last executing test programs: 24.186803236s ago: executing program 1 (id=2): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='vegas', 0x5) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 23.35758837s ago: executing program 1 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3568, 0x5db, 0xf, 0x4}}) bind$can_raw(r3, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000400)=[{{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3}}, {{0x2, 0x1, 0x1}, {0x2}}], 0x28) close(r3) 9.990748142s ago: executing program 0 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {0x414993d1f1b5c792}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x5, 0x8, 0x1ff, 0x3, 0x7, 0xf24, 0xeed2, 0xfffffcb4, 0x6635, 0x0, 0x7eb4, 0x1, 0x5, 0xe77c, 0x2, 0xa1, 0x80000001, 0x6, 0x7, 0x5, 0x9, 0xfffff800, 0x746, 0x7fffffff, 0x3, 0x0, 0xff, 0x9, 0x10000000, 0x8, 0xcd79, 0x200, 0xfffffff4, 0x5, 0x8, 0x3ff, 0x6, 0x8, 0x240000, 0x4, 0x81, 0x4, 0x0, 0x7, 0x8000, 0x32, 0xaf, 0x8, 0xda7d, 0x1, 0x1, 0xe00, 0x7, 0x245, 0x52bb8b5a, 0x8ca8, 0x5, 0xb4, 0xda0, 0x187a, 0x7, 0x3, 0x40, 0x8, 0x4dc2, 0xd1, 0x2, 0x1, 0x9, 0x3ff, 0x4, 0xda2c, 0x9, 0x4, 0xb97, 0x3, 0xb9, 0x1, 0x5, 0xcd0, 0x8, 0xf, 0x3, 0x5, 0x2, 0x6, 0x0, 0x5, 0x5, 0x74c, 0x9, 0x6, 0x0, 0x2, 0x10001, 0xb03fd128, 0xffff, 0xf3, 0x0, 0xfe000000, 0x7, 0x800, 0x5e7f, 0x1, 0x2, 0x9, 0xfffff800, 0x9, 0x4, 0x1, 0x7, 0x1c3c, 0x60, 0x81, 0x4, 0x5, 0x9, 0x400, 0x2, 0x80000001, 0x6, 0x101, 0xffc, 0x0, 0x8, 0x9, 0x401, 0x7f, 0x7, 0x8, 0x800, 0x6, 0xffffffff, 0x5506, 0x200, 0xeff0, 0x0, 0x5, 0x80, 0x613, 0x0, 0x9, 0x8000, 0x5, 0xffffffff, 0x1, 0x4a2b, 0x6, 0x5, 0x9, 0x3ff8, 0x6, 0xa61d, 0x95c, 0x1, 0x3, 0x8a, 0x401, 0x0, 0xffffffff, 0x44e, 0x3, 0x1, 0x4, 0x6, 0xb, 0x101, 0x2, 0x7, 0x9, 0xfffffffa, 0x2, 0x4, 0x9, 0x2c13, 0x10001, 0x8000, 0x4, 0x7cda, 0x6e, 0x1d0, 0x100, 0x8, 0xb0b, 0x4, 0x3, 0x3, 0x1, 0x401, 0x10, 0x4, 0x2, 0xc1c, 0x800, 0x4, 0x2, 0x4670bd54, 0x5, 0x63a, 0xead, 0x4, 0x40, 0x0, 0x80000001, 0x6, 0x0, 0x7fff, 0x3, 0x5, 0xf, 0x7ff, 0x0, 0xff, 0x7, 0x0, 0x7, 0x10, 0x7, 0x7, 0x8, 0x72, 0x7e3000, 0x81, 0x2, 0x4, 0x1c, 0x0, 0x0, 0x9, 0xfffffffb, 0x1, 0x1, 0x0, 0x7, 0xa, 0x0, 0x101, 0x4, 0x100, 0x5, 0x6, 0x800, 0x3, 0x3, 0x204, 0x4, 0x8000, 0x1, 0xffffffff, 0x2, 0x6, 0x1, 0xfff, 0x800, 0x8, 0xfffffa32]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 9.820110643s ago: executing program 0 (id=13): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d8, &(0x7f0000000040)={0x0, 0xb273, 0x1, 0x3, 0x25f}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) socket(0x840000000002, 0x3, 0xfa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4004850) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1"], 0xa4}}, 0x0) 600.77432ms ago: executing program 0 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 251.053094ms ago: executing program 0 (id=15): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) 120.277712ms ago: executing program 0 (id=16): capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 0s ago: executing program 0 (id=17): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0xffffffdd, 0xcc7, 0x6, 0x80, 0x3, 0x3ff, 0x2, 0x1600, 0x1, 0x1, 0xfff, 0xe1cb, 0x6, 0x4000, 0x10, 0x395, 0xc52d, 0xfffffffe, 0xb, 0xfffffffe, 0xffffeadb, 0x0, 0x3c, 0x0, 0x4, 0x2, 0xdffffffa]}) kernel console output (not intermixed with test programs): [ 53.875619][ T28] audit: type=1400 audit(53.780:56): avc: denied { read write } for pid=3076 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.878632][ T28] audit: type=1400 audit(53.780:57): avc: denied { open } for pid=3076 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:34370' (ED25519) to the list of known hosts. [ 70.064493][ T28] audit: type=1400 audit(69.960:58): avc: denied { name_bind } for pid=3079 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 72.025582][ T28] audit: type=1400 audit(71.930:59): avc: denied { execute } for pid=3080 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 72.030182][ T28] audit: type=1400 audit(71.930:60): avc: denied { execute_no_trans } for pid=3080 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 75.830946][ T28] audit: type=1400 audit(75.730:61): avc: denied { mounton } for pid=3080 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 75.840631][ T28] audit: type=1400 audit(75.740:62): avc: denied { mount } for pid=3080 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 75.857468][ T3080] cgroup: Unknown subsys name 'net' [ 75.868314][ T28] audit: type=1400 audit(75.770:63): avc: denied { unmount } for pid=3080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 76.006360][ T3080] cgroup: Unknown subsys name 'cpuset' [ 76.013855][ T3080] cgroup: Unknown subsys name 'hugetlb' [ 76.014909][ T3080] cgroup: Unknown subsys name 'rlimit' [ 76.212836][ T28] audit: type=1400 audit(76.110:64): avc: denied { setattr } for pid=3080 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.213042][ T28] audit: type=1400 audit(76.110:65): avc: denied { mounton } for pid=3080 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 76.213225][ T28] audit: type=1400 audit(76.110:66): avc: denied { mount } for pid=3080 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 76.333275][ T3082] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 76.334607][ T28] audit: type=1400 audit(76.240:67): avc: denied { relabelto } for pid=3082 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 76.339468][ T28] audit: type=1400 audit(76.240:68): avc: denied { write } for pid=3082 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 76.367591][ T28] audit: type=1400 audit(76.270:69): avc: denied { read } for pid=3080 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 76.367988][ T28] audit: type=1400 audit(76.270:70): avc: denied { open } for pid=3080 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 84.612226][ T3080] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.949508][ T28] audit: type=1400 audit(86.850:71): avc: denied { execmem } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 87.019879][ T28] audit: type=1400 audit(86.920:72): avc: denied { read } for pid=3085 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.025845][ T28] audit: type=1400 audit(86.930:73): avc: denied { open } for pid=3085 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.036813][ T28] audit: type=1400 audit(86.940:74): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 87.067650][ T28] audit: type=1400 audit(86.970:75): avc: denied { module_request } for pid=3086 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 87.069524][ T28] audit: type=1400 audit(86.970:76): avc: denied { module_request } for pid=3085 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 87.173456][ T28] audit: type=1400 audit(87.070:77): avc: denied { sys_module } for pid=3085 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 87.894352][ T28] audit: type=1400 audit(87.790:78): avc: denied { ioctl } for pid=3085 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.199085][ T3085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.218234][ T3085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.225581][ T3086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.243894][ T3086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.246670][ T3085] hsr_slave_0: entered promiscuous mode [ 90.251491][ T3085] hsr_slave_1: entered promiscuous mode [ 90.369213][ T3086] hsr_slave_0: entered promiscuous mode [ 90.372289][ T3086] hsr_slave_1: entered promiscuous mode [ 90.384360][ T3086] debugfs: 'hsr0' already exists in 'hsr' [ 90.385046][ T3086] Cannot create hsr debugfs directory [ 90.891686][ T28] audit: type=1400 audit(90.790:79): avc: denied { create } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.897319][ T28] audit: type=1400 audit(90.800:80): avc: denied { write } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.909493][ T3085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.931164][ T3085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.957532][ T3085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.966633][ T3085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.053182][ T3086] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.066355][ T3086] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.079227][ T3086] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.102146][ T3086] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.790022][ T3085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.936824][ T3086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.951265][ T3085] veth0_vlan: entered promiscuous mode [ 94.981951][ T3085] veth1_vlan: entered promiscuous mode [ 95.100110][ T3085] veth0_macvtap: entered promiscuous mode [ 95.107883][ T3086] veth0_vlan: entered promiscuous mode [ 95.135925][ T3085] veth1_macvtap: entered promiscuous mode [ 95.148924][ T3086] veth1_vlan: entered promiscuous mode [ 95.301326][ T92] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.309392][ T92] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.311757][ T92] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.320662][ T2751] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.336916][ T3086] veth0_macvtap: entered promiscuous mode [ 95.397255][ T3086] veth1_macvtap: entered promiscuous mode [ 95.443186][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 95.443547][ T28] audit: type=1400 audit(95.340:82): avc: denied { mount } for pid=3085 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.473101][ T28] audit: type=1400 audit(95.370:83): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/syzkaller.eZRX9M/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 95.473555][ T28] audit: type=1400 audit(95.370:84): avc: denied { mount } for pid=3085 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 95.488786][ T28] audit: type=1400 audit(95.390:85): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/syzkaller.eZRX9M/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 95.489261][ T28] audit: type=1400 audit(95.390:86): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/syzkaller.eZRX9M/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 95.523645][ T28] audit: type=1400 audit(95.420:87): avc: denied { unmount } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 95.538412][ T28] audit: type=1400 audit(95.440:88): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 95.540468][ T28] audit: type=1400 audit(95.440:89): avc: denied { mount } for pid=3085 comm="syz-executor" name="/" dev="gadgetfs" ino=2358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 95.569996][ T28] audit: type=1400 audit(95.470:90): avc: denied { mount } for pid=3085 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 95.572139][ T28] audit: type=1400 audit(95.470:91): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 95.615503][ T92] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.622102][ T92] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.629288][ T92] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.636254][ T92] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.788823][ T3085] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.923718][ T3625] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.119565][ T3625] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.125817][ T3625] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 97.128356][ T3625] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.130705][ T3625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.170472][ T3697] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.199360][ T3625] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.415785][ T9] usb 1-1: USB disconnect, device number 2 [ 101.459053][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 101.461321][ T28] audit: type=1400 audit(101.360:113): avc: denied { write } for pid=3738 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.506162][ T28] audit: type=1400 audit(109.400:114): avc: denied { create } for pid=3744 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.640951][ T3745] Zero length message leads to an empty skb [ 109.993733][ T28] audit: type=1400 audit(109.890:115): avc: denied { create } for pid=3751 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.997996][ T3752] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.018582][ T28] audit: type=1400 audit(109.920:116): avc: denied { ioctl } for pid=3751 comm="syz.0.11" path="socket:[3084]" dev="sockfs" ino=3084 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.181689][ T28] audit: type=1400 audit(110.080:117): avc: denied { ioctl } for pid=3755 comm="syz.0.12" path="socket:[3092]" dev="sockfs" ino=3092 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.907457][ T3761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'. [ 120.024565][ T3768] capability: warning: `syz.0.16' uses deprecated v2 capabilities in a way that may be insecure [ 120.140091][ T28] audit: type=1400 audit(120.040:118): avc: denied { append } for pid=3769 comm="syz.0.17" name="comedi3" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.151283][ T3770] 8<--- cut here --- [ 120.159828][ T3770] Unable to handle kernel paging request at virtual address fee04f2a when write [ 120.179418][ T28] audit: type=1400 audit(120.080:119): avc: denied { read } for pid=2894 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 120.193445][ T28] audit: type=1400 audit(120.090:120): avc: denied { search } for pid=2894 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.193965][ T28] audit: type=1400 audit(120.090:121): avc: denied { search } for pid=2894 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.194220][ T28] audit: type=1400 audit(120.090:122): avc: denied { add_name } for pid=2894 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.194458][ T28] audit: type=1400 audit(120.090:123): avc: denied { create } for pid=2894 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.194672][ T28] audit: type=1400 audit(120.090:124): avc: denied { append open } for pid=2894 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.194880][ T28] audit: type=1400 audit(120.090:125): avc: denied { getattr } for pid=2894 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 120.206799][ T3770] [fee04f2a] *pgd=80000080007003, *pmd=00000000 [ 120.246589][ T3770] Internal error: Oops: a06 [#1] SMP ARM [ 120.248678][ T3770] Modules linked in: [ 120.249823][ T3770] CPU: 1 UID: 0 PID: 3770 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 120.250363][ T3770] Hardware name: ARM-Versatile Express [ 120.250986][ T3770] PC is at subdev_8255_io+0x60/0x6c [ 120.252041][ T3770] LR is at subdev_8255_io+0x4c/0x6c [ 120.252477][ T3770] pc : [<81436260>] lr : [<8143624c>] psr: 60000013 [ 120.252879][ T3770] sp : e42bdcb8 ip : e42bdcb8 fp : e42bdcd4 [ 120.253183][ T3770] r10: 00000000 r9 : 00000084 r8 : e42bdda4 [ 120.253463][ T3770] r7 : 00004f27 r6 : 0000009b r5 : 833d8840 r4 : 00004f2a [ 120.253791][ T3770] r3 : 0000009b r2 : fee04f2a r1 : 00000001 r0 : 833d8840 [ 120.254190][ T3770] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 120.254572][ T3770] Control: 30c5387d Table: 85f0e000 DAC: 00000000 [ 120.254923][ T3770] Register r0 information: slab kmalloc-192 start 833d8840 pointer offset 0 size 192 [ 120.256345][ T3770] Register r1 information: non-paged memory [ 120.256906][ T3770] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 120.257695][ T3770] Register r3 information: non-paged memory [ 120.258068][ T3770] Register r4 information: non-paged memory [ 120.258328][ T3770] Register r5 information: slab kmalloc-192 start 833d8840 pointer offset 0 size 192 [ 120.258782][ T3770] Register r6 information: non-paged memory [ 120.259081][ T3770] Register r7 information: non-paged memory [ 120.259371][ T3770] Register r8 information: 2-page vmalloc region starting at 0xe42bc000 allocated at kernel_clone+0xac/0x428 [ 120.259839][ T3770] Register r9 information: non-paged memory [ 120.260167][ T3770] Register r10 information: NULL pointer [ 120.260454][ T3770] Register r11 information: 2-page vmalloc region starting at 0xe42bc000 allocated at kernel_clone+0xac/0x428 [ 120.260921][ T3770] Register r12 information: 2-page vmalloc region starting at 0xe42bc000 allocated at kernel_clone+0xac/0x428 [ 120.261707][ T3770] Process syz.0.17 (pid: 3770, stack limit = 0xe42bc000) [ 120.262372][ T3770] Stack: (0xe42bdcb8 to 0xe42be000) [ 120.262926][ T3770] dca0: 81436200 00004f27 [ 120.263764][ T3770] dcc0: 833d8840 00004f27 e42bdcf4 e42bdcd8 81435f3c 8143620c 00004f27 805223ec [ 120.264614][ T3770] dce0: 858e3000 858e3000 e42bdd14 e42bdcf8 814362f4 81435ef0 833d8840 00000000 [ 120.265320][ T3770] dd00: 858e3000 00004f27 e42bdd54 e42bdd18 814364a4 81436278 82b06b7c 833c5b00 [ 120.266300][ T3770] dd20: 82821780 00000000 00000000 829d6504 833d8840 00000000 e42bdd90 833d8840 [ 120.267304][ T3770] dd40: 00000000 82b2df9c e42bdd8c e42bdd58 81424e90 8143643c 40946400 00000000 [ 120.268111][ T3770] dd60: e42bdd7c 200000c0 833d8840 b5403587 40946400 840eec00 00000003 833d8870 [ 120.268641][ T3770] dd80: e42bde4c e42bdd90 814207c8 81424d90 35353238 00000000 00000000 00000000 [ 120.269328][ T3770] dda0: 00000000 00004f27 00000005 00000002 00000401 ffffffdd 00000cc7 00000006 [ 120.269930][ T3770] ddc0: 00000080 00000003 000003ff 00000002 00001600 00000001 00000001 00000fff [ 120.270702][ T3770] dde0: 0000e1cb 00000006 00004000 00000010 00000395 0000c52d fffffffe 0000000b [ 120.271464][ T3770] de00: fffffffe ffffeadb 00000000 0000003c 00000000 00000004 00000002 dffffffa [ 120.272161][ T3770] de20: 00000000 70b45e36 00000000 83eff000 833d8840 200000c0 40946400 840eec00 [ 120.272881][ T3770] de40: e42bdf14 e42bde50 81421348 81420700 00000000 70b45e36 00000000 00000000 [ 120.273575][ T3770] de60: 824b557c e42bdea4 0000005f 847e6640 00000064 8460a174 e42bdee4 e42bde88 [ 120.274334][ T3770] de80: 807cb7cc 807c1ba4 00000064 00000001 00000000 e42bdea4 833b3250 834edb28 [ 120.275165][ T3770] dea0: 00006400 0000000b e42bde98 00000000 00000000 70b45e36 00000000 83eff000 [ 120.275804][ T3770] dec0: 40946400 200000c0 200000c0 83eff000 00000003 840eec00 e42bdef4 e42bdee8 [ 120.276655][ T3770] dee0: 807cb8fc 70b45e36 e42bdf14 00000000 83eff001 40946400 200000c0 83eff000 [ 120.277452][ T3770] df00: 00000003 840eec00 e42bdfa4 e42bdf18 8058f558 81421250 ecac8b10 840eec00 [ 120.278055][ T3770] df20: e42bdf3c e42bdf30 81ad9374 81ad9240 e42bdf54 e42bdf40 8025a85c 8028bff0 [ 120.278739][ T3770] df40: e42bdfb0 40000000 e42bdf84 e42bdf58 80220bf8 8025a818 00000000 8281d27c [ 120.279502][ T3770] df60: e42bdfb0 0013ddc0 ecac8b10 80220b4c 00000000 70b45e36 e42bdfac 00000000 [ 120.280249][ T3770] df80: 00000000 00346310 00000036 8020029c 840eec00 00000036 00000000 e42bdfa8 [ 120.281095][ T3770] dfa0: 80200060 8058f320 00000000 00000000 00000003 40946400 200000c0 00000000 [ 120.281957][ T3770] dfc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f630dc [ 120.282779][ T3770] dfe0: 76f62e88 76f62e78 00018734 0012fc20 60000010 00000003 00000000 00000000 [ 120.283563][ T3770] Call trace: [ 120.284047][ T3770] [<81436200>] (subdev_8255_io) from [<81435f3c>] (subdev_8255_do_config+0x58/0x60) [ 120.285913][ T3770] r7:00004f27 r6:833d8840 r5:00004f27 r4:81436200 [ 120.286286][ T3770] [<81435ee4>] (subdev_8255_do_config) from [<814362f4>] (subdev_8255_io_init+0x88/0x98) [ 120.286758][ T3770] r4:858e3000 [ 120.286977][ T3770] [<8143626c>] (subdev_8255_io_init) from [<814364a4>] (dev_8255_attach+0x74/0x120) [ 120.287697][ T3770] r7:00004f27 r6:858e3000 r5:00000000 r4:833d8840 [ 120.288001][ T3770] [<81436430>] (dev_8255_attach) from [<81424e90>] (comedi_device_attach+0x10c/0x248) [ 120.288422][ T3770] r10:82b2df9c r9:00000000 r8:833d8840 r7:e42bdd90 r6:00000000 r5:833d8840 [ 120.288772][ T3770] r4:829d6504 [ 120.288983][ T3770] [<81424d84>] (comedi_device_attach) from [<814207c8>] (do_devconfig_ioctl+0xd4/0x21c) [ 120.289405][ T3770] r10:833d8870 r9:00000003 r8:840eec00 r7:40946400 r6:b5403587 r5:833d8840 [ 120.289886][ T3770] r4:200000c0 [ 120.290102][ T3770] [<814206f4>] (do_devconfig_ioctl) from [<81421348>] (comedi_unlocked_ioctl+0x104/0x1c80) [ 120.290524][ T3770] r8:840eec00 r7:40946400 r6:200000c0 r5:833d8840 r4:83eff000 [ 120.290870][ T3770] [<81421244>] (comedi_unlocked_ioctl) from [<8058f558>] (sys_ioctl+0x244/0xb5c) [ 120.291438][ T3770] r10:840eec00 r9:00000003 r8:83eff000 r7:200000c0 r6:40946400 r5:83eff001 [ 120.291757][ T3770] r4:00000000 [ 120.291924][ T3770] [<8058f314>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 120.292384][ T3770] Exception stack(0xe42bdfa8 to 0xe42bdff0) [ 120.292731][ T3770] dfa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 120.293174][ T3770] dfc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f630dc [ 120.293522][ T3770] dfe0: 76f62e88 76f62e78 00018734 0012fc20 [ 120.293792][ T3770] r10:00000036 r9:840eec00 r8:8020029c r7:00000036 r6:00346310 r5:00000000 [ 120.294124][ T3770] r4:00000000 [ 120.294634][ T3770] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 120.296281][ T3770] ---[ end trace 0000000000000000 ]--- [ 120.306262][ T3770] Kernel panic - not syncing: Fatal exception [ 120.310964][ T3770] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:52:11 Registers: info registers vcpu 0 CPU#0 R00=00000003 R01=7ec43858 R02=00000044 R03=00004000 R04=00000000 R05=00000000 R06=7ec43858 R07=00000121 R08=7ec43858 R09=00000029 R10=00000044 R11=00000000 R12=00000001 R13=7ec43770 R14=00000000 R15=76dc3590 PSR=200e0010 --C- A S usr32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=74786574 s03=7379733d d01=7379733d74786574 s04=4455205d s05=74694c50 d02=74694c504455205d s06=203a3665 s07=2d504455 d03=2d504455203a3665 s08=6574694c s09=20736920 d04=207369206574694c s10=72706564 s11=74616365 d05=7461636572706564 s12=61206465 s13=7320646e d06=7320646e61206465 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=2055c994 R01=7effffff R02=00000000 R03=b5403587 R04=e0141ee0 R05=2055c980 R06=b5003500 R07=00000000 R08=00000000 R09=00000002 R10=e0141d4c R11=e0141dfc R12=a155c997 R13=e0141d40 R14=815b8c64 R15=815b8c64 PSR=80000113 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000