vlan: entered promiscuous mode [ 60.226302][ T31] audit: type=1400 audit(60.180:87): avc: denied { mounton } for pid=3103 comm="syz-executor" path="/syzkaller.Wz7NOg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 60.240192][ T31] audit: type=1400 audit(60.190:88): avc: denied { unmount } for pid=3103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.257941][ T31] audit: type=1400 audit(60.210:89): avc: denied { mounton } for pid=3103 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 60.259223][ T31] audit: type=1400 audit(60.210:90): avc: denied { mount } for pid=3103 comm="syz-executor" name="/" dev="gadgetfs" ino=2417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 60.269081][ T31] audit: type=1400 audit(60.220:91): avc: denied { mount } for pid=3103 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 60.274226][ T31] audit: type=1400 audit(60.230:92): avc: denied { mounton } for pid=3103 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 60.298279][ T3102] veth0_macvtap: entered promiscuous mode [ 60.310170][ T3102] veth1_macvtap: entered promiscuous mode [ 60.346105][ T3103] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.437352][ T3102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.438785][ T3102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.442340][ T3102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.442751][ T3102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.675409][ C1] vcan0: j1939_tp_rxtimer: 0x8551aa00: rx timeout, send abort [ 61.676636][ C1] vcan0: j1939_tp_rxtimer: 0x8551ab00: rx timeout, send abort [ 61.677530][ C1] vcan0: j1939_xtp_rx_abort_one: 0x8551aa00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 61.678994][ C1] vcan0: j1939_xtp_rx_abort_one: 0x8551ab00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 64.055232][ T3869] syz.1.35 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 66.912049][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 66.914416][ T31] audit: type=1400 audit(66.870:126): avc: denied { read write } for pid=3912 comm="syz.1.52" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 66.917990][ T31] audit: type=1400 audit(66.870:127): avc: denied { open } for pid=3912 comm="syz.1.52" path="/31/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 67.014714][ T31] audit: type=1400 audit(66.970:128): avc: denied { unmount } for pid=3103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 67.587465][ T31] audit: type=1400 audit(67.540:129): avc: denied { prog_run } for pid=3921 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 67.954724][ T31] audit: type=1400 audit(67.590:130): avc: denied { create } for pid=3923 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.936424][ T31] audit: type=1400 audit(69.850:131): avc: denied { mount } for pid=3923 comm="syz.1.55" name="/" dev="configfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 70.651723][ T31] audit: type=1400 audit(70.410:132): avc: denied { search } for pid=3923 comm="syz.1.55" name="/" dev="configfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.743097][ T31] audit: type=1400 audit(70.700:133): avc: denied { read } for pid=3923 comm="syz.1.55" name="/" dev="configfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.747795][ T31] audit: type=1400 audit(70.700:134): avc: denied { open } for pid=3923 comm="syz.1.55" path="/" dev="configfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.769088][ T31] audit: type=1400 audit(73.720:135): avc: denied { name_bind } for pid=3932 comm="syz.0.57" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 73.779468][ T31] audit: type=1400 audit(73.730:136): avc: denied { node_bind } for pid=3932 comm="syz.0.57" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 73.936531][ T31] audit: type=1400 audit(73.890:137): avc: denied { append } for pid=3934 comm="syz.0.58" name="pfkey" dev="proc" ino=4026532728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 73.950066][ T31] audit: type=1400 audit(73.900:138): avc: denied { create } for pid=3934 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.903068][ T31] audit: type=1400 audit(77.850:139): avc: denied { create } for pid=3947 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.915965][ T31] audit: type=1400 audit(77.870:140): avc: denied { write } for pid=3947 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.171961][ T3937] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.358552][ T3937] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 79.358990][ T3937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.362967][ T3937] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 79.363111][ T3937] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 79.363153][ T3937] usb 2-1: Manufacturer: syz [ 79.365869][ T3937] usb 2-1: config 0 descriptor?? [ 79.581817][ T3937] rc_core: IR keymap rc-hauppauge not found [ 79.582313][ T3937] Registered IR keymap rc-empty [ 79.588135][ T3937] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 79.592348][ T3937] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input3 [ 79.619527][ T3937] usb 2-1: USB disconnect, device number 2 [ 79.726321][ T3978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.242433][ T31] audit: type=1400 audit(83.160:141): avc: denied { mount } for pid=3977 comm="syz.1.63" name="/" dev="ramfs" ino=2720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 88.664367][ T31] audit: type=1400 audit(88.620:142): avc: denied { create } for pid=3982 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.670251][ T31] audit: type=1400 audit(88.620:143): avc: denied { setopt } for pid=3982 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.679193][ T31] audit: type=1400 audit(88.630:144): avc: denied { write } for pid=3982 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.767056][ T31] audit: type=1400 audit(88.720:145): avc: denied { create } for pid=3984 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.115080][ T31] audit: type=1400 audit(94.070:146): avc: denied { create } for pid=4026 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.843832][ T4039] netlink: 64 bytes leftover after parsing attributes in process `syz.1.74'. [ 95.847582][ T31] audit: type=1400 audit(95.800:147): avc: denied { write } for pid=4031 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.847801][ T31] audit: type=1400 audit(95.800:148): avc: denied { nlmsg_write } for pid=4031 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.345575][ T4041] input: syz1 as /devices/virtual/input/input4 [ 98.199791][ T4057] fuse: root generation should be zero [ 98.424730][ T31] audit: type=1400 audit(98.380:149): avc: denied { map } for pid=4063 comm="syz.0.81" path="socket:[3132]" dev="sockfs" ino=3132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.425465][ T31] audit: type=1400 audit(98.380:150): avc: denied { read } for pid=4063 comm="syz.0.81" path="socket:[3132]" dev="sockfs" ino=3132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.977574][ T31] audit: type=1400 audit(100.930:151): avc: denied { write } for pid=4074 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.156585][ T31] audit: type=1400 audit(102.110:152): avc: denied { ioctl } for pid=4059 comm="syz.1.80" path="socket:[2812]" dev="sockfs" ino=2812 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.416537][ T31] audit: type=1400 audit(109.370:153): avc: denied { ioctl } for pid=4115 comm="syz.0.97" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=2864 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.423887][ T31] audit: type=1400 audit(109.380:154): avc: denied { create } for pid=4115 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.426577][ T31] audit: type=1400 audit(109.380:155): avc: denied { setopt } for pid=4115 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.532918][ T4116] ------------[ cut here ]------------ [ 109.533465][ T4116] WARNING: CPU: 1 PID: 4116 at mm/highmem.c:622 kunmap_local_indexed+0x210/0x228 [ 109.535891][ T4116] Modules linked in: [ 109.536746][ T4116] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.537504][ T4116] CPU: 1 UID: 0 PID: 4116 Comm: syz.0.97 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 109.537847][ T4116] Hardware name: ARM-Versatile Express [ 109.538162][ T4116] Call trace: [ 109.538752][ T4116] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 109.539189][ T4116] r7:00000000 r6:828227fc r5:00000000 r4:82257c5c [ 109.539815][ T4116] [<80201ac8>] (show_stack) from [<80220020>] (dump_stack_lvl+0x54/0x7c) [ 109.540337][ T4116] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 109.540580][ T4116] r5:00000000 r4:82a70d4c [ 109.540695][ T4116] [<80220048>] (dump_stack) from [<802025f8>] (panic+0x120/0x374) [ 109.541064][ T4116] [<802024d8>] (panic) from [<802619e8>] (get_taint+0x0/0x1c) [ 109.541275][ T4116] r3:8280c604 r2:00000001 r1:8223e824 r0:82246324 [ 109.541413][ T4116] r7:804c6320 [ 109.541506][ T4116] [<80261974>] (check_panic_on_warn) from [<80261b4c>] (__warn+0x80/0x188) [ 109.541732][ T4116] [<80261acc>] (__warn) from [<80261dcc>] (warn_slowpath_fmt+0x178/0x1f4) [ 109.541976][ T4116] r8:00000009 r7:82271738 r6:dfb79d1c r5:83b00000 r4:00000000 [ 109.542146][ T4116] [<80261c58>] (warn_slowpath_fmt) from [<804c6320>] (kunmap_local_indexed+0x210/0x228) [ 109.542433][ T4116] r10:00000000 r9:decc3cfc r8:deb56ee0 r7:00a00000 r6:00000003 r5:83b00000 [ 109.542659][ T4116] r4:ffedc000 [ 109.542749][ T4116] [<804c6110>] (kunmap_local_indexed) from [<8053ffb4>] (move_pages+0xb60/0x18d4) [ 109.543008][ T4116] r7:00a00000 r6:fffffff0 r5:849d0594 r4:84697300 [ 109.543168][ T4116] [<8053f454>] (move_pages) from [<805c1838>] (userfaultfd_ioctl+0xf6c/0x20c0) [ 109.543414][ T4116] r10:84697300 r9:dfb79e98 r8:21000000 r7:00000001 r6:00000000 r5:20000040 [ 109.543630][ T4116] r4:85757000 [ 109.543720][ T4116] [<805c08cc>] (userfaultfd_ioctl) from [<8056b538>] (sys_ioctl+0x138/0xd84) [ 109.543994][ T4116] r10:83b00000 r9:00000003 r8:84b59540 r7:20000040 r6:84b59541 r5:00000000 [ 109.544218][ T4116] r4:c028aa05 [ 109.544316][ T4116] [<8056b400>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 109.544613][ T4116] Exception stack(0xdfb79fa8 to 0xdfb79ff0) [ 109.544856][ T4116] 9fa0: 00000000 00000000 00000003 c028aa05 20000040 00000000 [ 109.545100][ T4116] 9fc0: 00000000 00000000 002e6300 00000036 002d0000 00000000 00006364 76b0d0bc [ 109.545357][ T4116] 9fe0: 76b0cec0 76b0ceb0 0001939c 00131f30 [ 109.545559][ T4116] r10:00000036 r9:83b00000 r8:8020029c r7:00000036 r6:002e6300 r5:00000000 [ 109.545856][ T4116] r4:00000000 [ 109.548333][ T4116] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:52:53 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=82257c5c R02=00000001 R03=81a50668 R04=00000006 R05=828fac48 R06=00000000 R07=828fac40 R08=84488c00 R09=00000028 R10=828fac48 R11=df801ee4 R12=df801ee8 R13=df801ed8 R14=803481fc R15=81a50678 PSR=20010093 --C- A S svc32 s00=0204a4e6 s01=04051580 d00=040515800204a4e6 s02=030815a0 s03=ff021b80 d01=ff021b80030815a0 s04=0000306d s05=00000000 d02=000000000000306d s06=00000000 s07=01378c00 d03=01378c0000000000 s08=00080606 s09=00010000 d04=0001000000080606 s10=04a4e608 s11=03168002 d05=0316800204a4e608 s12=02080580 s13=016484ca d06=016484ca02080580 s14=0008060c s15=02010000 d07=020100000008060c s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=155572a8 s33=8a2a4daf d16=8a2a4daf155572a8 s34=fc2221fd s35=07d0c551 d17=07d0c551fc2221fd s36=4af90f94 s37=14851f1b d18=14851f1b4af90f94 s38=128f3aff s39=8b7a789d d19=8b7a789d128f3aff s40=ddd8b299 s41=a9d720ee d20=a9d720eeddd8b299 s42=27cbcdae s43=e7affaf4 d21=e7affaf427cbcdae s44=7f237d59 s45=5f29a942 d22=5f29a9427f237d59 s46=e80fbe78 s47=110e0203 d23=110e0203e80fbe78 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=ff9a0000 s53=0008ffff d26=0008ffffff9a0000 s54=00000000 s55=00000300 d27=0000030000000000 s56=ffaa0000 s57=0008ffff d28=0008ffffffaa0000 s58=00000000 s59=00000300 d29=0000030000000000 s60=ffba0000 s61=0008ffff d30=0008ffffffba0000 s62=00000000 s63=00000300 d31=0000030000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=840c4040 R01=00000074 R02=eb279000 R03=00000000 R04=82ab4136 R05=840c4040 R06=80a62768 R07=82ab4149 R08=8282a2b8 R09=00000000 R10=000003b2 R11=dfb799f0 R12=00000002 R13=dfb799e4 R14=8295b2ec R15=80a627c0 PSR=80000093 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000