last executing test programs: 13.530263369s ago: executing program 1 (id=10): io_uring_setup(0x1, &(0x7f0000000100)={0x0, 0x1206, 0x10, 0x0, 0x4f}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r0, &(0x7f00000000c0)=""/81, 0x51) 13.369902093s ago: executing program 1 (id=12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000906010800000001000000000200ffff0900020073797a310000000008000940000000390600010007000000100008800c000780080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 13.258671243s ago: executing program 1 (id=13): r0 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x4a141) syz_usb_disconnect(0xffffffffffffffff) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000080)={0x6, "537fd55a7a82e30fb5c0aa0f85668b1f1cb5c75d4d512517a06e855b31386962a96b5021c7f123addab73ce2762751915c573727c60a5c7da86aad758b5df406"}) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 12.930223282s ago: executing program 1 (id=16): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r0, 0x100000000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r2, &(0x7f0000004d80)={0x2020}, 0x2020) 12.531388118s ago: executing program 1 (id=18): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x11, 0x0, @opaque="3e953c6c540c1e29bb"}}}}}, 0x0) 12.197955517s ago: executing program 1 (id=21): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.789674032s ago: executing program 0 (id=39): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e57", 0x19, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f408, 0x0) 1.430420633s ago: executing program 0 (id=40): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) 1.299795545s ago: executing program 0 (id=41): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg$inet6(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="81367f995f01fdee3d332f5309ba6f78d7e03653", 0x14}], 0x1}}], 0x1, 0x4004004) 990.006903ms ago: executing program 0 (id=42): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749bc}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r4, 0x0, 0x7e, 0x5, &(0x7f0000000700)="85653f4534", 0x1}) 460.496609ms ago: executing program 0 (id=43): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x2, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0x9}, {0xa, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000020008000100030000000500020003000000050002000800000024"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 0s ago: executing program 0 (id=44): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000380)={r3, 0x0, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) kernel console output (not intermixed with test programs): [ 47.443337][ T31] audit: type=1400 audit(47.390:56): avc: denied { read write } for pid=3074 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.443872][ T31] audit: type=1400 audit(47.390:57): avc: denied { open } for pid=3074 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:3515' (ED25519) to the list of known hosts. [ 58.739344][ T31] audit: type=1400 audit(58.650:58): avc: denied { name_bind } for pid=3077 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.468363][ T31] audit: type=1400 audit(60.410:59): avc: denied { execute } for pid=3078 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.517428][ T31] audit: type=1400 audit(60.450:60): avc: denied { execute_no_trans } for pid=3078 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.031821][ T31] audit: type=1400 audit(62.970:61): avc: denied { mounton } for pid=3078 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.032283][ T31] audit: type=1400 audit(62.970:62): avc: denied { mount } for pid=3078 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.071955][ T3078] cgroup: Unknown subsys name 'net' [ 63.081685][ T31] audit: type=1400 audit(63.020:63): avc: denied { unmount } for pid=3078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.228537][ T3078] cgroup: Unknown subsys name 'cpuset' [ 63.234937][ T3078] cgroup: Unknown subsys name 'hugetlb' [ 63.235865][ T3078] cgroup: Unknown subsys name 'rlimit' [ 63.519476][ T31] audit: type=1400 audit(63.460:64): avc: denied { setattr } for pid=3078 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.525760][ T31] audit: type=1400 audit(63.470:65): avc: denied { mounton } for pid=3078 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 63.527853][ T31] audit: type=1400 audit(63.470:66): avc: denied { mount } for pid=3078 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 63.731991][ T3080] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 63.741865][ T31] audit: type=1400 audit(63.680:67): avc: denied { relabelto } for pid=3080 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 63.744610][ T31] audit: type=1400 audit(63.690:68): avc: denied { write } for pid=3080 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 63.787914][ T31] audit: type=1400 audit(63.730:69): avc: denied { read } for pid=3078 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 63.790692][ T31] audit: type=1400 audit(63.730:70): avc: denied { open } for pid=3078 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 70.589568][ T3078] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.217644][ T31] audit: type=1400 audit(72.160:71): avc: denied { execmem } for pid=3081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.282522][ T31] audit: type=1400 audit(72.220:72): avc: denied { read } for pid=3083 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.286295][ T31] audit: type=1400 audit(72.230:73): avc: denied { open } for pid=3083 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.302141][ T31] audit: type=1400 audit(72.240:74): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 72.327141][ T31] audit: type=1400 audit(72.270:75): avc: denied { module_request } for pid=3083 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.410656][ T31] audit: type=1400 audit(72.350:76): avc: denied { sys_module } for pid=3084 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.067980][ T31] audit: type=1400 audit(73.010:77): avc: denied { ioctl } for pid=3084 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=675 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.196201][ T3083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.225437][ T3083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.254962][ T3084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.286076][ T3084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.068662][ T3083] hsr_slave_0: entered promiscuous mode [ 75.075833][ T3083] hsr_slave_1: entered promiscuous mode [ 75.173958][ T3084] hsr_slave_0: entered promiscuous mode [ 75.176029][ T3084] hsr_slave_1: entered promiscuous mode [ 75.179110][ T3084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.179526][ T3084] Cannot create hsr debugfs directory [ 75.576868][ T31] audit: type=1400 audit(75.520:78): avc: denied { create } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.579467][ T31] audit: type=1400 audit(75.520:79): avc: denied { write } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.586553][ T31] audit: type=1400 audit(75.530:80): avc: denied { read } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.599465][ T3083] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.621993][ T3083] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.632512][ T3083] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.645749][ T3083] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.662299][ T3084] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.690593][ T3084] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.705577][ T3084] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.720792][ T3084] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.237147][ T3084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.318963][ T3083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.662586][ T3083] veth0_vlan: entered promiscuous mode [ 78.686362][ T3083] veth1_vlan: entered promiscuous mode [ 78.746849][ T3083] veth0_macvtap: entered promiscuous mode [ 78.758276][ T3083] veth1_macvtap: entered promiscuous mode [ 78.818909][ T3083] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.820409][ T3083] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.825733][ T3083] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.826833][ T3083] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.958539][ T31] audit: type=1400 audit(78.890:81): avc: denied { mount } for pid=3083 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.966328][ T31] audit: type=1400 audit(78.910:82): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/syzkaller.IkxJxs/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.975358][ T31] audit: type=1400 audit(78.920:83): avc: denied { mount } for pid=3083 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.988885][ T31] audit: type=1400 audit(78.930:84): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/syzkaller.IkxJxs/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.995742][ T31] audit: type=1400 audit(78.940:85): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/syzkaller.IkxJxs/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 79.014237][ T31] audit: type=1400 audit(78.960:86): avc: denied { unmount } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 79.020606][ T31] audit: type=1400 audit(78.960:87): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 79.029524][ T31] audit: type=1400 audit(78.970:88): avc: denied { mount } for pid=3083 comm="syz-executor" name="/" dev="gadgetfs" ino=3108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 79.038150][ T31] audit: type=1400 audit(78.980:89): avc: denied { mount } for pid=3083 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.042657][ T31] audit: type=1400 audit(78.990:90): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 79.105436][ T3083] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.133148][ T3084] veth0_vlan: entered promiscuous mode [ 79.160261][ T3084] veth1_vlan: entered promiscuous mode [ 79.222577][ T3084] veth0_macvtap: entered promiscuous mode [ 79.228047][ T3084] veth1_macvtap: entered promiscuous mode [ 79.260330][ T3084] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.261740][ T3084] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.264167][ T3084] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.265855][ T3084] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.236638][ T3820] block nbd0: NBD_DISCONNECT [ 82.459512][ T3826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.018950][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 84.019273][ T31] audit: type=1400 audit(83.960:116): avc: denied { ioctl } for pid=3843 comm="syz.0.23" path="socket:[2199]" dev="sockfs" ino=2199 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.860710][ T31] audit: type=1400 audit(84.800:117): avc: denied { bpf } for pid=3848 comm="syz.0.24" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.584441][ T31] audit: type=1400 audit(85.530:118): avc: denied { write } for pid=3853 comm="syz.0.26" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.123580][ T3863] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET) [ 88.291628][ T31] audit: type=1400 audit(88.220:119): avc: denied { sqpoll } for pid=3873 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.296537][ T31] audit: type=1400 audit(88.240:120): avc: denied { map } for pid=3873 comm="syz.0.33" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.319491][ T31] audit: type=1400 audit(88.250:121): avc: denied { read write } for pid=3873 comm="syz.0.33" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.012706][ T31] audit: type=1400 audit(88.950:122): avc: denied { create } for pid=3878 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.061977][ T31] audit: type=1400 audit(89.000:123): avc: denied { setopt } for pid=3878 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.107810][ T31] audit: type=1400 audit(89.050:124): avc: denied { bind } for pid=3878 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.112386][ T31] audit: type=1400 audit(89.050:125): avc: denied { write } for pid=3878 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 91.843111][ T3884] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.847807][ T31] audit: type=1400 audit(91.790:126): avc: denied { ioctl } for pid=3883 comm="syz.0.37" path="socket:[3295]" dev="sockfs" ino=3295 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.948086][ T3886] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 91.957134][ T31] audit: type=1400 audit(91.900:127): avc: denied { prog_load } for pid=3885 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.960380][ T31] audit: type=1400 audit(91.900:128): avc: denied { perfmon } for pid=3885 comm="syz.0.38" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.995106][ T31] audit: type=1400 audit(91.940:129): avc: denied { prog_run } for pid=3885 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 92.273128][ T3888] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 92.277839][ T31] audit: type=1400 audit(92.220:130): avc: denied { name_bind } for pid=3887 comm="syz.0.39" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 92.308402][ T31] audit: type=1400 audit(92.250:131): avc: denied { node_bind } for pid=3887 comm="syz.0.39" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 92.756885][ T31] audit: type=1400 audit(92.700:132): avc: denied { bind } for pid=3891 comm="syz.0.41" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.057130][ T3899] ------------[ cut here ]------------ [ 94.057505][ T3899] WARNING: CPU: 0 PID: 3899 at kernel/dma/direct.h:87 dma_direct_map_sg+0x374/0x404 [ 94.061308][ T3899] Modules linked in: [ 94.063773][ T3899] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.064596][ T3899] CPU: 0 UID: 0 PID: 3899 Comm: syz.0.44 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT [ 94.064950][ T3899] Hardware name: ARM-Versatile Express [ 94.065233][ T3899] Call trace: [ 94.065473][ T3899] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 94.065909][ T3899] r7:00000000 r6:8282083c r5:00000000 r4:82259b24 [ 94.066287][ T3899] [<80201ae4>] (show_stack) from [<8021fdd8>] (dump_stack_lvl+0x54/0x7c) [ 94.066912][ T3899] [<8021fd84>] (dump_stack_lvl) from [<8021fe18>] (dump_stack+0x18/0x1c) [ 94.067425][ T3899] r5:00000000 r4:82a6dd18 [ 94.067695][ T3899] [<8021fe00>] (dump_stack) from [<80202614>] (panic+0x120/0x374) [ 94.068061][ T3899] [<802024f4>] (panic) from [<802585b8>] (get_taint+0x0/0x1c) [ 94.068266][ T3899] r3:8280c684 r2:00000001 r1:82240650 r0:82248000 [ 94.068361][ T3899] r7:803178cc [ 94.068447][ T3899] [<80258544>] (check_panic_on_warn) from [<8025871c>] (__warn+0x80/0x188) [ 94.068703][ T3899] [<8025869c>] (__warn) from [<8025899c>] (warn_slowpath_fmt+0x178/0x1f4) [ 94.068927][ T3899] r8:00000009 r7:82253df8 r6:dfc09c0c r5:83fdec00 r4:00000000 [ 94.069129][ T3899] [<80258828>] (warn_slowpath_fmt) from [<803178cc>] (dma_direct_map_sg+0x374/0x404) [ 94.069451][ T3899] r10:82ab9cb0 r9:00000000 r8:00000000 r7:8381f410 r6:85766a00 r5:00018000 [ 94.069688][ T3899] r4:857669c0 [ 94.069783][ T3899] [<80317558>] (dma_direct_map_sg) from [<8031602c>] (__dma_map_sg_attrs+0x4c/0x2fc) [ 94.070050][ T3899] r10:8555f600 r9:8381fb48 r8:00000001 r7:85766a00 r6:00000000 r5:8381f410 [ 94.070292][ T3899] r4:857669c0 [ 94.070406][ T3899] [<80315fe0>] (__dma_map_sg_attrs) from [<80316330>] (dma_map_sgtable+0x2c/0x40) [ 94.070645][ T3899] r10:8555f600 r9:8381fb48 r8:8555f6c0 r7:85766980 r6:85766980 r5:00000000 [ 94.070853][ T3899] r4:857669c0 [ 94.070913][ T3899] [<80316304>] (dma_map_sgtable) from [<80ad4a84>] (drm_gem_map_dma_buf+0x58/0xc4) [ 94.071504][ T3899] r4:857669c0 [ 94.071584][ T3899] [<80ad4a2c>] (drm_gem_map_dma_buf) from [<80b96078>] (dma_buf_map_attachment+0x50/0x164) [ 94.072069][ T3899] r7:85766980 r6:00000000 r5:00000000 r4:85766980 [ 94.072251][ T3899] [<80b96028>] (dma_buf_map_attachment) from [<80b961c8>] (dma_buf_map_attachment_unlocked+0x3c/0x78) [ 94.072577][ T3899] r7:85766980 r6:8381f800 r5:00000000 r4:85766980 [ 94.072797][ T3899] [<80b9618c>] (dma_buf_map_attachment_unlocked) from [<80ad5364>] (drm_gem_prime_import_dev+0x88/0x1a0) [ 94.073135][ T3899] r5:844a5d00 r4:85550500 [ 94.073268][ T3899] [<80ad52dc>] (drm_gem_prime_import_dev) from [<80ad59b8>] (drm_gem_prime_fd_to_handle+0x184/0x230) [ 94.073577][ T3899] r9:8381fb48 r8:8555f6c0 r7:dfc09e64 r6:8381f800 r5:8555f600 r4:85550500 [ 94.073756][ T3899] [<80ad5834>] (drm_gem_prime_fd_to_handle) from [<80ad5b78>] (drm_prime_fd_to_handle_ioctl+0x34/0x38) [ 94.074141][ T3899] r9:83fdec00 r8:8381f800 r7:dfc09e64 r6:80ad5b44 r5:8555f600 r4:00000000 [ 94.074480][ T3899] [<80ad5b44>] (drm_prime_fd_to_handle_ioctl) from [<80ac70d0>] (drm_ioctl_kernel+0xb8/0x120) [ 94.076670][ T3899] r5:8555f600 r4:00000020 [ 94.077089][ T3899] [<80ac7018>] (drm_ioctl_kernel) from [<80ac739c>] (drm_ioctl+0x264/0x5b0) [ 94.077465][ T3899] r8:81d38d28 r7:8381f800 r6:c00c642e r5:0000000c r4:0000000c [ 94.077895][ T3899] [<80ac7138>] (drm_ioctl) from [<8056f17c>] (sys_ioctl+0x130/0xdc8) [ 94.078312][ T3899] r10:83fdec00 r9:853cea80 r8:00000003 r7:200000c0 r6:853cea81 r5:00000000 [ 94.078504][ T3899] r4:c00c642e [ 94.078689][ T3899] [<8056f04c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 94.078977][ T3899] Exception stack(0xdfc09fa8 to 0xdfc09ff0) [ 94.079331][ T3899] 9fa0: 00000000 00000000 00000003 c00c642e 200000c0 00000000 [ 94.079602][ T3899] 9fc0: 00000000 00000000 002e6300 00000036 002d0000 00000000 00006364 76b9d0bc [ 94.079783][ T3899] 9fe0: 76b9cec0 76b9ceb0 00019384 00131f20 [ 94.079982][ T3899] r10:00000036 r9:83fdec00 r8:8020029c r7:00000036 r6:002e6300 r5:00000000 [ 94.080151][ T3899] r4:00000000 [ 94.083903][ T3899] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:08:25 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000002 R02=eafa9030 R03=00000030 R04=83c5ec40 R05=dfc09a28 R06=8295a130 R07=00000001 R08=82828458 R09=00000000 R10=00000385 R11=dfc099c4 R12=dfc09968 R13=dfc099a8 R14=81a3105c R15=80a71d74 PSR=80000093 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=201cef70 R02=00000008 R03=00000008 R04=82950490 R05=84453000 R06=00000000 R07=b5403587 R08=848fa464 R09=e03d5e40 R10=001cef70 R11=e03d5e1c R12=00000000 R13=e03d5df8 R14=8096bf54 R15=81722840 PSR=00000013 ---- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000