last executing test programs: 49.073339574s ago: executing program 0 (id=6): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r3 = eventfd2(0x45, 0x0) dup2(r3, r2) write$eventfd(r3, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, 0x0, 0x0) 46.242859188s ago: executing program 0 (id=9): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c56090", 0x3b, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000640)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 28.112489766s ago: executing program 0 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, 0x0, 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x1f, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r4, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r4, &(0x7f0000000240), &(0x7f0000000540)=""/32}, 0x20) 26.469584995s ago: executing program 1 (id=20): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) writev(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000400)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r11}) 19.212730702s ago: executing program 0 (id=21): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f00000000c0)=0xeb03, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x2d, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00'}) tkill(0x0, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, &(0x7f0000001f00)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000033c0)={'syztnl2\x00', &(0x7f0000003340)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x7f, 0xb43, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x8000, 0x8000, 0xa90, 0x80000}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001d40)={0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001e80)=[{&(0x7f0000001dc0)="9d491054a48f1d05cf5dab5d354c2b95cbed52a87afa", 0x16}, {&(0x7f0000001e00)="5207be60ae82a409ffa7e2b085f81e32a006e3b15faa62cd0ed701abe34b58af3d2a1c33313cf1219e9bac6b5a3a6075c5622133a8a044561022ff8ba5cfb11226fcbe54c20d5d9cf4e7af7396061ead6aa33f5c15789add8ea2277fd988f78e37be9944cb93290c8968aea5c938053290ba2a", 0x73}], 0x2}}], 0x3, 0x30000000) 17.850375368s ago: executing program 1 (id=22): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = landlock_create_ruleset(&(0x7f0000000340)={0x7307, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) io_getevents(0x0, 0x86, 0x0, &(0x7f0000000140), &(0x7f00000002c0)={0x77359400}) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_freeze_timeout', 0x42, 0x0) 17.643804467s ago: executing program 1 (id=23): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_open_pts(0xffffffffffffffff, 0x0) clock_settime(0x0, 0x0) ioctl$TIOCGRS485(r0, 0x5418, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 11.002176038s ago: executing program 0 (id=24): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) pause() 9.031000179s ago: executing program 1 (id=25): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000740), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x9237, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000001cc0)='1', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000180)={r3}) 8.901147884s ago: executing program 1 (id=26): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) fcntl$dupfd(r0, 0x406, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000006d0000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000300000008000000080000", @ANYRES32, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB="0400"/20], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ptrace$setopts(0x4200, r4, 0x100, 0x53) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) 8.381320451s ago: executing program 0 (id=27): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r4 = eventfd2(0x45, 0x0) dup2(r4, r3) write$eventfd(r4, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/37, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000001c0)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) syz_usb_disconnect(r1) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000180)) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) 0s ago: executing program 1 (id=28): syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f505010203010902"], 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) kernel console output (not intermixed with test programs): [ 54.955254][ T31] audit: type=1400 audit(54.880:68): avc: denied { read write } for pid=3104 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.960391][ T31] audit: type=1400 audit(54.880:69): avc: denied { open } for pid=3104 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:27773' (ED25519) to the list of known hosts. [ 65.484090][ T31] audit: type=1400 audit(65.390:70): avc: denied { name_bind } for pid=3105 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 67.638420][ T31] audit: type=1400 audit(67.540:71): avc: denied { execute } for pid=3107 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 67.690047][ T31] audit: type=1400 audit(67.610:72): avc: denied { execute_no_trans } for pid=3107 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 71.452725][ T31] audit: type=1400 audit(71.380:73): avc: denied { mounton } for pid=3107 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 71.462491][ T31] audit: type=1400 audit(71.380:74): avc: denied { mount } for pid=3107 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 71.476738][ T3107] cgroup: Unknown subsys name 'net' [ 71.486557][ T31] audit: type=1400 audit(71.410:75): avc: denied { unmount } for pid=3107 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 71.697502][ T3107] cgroup: Unknown subsys name 'cpuset' [ 71.703430][ T3107] cgroup: Unknown subsys name 'hugetlb' [ 71.704477][ T3107] cgroup: Unknown subsys name 'rlimit' [ 72.086599][ T31] audit: type=1400 audit(72.010:76): avc: denied { setattr } for pid=3107 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.089859][ T31] audit: type=1400 audit(72.020:77): avc: denied { mounton } for pid=3107 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 72.090850][ T31] audit: type=1400 audit(72.020:78): avc: denied { mount } for pid=3107 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 72.259347][ T3109] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 72.260220][ T31] audit: type=1400 audit(72.190:79): avc: denied { relabelto } for pid=3109 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 72.263074][ T31] audit: type=1400 audit(72.190:80): avc: denied { write } for pid=3109 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 72.290991][ T31] audit: type=1400 audit(72.220:81): avc: denied { read } for pid=3107 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 72.293093][ T31] audit: type=1400 audit(72.220:82): avc: denied { open } for pid=3107 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 80.381157][ T3107] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.477201][ T31] audit: type=1400 audit(82.400:83): avc: denied { execmem } for pid=3110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 82.518842][ T31] audit: type=1400 audit(82.450:84): avc: denied { read } for pid=3112 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.519983][ T31] audit: type=1400 audit(82.450:85): avc: denied { open } for pid=3112 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.526012][ T31] audit: type=1400 audit(82.450:86): avc: denied { mounton } for pid=3112 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 82.548463][ T31] audit: type=1400 audit(82.480:87): avc: denied { module_request } for pid=3112 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 82.644780][ T31] audit: type=1400 audit(82.570:88): avc: denied { sys_module } for pid=3112 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 83.262899][ T31] audit: type=1400 audit(83.190:89): avc: denied { ioctl } for pid=3112 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=691 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.468528][ T3112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.482919][ T3112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.022439][ T3113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.034731][ T3113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.463866][ T3112] hsr_slave_0: entered promiscuous mode [ 85.469678][ T3112] hsr_slave_1: entered promiscuous mode [ 85.917802][ T31] audit: type=1400 audit(85.840:90): avc: denied { create } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.920140][ T31] audit: type=1400 audit(85.850:91): avc: denied { write } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.922416][ T31] audit: type=1400 audit(85.850:92): avc: denied { read } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.930405][ T3112] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.948476][ T3112] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.959717][ T3112] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.970429][ T3112] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.331754][ T3113] hsr_slave_0: entered promiscuous mode [ 86.335077][ T3113] hsr_slave_1: entered promiscuous mode [ 86.338877][ T3113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.339506][ T3113] Cannot create hsr debugfs directory [ 86.669865][ T3113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.679927][ T3113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.708225][ T3113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.720116][ T3113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.822370][ T3112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.640532][ T3113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.489943][ T3112] veth0_vlan: entered promiscuous mode [ 90.517287][ T3112] veth1_vlan: entered promiscuous mode [ 90.619878][ T3112] veth0_macvtap: entered promiscuous mode [ 90.636274][ T3112] veth1_macvtap: entered promiscuous mode [ 90.711230][ T3112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.712117][ T3112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.712632][ T3112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.713064][ T3112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.897949][ T31] audit: type=1400 audit(90.820:93): avc: denied { mount } for pid=3112 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.899281][ T31] audit: type=1400 audit(90.820:94): avc: denied { mounton } for pid=3112 comm="syz-executor" path="/syzkaller.0H2HDW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.906118][ T31] audit: type=1400 audit(90.830:95): avc: denied { mount } for pid=3112 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 90.918471][ T31] audit: type=1400 audit(90.850:96): avc: denied { mounton } for pid=3112 comm="syz-executor" path="/syzkaller.0H2HDW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 90.921640][ T31] audit: type=1400 audit(90.850:97): avc: denied { mounton } for pid=3112 comm="syz-executor" path="/syzkaller.0H2HDW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 90.930310][ T31] audit: type=1400 audit(90.860:98): avc: denied { unmount } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 90.936239][ T31] audit: type=1400 audit(90.860:99): avc: denied { mounton } for pid=3112 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 90.948051][ T31] audit: type=1400 audit(90.870:100): avc: denied { mount } for pid=3112 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.949209][ T31] audit: type=1400 audit(90.870:101): avc: denied { mounton } for pid=3112 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 90.950199][ T31] audit: type=1400 audit(90.870:102): avc: denied { mount } for pid=3112 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 91.020245][ T3112] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.624551][ T3113] veth0_vlan: entered promiscuous mode [ 91.693017][ T3113] veth1_vlan: entered promiscuous mode [ 91.840606][ T3113] veth0_macvtap: entered promiscuous mode [ 91.863970][ T3113] veth1_macvtap: entered promiscuous mode [ 92.090713][ T3113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.099824][ T3113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.104983][ T3113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.107975][ T3113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.198841][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 96.198957][ T31] audit: type=1400 audit(96.130:119): avc: denied { create } for pid=3828 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.222651][ T31] audit: type=1400 audit(96.150:120): avc: denied { getopt } for pid=3828 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.234972][ T31] audit: type=1400 audit(96.160:121): avc: denied { setopt } for pid=3828 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.594433][ T31] audit: type=1400 audit(97.520:122): avc: denied { create } for pid=3832 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.614560][ T31] audit: type=1400 audit(97.540:123): avc: denied { ioctl } for pid=3832 comm="syz.0.9" path="socket:[1807]" dev="sockfs" ino=1807 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.780836][ T3834] ubi1: attaching mtd0 [ 97.893057][ T31] audit: type=1400 audit(97.820:124): avc: denied { create } for pid=3830 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.901033][ T31] audit: type=1400 audit(97.830:125): avc: denied { getopt } for pid=3830 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.071247][ T31] audit: type=1400 audit(100.000:126): avc: denied { create } for pid=3835 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 100.082178][ T31] audit: type=1400 audit(100.010:127): avc: denied { write } for pid=3835 comm="syz.1.10" path="socket:[1812]" dev="sockfs" ino=1812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 100.095004][ T31] audit: type=1400 audit(100.010:128): avc: denied { nlmsg_write } for pid=3835 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 116.422895][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 116.423005][ T31] audit: type=1400 audit(116.350:131): avc: denied { create } for pid=3852 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.544639][ T3853] Zero length message leads to an empty skb [ 116.657991][ T31] audit: type=1400 audit(116.590:132): avc: denied { bind } for pid=3856 comm="syz.1.17" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.659716][ T31] audit: type=1400 audit(116.590:133): avc: denied { name_bind } for pid=3856 comm="syz.1.17" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 116.660969][ T31] audit: type=1400 audit(116.590:134): avc: denied { node_bind } for pid=3856 comm="syz.1.17" saddr=::ffff:172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 116.860163][ T31] audit: type=1400 audit(116.790:135): avc: denied { map_create } for pid=3860 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.864705][ T31] audit: type=1400 audit(116.790:136): avc: denied { map_read map_write } for pid=3860 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.881848][ T3861] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 116.882527][ T3861] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 116.889039][ T3861] hsr_slave_0: left promiscuous mode [ 116.896115][ T3861] hsr_slave_1: left promiscuous mode [ 125.793374][ T31] audit: type=1400 audit(125.710:137): avc: denied { create } for pid=3873 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.998439][ T3878] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.011383][ T31] audit: type=1400 audit(126.940:138): avc: denied { ioctl } for pid=3875 comm="syz.1.23" path="socket:[2608]" dev="sockfs" ino=2608 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.593867][ T31] audit: type=1400 audit(132.520:139): avc: denied { create } for pid=3879 comm="syz.0.24" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.594915][ T31] audit: type=1400 audit(132.520:140): avc: denied { map } for pid=3879 comm="syz.0.24" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=1875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.595826][ T31] audit: type=1400 audit(132.520:141): avc: denied { read write } for pid=3879 comm="syz.0.24" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=1875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 134.688050][ T31] audit: type=1400 audit(134.620:142): avc: denied { write } for pid=3885 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.699955][ T3886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26'. [ 135.470670][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.689937][ T46] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.690520][ T46] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 135.691015][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.691512][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 135.691938][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 135.709035][ T46] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.709558][ T46] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.709873][ T46] usb 1-1: Product: syz [ 135.710087][ T46] usb 1-1: Manufacturer: syz [ 135.739317][ T46] cdc_wdm 1-1:1.0: skipping garbage [ 135.739766][ T46] cdc_wdm 1-1:1.0: skipping garbage [ 135.742857][ T46] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 136.504953][ T24] usb 1-1: USB disconnect, device number 2 [ 137.189081][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.378002][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 137.378559][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 137.379388][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 137.379820][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 137.380583][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 137.392249][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 137.392801][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 137.393139][ T24] usb 1-1: Product: syz [ 137.393351][ T24] usb 1-1: Manufacturer: syz [ 137.435522][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 137.435965][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 137.444593][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 143.937619][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 144.088503][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 144.111912][ T24] usb 2-1: config 0 has no interfaces? [ 144.131846][ T24] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 144.132512][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.132910][ T24] usb 2-1: Product: syz [ 144.133109][ T24] usb 2-1: Manufacturer: syz [ 144.133309][ T24] usb 2-1: SerialNumber: syz [ 144.138696][ T24] usb 2-1: config 0 descriptor?? [ 144.366993][ T31] audit: type=1400 audit(144.290:143): avc: denied { ioctl } for pid=3917 comm="syz.1.28" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=1894 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.396619][ T3918] ------------[ cut here ]------------ [ 144.398936][ T3918] WARNING: CPU: 1 PID: 3918 at mm/highmem.c:622 kunmap_local_indexed+0x20c/0x224 [ 144.400376][ T3918] Modules linked in: [ 144.403041][ T3918] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 144.405668][ T3918] CPU: 1 UID: 0 PID: 3918 Comm: syz.1.28 Not tainted 6.12.0-rc2-syzkaller #0 [ 144.406412][ T3918] Hardware name: ARM-Versatile Express [ 144.407090][ T3918] Call trace: [ 144.407673][ T3918] [<819991d8>] (dump_backtrace) from [<819992d4>] (show_stack+0x18/0x1c) [ 144.408858][ T3918] r7:00000000 r6:82622f44 r5:00000000 r4:8203d408 [ 144.409407][ T3918] [<819992bc>] (show_stack) from [<819b7764>] (dump_stack_lvl+0x54/0x7c) [ 144.409808][ T3918] [<819b7710>] (dump_stack_lvl) from [<819b77a4>] (dump_stack+0x18/0x1c) [ 144.410163][ T3918] r5:00000000 r4:82870d18 [ 144.410391][ T3918] [<819b778c>] (dump_stack) from [<81999e00>] (panic+0x120/0x374) [ 144.410730][ T3918] [<81999ce0>] (panic) from [<802420e0>] (get_taint+0x0/0x1c) [ 144.411138][ T3918] r3:8260c5c4 r2:00000001 r1:820257e8 r0:8202d250 [ 144.411519][ T3918] r7:8048c6b4 [ 144.411793][ T3918] [<8024206c>] (check_panic_on_warn) from [<80242244>] (__warn+0x80/0x188) [ 144.412499][ T3918] [<802421c4>] (__warn) from [<802424c4>] (warn_slowpath_fmt+0x178/0x1f4) [ 144.413010][ T3918] r8:00000009 r7:82054e4c r6:dfbd5d24 r5:85078c00 r4:00000000 [ 144.413337][ T3918] [<80242350>] (warn_slowpath_fmt) from [<8048c6b4>] (kunmap_local_indexed+0x20c/0x224) [ 144.413860][ T3918] r10:ffedcfe8 r9:83fd8300 r8:20000000 r7:00000000 r6:00000003 r5:85078c00 [ 144.414252][ T3918] r4:ffedc000 [ 144.414452][ T3918] [<8048c4a8>] (kunmap_local_indexed) from [<80505ad8>] (move_pages+0x7e8/0x149c) [ 144.414952][ T3918] r7:00000000 r6:84823300 r5:dee559cc r4:ffeda000 [ 144.415239][ T3918] [<805052f0>] (move_pages) from [<80581d18>] (userfaultfd_ioctl+0x114c/0x2080) [ 144.415680][ T3918] r10:83fd8300 r9:dfbd5e98 r8:00000001 r7:21000000 r6:00000000 r5:20000040 [ 144.416083][ T3918] r4:854e9000 [ 144.416281][ T3918] [<80580bcc>] (userfaultfd_ioctl) from [<8052f6e4>] (sys_ioctl+0x134/0xda8) [ 144.416796][ T3918] r10:85078c00 r9:842a3cc0 r8:00000004 r7:20000040 r6:842a3cc1 r5:00000000 [ 144.417166][ T3918] r4:c028aa05 [ 144.417368][ T3918] [<8052f5b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 144.417883][ T3918] Exception stack(0xdfbd5fa8 to 0xdfbd5ff0) [ 144.418606][ T3918] 5fa0: 00000000 00000000 00000004 c028aa05 20000040 00000000 [ 144.419137][ T3918] 5fc0: 00000000 00000000 002862f0 00000036 00000000 00006364 003d0f00 76b390bc [ 144.419557][ T3918] 5fe0: 76b38ec0 76b38eb0 00018af8 00132ec0 [ 144.419912][ T3918] r10:00000036 r9:85078c00 r8:8020029c r7:00000036 r6:002862f0 r5:00000000 [ 144.420364][ T3918] r4:00000000 [ 144.426233][ T3918] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:02:15 Registers: info registers vcpu 0 CPU#0 R00=827bbd38 R01=00000024 R02=ffffffff R03=819b95d0 R04=828b5200 R05=00006fd6 R06=00006fd6 R07=8711a000 R08=84990c1c R09=84990848 R10=00000000 R11=ec3a5c5c R12=ec3a5c60 R13=ec3a5c50 R14=8123aa74 R15=819b95e0 PSR=60000013 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=005927e9 s17=00000000 d08=00000000005927e9 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=01328401 s33=04080608 d16=0408060801328401 s34=02010000 s35=005ec080 d17=005ec08002010000 s36=000cb008 s37=30a60008 d18=30a60008000cb008 s38=08060a01 s39=01000002 d19=0100000208060a01 s40=00038002 s41=08848c08 d20=08848c0800038002 s42=02040800 s43=ffffffff d21=ffffffff02040800 s44=0a800303 s45=9e041000 d22=9e0410000a800303 s46=00060131 s47=08000008 d23=0800000800060131 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=7807e1c5 s53=ec9f3e77 d26=ec9f3e777807e1c5 s54=a9ee864f s55=879b05cb d27=879b05cba9ee864f s56=12267f98 s57=d7f907bf d28=d7f907bf12267f98 s58=a6cb34c4 s59=ee0c37fb d29=ee0c37fba6cb34c4 s60=0ee02874 s61=0b1390fa d30=0b1390fa0ee02874 s62=86049bba s63=5cab27f4 d31=5cab27f486049bba FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=8262a22c R01=60000093 R02=8262a234 R03=0000023b R04=8262a22c R05=828731a8 R06=00000000 R07=8262a1a8 R08=8262a22c R09=60000093 R10=00000001 R11=dfbd5b84 R12=dfbd5b88 R13=dfbd5b78 R14=819bfb8c R15=819c4ae8 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000