last executing test programs: 4.696114537s ago: executing program 0 (id=1): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3, {0x0, 0x0, 0x4}, 0x1}, 0x17) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.926003457s ago: executing program 1 (id=2): r0 = socket(0x29, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) 3.720914126s ago: executing program 0 (id=3): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x700, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @empty}}}}) 3.246730779s ago: executing program 0 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013f0000000000950000000000000095c372615dc8a75bf5226a0487c35d8ab7a10fcafb3a0508b9a4b1640e801faf6a6339fcd2b3fefa30b4670690ddacd9d5116a7061b5f9c5842119d7bd7e8c6d25324254"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r1}, &(0x7f0000000d00), &(0x7f0000000d40)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r1, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) 3.090239579s ago: executing program 0 (id=5): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="01"], 0x5c, 0x0) 2.88080812s ago: executing program 0 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) chdir(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) 2.629921168s ago: executing program 1 (id=7): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3, {0x0, 0x0, 0x4}, 0x1}, 0x17) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 1.049555506s ago: executing program 1 (id=8): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0xfff, 0x7}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 539.885635ms ago: executing program 1 (id=9): syz_io_uring_setup(0x68ec, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0) 0s ago: executing program 1 (id=10): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000218000/0x2000)=nil, &(0x7f000055e000/0x3000)=nil, 0x2000}) kernel console output (not intermixed with test programs): [ 48.390677][ T31] audit: type=1400 audit(48.320:68): avc: denied { read write } for pid=3102 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.414011][ T31] audit: type=1400 audit(48.340:69): avc: denied { open } for pid=3102 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:39341' (ED25519) to the list of known hosts. [ 59.147354][ T31] audit: type=1400 audit(59.060:70): avc: denied { name_bind } for pid=3103 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 61.225616][ T31] audit: type=1400 audit(61.140:71): avc: denied { execute } for pid=3105 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.235942][ T31] audit: type=1400 audit(61.170:72): avc: denied { execute_no_trans } for pid=3105 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 65.842331][ T31] audit: type=1400 audit(65.770:73): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.850250][ T31] audit: type=1400 audit(65.770:74): avc: denied { mount } for pid=3105 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.861394][ T3105] cgroup: Unknown subsys name 'net' [ 65.871170][ T31] audit: type=1400 audit(65.800:75): avc: denied { unmount } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.032792][ T3105] cgroup: Unknown subsys name 'hugetlb' [ 66.033919][ T3105] cgroup: Unknown subsys name 'rlimit' [ 66.321666][ T31] audit: type=1400 audit(66.250:76): avc: denied { setattr } for pid=3105 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.322777][ T31] audit: type=1400 audit(66.250:77): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.323645][ T31] audit: type=1400 audit(66.250:78): avc: denied { mount } for pid=3105 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.568787][ T3107] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.569830][ T31] audit: type=1400 audit(66.500:79): avc: denied { relabelto } for pid=3107 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.575433][ T31] audit: type=1400 audit(66.500:80): avc: denied { write } for pid=3107 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.603848][ T31] audit: type=1400 audit(66.530:81): avc: denied { read } for pid=3105 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.606201][ T31] audit: type=1400 audit(66.530:82): avc: denied { open } for pid=3105 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 73.501450][ T3105] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.655236][ T31] audit: type=1400 audit(75.580:83): avc: denied { execmem } for pid=3108 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 75.724400][ T31] audit: type=1400 audit(75.650:84): avc: denied { mounton } for pid=3110 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 75.726802][ T31] audit: type=1400 audit(75.650:85): avc: denied { mount } for pid=3110 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 75.732036][ T31] audit: type=1400 audit(75.660:86): avc: denied { read } for pid=3110 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.739643][ T31] audit: type=1400 audit(75.660:87): avc: denied { open } for pid=3110 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.756065][ T31] audit: type=1400 audit(75.690:88): avc: denied { mounton } for pid=3110 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 75.785392][ T31] audit: type=1400 audit(75.700:89): avc: denied { module_request } for pid=3111 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 75.863206][ T31] audit: type=1400 audit(75.790:90): avc: denied { sys_module } for pid=3111 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 76.592163][ T31] audit: type=1400 audit(76.520:91): avc: denied { ioctl } for pid=3110 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=691 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.100120][ T3110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.112804][ T3110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.236094][ T3111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.243386][ T3111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.161881][ T3110] hsr_slave_0: entered promiscuous mode [ 79.171894][ T3110] hsr_slave_1: entered promiscuous mode [ 79.272965][ T3111] hsr_slave_0: entered promiscuous mode [ 79.279086][ T3111] hsr_slave_1: entered promiscuous mode [ 79.281120][ T3111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.281477][ T3111] Cannot create hsr debugfs directory [ 79.447686][ T31] audit: type=1400 audit(79.380:92): avc: denied { create } for pid=3110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.457438][ T3110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.467523][ T3110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.479396][ T3110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.486741][ T3110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.756118][ T3111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.761205][ T3111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.768793][ T3111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.780665][ T3111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.388097][ T3110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.626581][ T3111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.341605][ T3110] veth0_vlan: entered promiscuous mode [ 83.370262][ T3110] veth1_vlan: entered promiscuous mode [ 83.446718][ T3110] veth0_macvtap: entered promiscuous mode [ 83.470396][ T3110] veth1_macvtap: entered promiscuous mode [ 83.528058][ T3110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.528890][ T3110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.529435][ T3110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.530518][ T3110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.628197][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 83.628300][ T31] audit: type=1400 audit(83.560:95): avc: denied { mount } for pid=3110 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.635944][ T31] audit: type=1400 audit(83.560:96): avc: denied { mounton } for pid=3110 comm="syz-executor" path="/syzkaller.KphMIf/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.636845][ T31] audit: type=1400 audit(83.560:97): avc: denied { mount } for pid=3110 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.651871][ T31] audit: type=1400 audit(83.580:98): avc: denied { unmount } for pid=3110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.655459][ T31] audit: type=1400 audit(83.580:99): avc: denied { mounton } for pid=3110 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.662076][ T31] audit: type=1400 audit(83.590:100): avc: denied { mount } for pid=3110 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.774142][ T31] audit: type=1400 audit(83.700:101): avc: denied { read write } for pid=3110 comm="syz-executor" name="loop0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.785705][ T31] audit: type=1400 audit(83.700:102): avc: denied { open } for pid=3110 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.786600][ T31] audit: type=1400 audit(83.700:103): avc: denied { ioctl } for pid=3110 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=635 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.849192][ T31] audit: type=1400 audit(83.780:104): avc: denied { create } for pid=3786 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.176328][ T3111] veth0_vlan: entered promiscuous mode [ 84.193581][ T3111] veth1_vlan: entered promiscuous mode [ 84.263097][ T3111] veth0_macvtap: entered promiscuous mode [ 84.274108][ T3111] veth1_macvtap: entered promiscuous mode [ 84.337707][ T3111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.338302][ T3111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.338672][ T3111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.339020][ T3111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.805941][ T3809] wg2: entered promiscuous mode [ 87.806647][ T3809] wg2: entered allmulticast mode [ 90.368378][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 90.368485][ T31] audit: type=1400 audit(90.300:124): avc: denied { ioctl } for pid=3813 comm="syz.1.10" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3168 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.389010][ T3814] ------------[ cut here ]------------ [ 90.389588][ T3814] WARNING: CPU: 0 PID: 3814 at mm/highmem.c:622 kunmap_local_indexed+0x210/0x228 [ 90.391093][ T3814] Modules linked in: [ 90.399393][ T3814] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.400562][ T3814] CPU: 0 UID: 0 PID: 3814 Comm: syz.1.10 Not tainted 6.11.0-rc6-syzkaller #0 [ 90.401237][ T3814] Hardware name: ARM-Versatile Express [ 90.401721][ T3814] Call trace: [ 90.402170][ T3814] [<8195d098>] (dump_backtrace) from [<8195d194>] (show_stack+0x18/0x1c) [ 90.402916][ T3814] r7:00000000 r6:826228c4 r5:00000000 r4:8200ca04 [ 90.403267][ T3814] [<8195d17c>] (show_stack) from [<8197aeb4>] (dump_stack_lvl+0x54/0x7c) [ 90.403642][ T3814] [<8197ae60>] (dump_stack_lvl) from [<8197aef4>] (dump_stack+0x18/0x1c) [ 90.404018][ T3814] r5:00000000 r4:8286dd18 [ 90.404224][ T3814] [<8197aedc>] (dump_stack) from [<8195dc3c>] (panic+0x120/0x368) [ 90.404630][ T3814] [<8195db1c>] (panic) from [<802421e4>] (get_taint+0x0/0x1c) [ 90.405083][ T3814] r3:8260c5c4 r2:00000001 r1:81ff5228 r0:81ffd000 [ 90.405409][ T3814] r7:8048178c [ 90.405609][ T3814] [<80242170>] (check_panic_on_warn) from [<80242338>] (__warn+0x7c/0x180) [ 90.406127][ T3814] [<802422bc>] (__warn) from [<802425b4>] (warn_slowpath_fmt+0x178/0x1f4) [ 90.406585][ T3814] r8:00000009 r7:82024538 r6:e0175d14 r5:84f3a400 r4:00000000 [ 90.407035][ T3814] [<80242440>] (warn_slowpath_fmt) from [<8048178c>] (kunmap_local_indexed+0x210/0x228) [ 90.409758][ T3814] r10:ffefd0c0 r9:8414a400 r8:2055e000 r7:ffffffef r6:00000003 r5:84f3a400 [ 90.411066][ T3814] r4:ffefd000 [ 90.412254][ T3814] [<8048157c>] (kunmap_local_indexed) from [<804f7e78>] (move_pages+0x7e8/0x14a0) [ 90.412957][ T3814] r7:ffffffef r6:00000000 r5:85162810 r4:ffefbaf0 [ 90.413253][ T3814] [<804f7690>] (move_pages) from [<80572e94>] (userfaultfd_ioctl+0x1260/0x2314) [ 90.415693][ T3814] r10:2021a000 r9:e0175e98 r8:20000000 r7:8414a400 r6:00000001 r5:00000000 [ 90.420257][ T3814] r4:851d9000 [ 90.423268][ T3814] [<80571c34>] (userfaultfd_ioctl) from [<80520d5c>] (sys_ioctl+0x134/0xda4) [ 90.425161][ T3814] r10:84f3a400 r9:00000003 r8:84166900 r7:20000000 r6:84166901 r5:00000000 [ 90.425515][ T3814] r4:c028aa05 [ 90.425705][ T3814] [<80520c28>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 90.426178][ T3814] Exception stack(0xe0175fa8 to 0xe0175ff0) [ 90.426644][ T3814] 5fa0: 00000000 00000000 00000003 c028aa05 20000000 00000000 [ 90.427081][ T3814] 5fc0: 00000000 00000000 002862f0 00000036 00000000 00006364 003d0f00 76b1a0bc [ 90.427531][ T3814] 5fe0: 76b19ec0 76b19eb0 000189f0 00132dd0 [ 90.427923][ T3814] r10:00000036 r9:84f3a400 r8:8020029c r7:00000036 r6:002862f0 r5:00000000 [ 90.428386][ T3814] r4:00000000 [ 90.430094][ T3814] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:04:34 Registers: info registers vcpu 0 CPU#0 R00=00000001 R01=00000000 R02=00000000 R03=84f3a400 R04=00000000 R05=00000004 R06=dddc5595 R07=00000000 R08=00000000 R09=00000000 R10=82629b38 R11=e0175bec R12=00000012 R13=e0175b68 R14=00010148 R15=802bcccc PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=802199f0 R01=00000000 R02=00000000 R03=00000038 R04=ddddb688 R05=82604d40 R06=00000015 R07=08283f40 R08=08166a80 R09=00000000 R10=836d0c00 R11=df805f04 R12=df805e58 R13=df805f08 R14=802fd9e4 R15=802fc00c PSR=20000193 --C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000