last executing test programs: 5.298824183s ago: executing program 1 (id=21): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_usb_disconnect(r0) close_range(r1, 0xffffffffffffffff, 0x0) 3.988583871s ago: executing program 1 (id=31): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01080000000082ffe5009800000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000028005080"], 0x50}}, 0x40000) 3.300515377s ago: executing program 0 (id=33): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) dup(r0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_io_uring_setup(0xfce, &(0x7f00000003c0)={0x0, 0x6, 0x1, 0x2, 0x220}, &(0x7f0000000700), &(0x7f0000000540)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 2.760063236s ago: executing program 0 (id=34): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x3) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e"], 0x64}}, 0x0) 2.630797503s ago: executing program 1 (id=35): semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f00000000c0)=""/59) 2.472891951s ago: executing program 0 (id=36): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000f2f000/0x3000)=nil, 0x3000}) 2.436872443s ago: executing program 1 (id=37): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) 2.071006581s ago: executing program 0 (id=38): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.319126341s ago: executing program 0 (id=39): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0) 759.40396ms ago: executing program 0 (id=40): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) 341.846382ms ago: executing program 1 (id=41): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002500), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000bcdbdf2501000000050001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20005000) 0s ago: executing program 1 (id=42): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 47.579430][ T31] audit: type=1400 audit(47.480:56): avc: denied { read write } for pid=3093 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.582706][ T31] audit: type=1400 audit(47.480:57): avc: denied { open } for pid=3093 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:19295' (ED25519) to the list of known hosts. [ 59.067449][ T31] audit: type=1400 audit(58.970:58): avc: denied { name_bind } for pid=3096 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 61.025371][ T31] audit: type=1400 audit(60.920:59): avc: denied { execute } for pid=3097 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.085167][ T31] audit: type=1400 audit(60.980:60): avc: denied { execute_no_trans } for pid=3097 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.674570][ T31] audit: type=1400 audit(63.570:61): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.677592][ T31] audit: type=1400 audit(63.580:62): avc: denied { mount } for pid=3097 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.698940][ T3097] cgroup: Unknown subsys name 'net' [ 63.711120][ T31] audit: type=1400 audit(63.610:63): avc: denied { unmount } for pid=3097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.900140][ T3097] cgroup: Unknown subsys name 'cpuset' [ 63.906347][ T3097] cgroup: Unknown subsys name 'hugetlb' [ 63.907285][ T3097] cgroup: Unknown subsys name 'rlimit' [ 64.172926][ T31] audit: type=1400 audit(64.070:64): avc: denied { setattr } for pid=3097 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.177064][ T31] audit: type=1400 audit(64.080:65): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.181311][ T31] audit: type=1400 audit(64.080:66): avc: denied { mount } for pid=3097 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.410473][ T3099] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 64.417767][ T31] audit: type=1400 audit(64.320:67): avc: denied { relabelto } for pid=3099 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 64.423320][ T31] audit: type=1400 audit(64.320:68): avc: denied { write } for pid=3099 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 64.470855][ T31] audit: type=1400 audit(64.370:69): avc: denied { read } for pid=3097 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 64.471620][ T31] audit: type=1400 audit(64.370:70): avc: denied { open } for pid=3097 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 72.420399][ T3097] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.358822][ T31] audit: type=1400 audit(74.260:71): avc: denied { execmem } for pid=3100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 74.434602][ T31] audit: type=1400 audit(74.330:72): avc: denied { read } for pid=3102 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 74.435188][ T31] audit: type=1400 audit(74.330:73): avc: denied { open } for pid=3102 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 74.435605][ T31] audit: type=1400 audit(74.330:74): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 74.470338][ T31] audit: type=1400 audit(74.370:75): avc: denied { module_request } for pid=3103 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 74.470809][ T31] audit: type=1400 audit(74.370:76): avc: denied { module_request } for pid=3102 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 74.555661][ T31] audit: type=1400 audit(74.460:77): avc: denied { sys_module } for pid=3103 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.332932][ T31] audit: type=1400 audit(75.230:78): avc: denied { ioctl } for pid=3102 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=675 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.777782][ T3103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.782026][ T3102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.789086][ T3103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.811955][ T3102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.707405][ T3102] hsr_slave_0: entered promiscuous mode [ 77.711751][ T3102] hsr_slave_1: entered promiscuous mode [ 77.790324][ T3103] hsr_slave_0: entered promiscuous mode [ 77.791926][ T3103] hsr_slave_1: entered promiscuous mode [ 77.793280][ T3103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.793654][ T3103] Cannot create hsr debugfs directory [ 78.376209][ T31] audit: type=1400 audit(78.280:79): avc: denied { create } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.379845][ T31] audit: type=1400 audit(78.280:80): avc: denied { write } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.393135][ T3102] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.415857][ T3102] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.436073][ T3102] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.455597][ T3102] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.507757][ T3103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.521980][ T3103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.527437][ T3103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.531267][ T3103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.120943][ T3102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.277097][ T3103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.257062][ T3103] veth0_vlan: entered promiscuous mode [ 81.268741][ T3103] veth1_vlan: entered promiscuous mode [ 81.317110][ T3103] veth0_macvtap: entered promiscuous mode [ 81.326745][ T3103] veth1_macvtap: entered promiscuous mode [ 81.369358][ T3103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.369777][ T3103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.372280][ T3103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.372503][ T3103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.464994][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 81.465397][ T31] audit: type=1400 audit(81.360:82): avc: denied { mount } for pid=3103 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.485152][ T31] audit: type=1400 audit(81.360:83): avc: denied { mounton } for pid=3103 comm="syz-executor" path="/syzkaller.z1ssct/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.497942][ T31] audit: type=1400 audit(81.400:84): avc: denied { mount } for pid=3103 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.502523][ T31] audit: type=1400 audit(81.400:85): avc: denied { mounton } for pid=3103 comm="syz-executor" path="/syzkaller.z1ssct/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 81.516249][ T31] audit: type=1400 audit(81.420:86): avc: denied { mounton } for pid=3103 comm="syz-executor" path="/syzkaller.z1ssct/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 81.536972][ T31] audit: type=1400 audit(81.440:87): avc: denied { unmount } for pid=3103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.540628][ T31] audit: type=1400 audit(81.440:88): avc: denied { mounton } for pid=3103 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 81.549154][ T31] audit: type=1400 audit(81.440:89): avc: denied { mount } for pid=3103 comm="syz-executor" name="/" dev="gadgetfs" ino=2406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 81.558037][ T31] audit: type=1400 audit(81.460:90): avc: denied { mount } for pid=3103 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.562300][ T31] audit: type=1400 audit(81.460:91): avc: denied { mounton } for pid=3103 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 81.619218][ T3103] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.850300][ T3102] veth0_vlan: entered promiscuous mode [ 81.871917][ T3102] veth1_vlan: entered promiscuous mode [ 81.937239][ T3102] veth0_macvtap: entered promiscuous mode [ 81.948837][ T3102] veth1_macvtap: entered promiscuous mode [ 82.007578][ T3102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.010008][ T3102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.011237][ T3102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.012392][ T3102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.206140][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 87.206661][ T31] audit: type=1400 audit(87.090:105): avc: denied { connect } for pid=3893 comm="syz.1.7" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.991564][ T31] audit: type=1400 audit(87.880:106): avc: denied { ioctl } for pid=3916 comm="syz.0.13" path="socket:[877]" dev="sockfs" ino=877 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.005385][ T31] audit: type=1400 audit(87.910:107): avc: denied { unmount } for pid=3103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 88.078782][ T31] audit: type=1400 audit(87.980:108): avc: denied { read } for pid=3924 comm="syz.1.15" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.083080][ T31] audit: type=1400 audit(87.980:109): avc: denied { open } for pid=3924 comm="syz.1.15" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.089872][ T31] audit: type=1400 audit(87.990:110): avc: denied { map } for pid=3924 comm="syz.1.15" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.093501][ T3925] binder: binder_mmap: 3924 20000000-20b36000 bad vm_flags failed -1 [ 88.390970][ T31] audit: type=1400 audit(88.290:111): avc: denied { create } for pid=3935 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.417636][ T31] audit: type=1400 audit(88.310:112): avc: denied { bind } for pid=3935 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.673556][ T31] audit: type=1400 audit(88.570:113): avc: denied { setopt } for pid=3935 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.056696][ T3798] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.215473][ T3798] usb 2-1: Using ep0 maxpacket: 8 [ 89.230254][ T3798] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 89.230869][ T3798] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.231031][ T3798] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.231335][ T3798] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.231462][ T3798] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.231720][ T3798] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.231800][ T3798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.465112][ T3798] usb 2-1: GET_CAPABILITIES returned 0 [ 89.465550][ T3798] usbtmc 2-1:16.0: can't read capabilities [ 89.586655][ T31] audit: type=1400 audit(89.490:114): avc: denied { allowed } for pid=3971 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.692338][ T3798] usb 2-1: USB disconnect, device number 2 [ 90.205560][ T3986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 90.222427][ T3986] dummy0: entered promiscuous mode [ 90.227350][ T3986] batadv_slave_0: entered promiscuous mode [ 91.122430][ T3996] process 'syz.0.33' launched '/dev/fd/6' with NULL argv: empty string added [ 92.045418][ T11] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.244679][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 92.268406][ T11] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 92.296555][ T11] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 92.306964][ T11] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 92.314444][ T11] usb 2-1: Product: syz [ 92.315304][ T11] usb 2-1: Manufacturer: syz [ 92.316142][ T11] usb 2-1: SerialNumber: syz [ 92.328909][ T11] usb 2-1: config 0 descriptor?? [ 92.334156][ T4007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.346047][ T11] hub 2-1:0.0: bad descriptor, ignoring hub [ 92.350715][ T11] hub 2-1:0.0: probe with driver hub failed with error -5 [ 93.535683][ T44] usb 2-1: USB disconnect, device number 3 [ 93.789094][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 93.798458][ T31] audit: type=1400 audit(93.690:133): avc: denied { create } for pid=4024 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.826292][ T31] audit: type=1400 audit(93.730:134): avc: denied { setopt } for pid=4024 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.175665][ T31] audit: type=1400 audit(94.050:135): avc: denied { name_bind } for pid=4033 comm="syz.1.42" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 94.178566][ T31] audit: type=1400 audit(94.080:136): avc: denied { node_bind } for pid=4033 comm="syz.1.42" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 94.240526][ T4030] ------------[ cut here ]------------ [ 94.241072][ T4030] WARNING: CPU: 1 PID: 4030 at mm/high ** replaying previous printk message ** [ 94.241072][ T4030] WARNING: CPU: 1 PID: 4030 at mm/highmem.c:622 kunmap_local_indexed+0x20c/0x224 [ 94.244626][ T4030] Modules linked in: [ 94.247299][ T4030] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.248576][ T4030] CPU: 1 UID: 0 PID: 4030 Comm: syz.0.40 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 94.249554][ T4030] Hardware name: ARM-Versatile Express [ 94.250116][ T4030] Call trace: [ 94.250629][ T4030] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 94.251804][ T4030] r7:00000000 r6:8282083c r5:00000000 r4:8225b4e0 [ 94.252198][ T4030] [<80201ae4>] (show_stack) from [<8021fdf4>] (dump_stack_lvl+0x54/0x7c) [ 94.252855][ T4030] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 94.253446][ T4030] r5:00000000 r4:82a6dd18 [ 94.253871][ T4030] [<8021fe1c>] (dump_stack) from [<80202614>] (panic+0x120/0x374) [ 94.254819][ T4030] [<802024f4>] (panic) from [<80258578>] (get_taint+0x0/0x1c) [ 94.255693][ T4030] r3:8280c684 r2:00000001 r1:82242028 r0:822499c0 [ 94.255974][ T4030] r7:804bc12c [ 94.256153][ T4030] [<80258504>] (check_panic_on_warn) from [<802586dc>] (__warn+0x80/0x188) [ 94.256534][ T4030] [<8025865c>] (__warn) from [<8025895c>] (warn_slowpath_fmt+0x178/0x1f4) [ 94.256977][ T4030] r8:00000009 r7:822752b8 r6:ea80dd1c r5:855db000 r4:00000000 [ 94.257312][ T4030] [<802587e8>] (warn_slowpath_fmt) from [<804bc12c>] (kunmap_local_indexed+0x20c/0x224) [ 94.257770][ T4030] r10:00000000 r9:deb61d1c r8:deb96be0 r7:00a00000 r6:00000003 r5:855db000 [ 94.258188][ T4030] r4:ffedc000 [ 94.258345][ T4030] [<804bbf20>] (kunmap_local_indexed) from [<805373a0>] (move_pages+0xb24/0x19c8) [ 94.258759][ T4030] r7:00a00000 r6:fffffff0 r5:858e3fdc r4:83e88900 [ 94.259039][ T4030] [<8053687c>] (move_pages) from [<805be4b4>] (userfaultfd_ioctl+0xff8/0x21c4) [ 94.259464][ T4030] r10:83e88900 r9:ea80de98 r8:21000000 r7:00000001 r6:00000000 r5:20000040 [ 94.259818][ T4030] r4:858fb000 [ 94.259960][ T4030] [<805bd4bc>] (userfaultfd_ioctl) from [<805679c4>] (sys_ioctl+0x130/0xdc8) [ 94.260421][ T4030] r10:855db000 r9:84e44900 r8:00000004 r7:20000040 r6:84e44901 r5:00000000 [ 94.261016][ T4030] r4:c028aa05 [ 94.261366][ T4030] [<80567894>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 94.262130][ T4030] Exception stack(0xea80dfa8 to 0xea80dff0) [ 94.262734][ T4030] dfa0: 00000000 00000000 00000004 c028aa05 20000040 00000000 [ 94.263306][ T4030] dfc0: 00000000 00000000 002f6300 00000036 002e0000 00000000 00006364 76b850bc [ 94.263969][ T4030] dfe0: 76b84ec0 76b84eb0 000193a4 00131fc0 [ 94.264489][ T4030] r10:00000036 r9:855db000 r8:8020029c r7:00000036 r6:002f6300 r5:00000000 [ 94.265118][ T4030] r4:00000000 [ 94.270053][ T4030] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:49:45 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000000 R02=8280c6a0 R03=81a25380 R04=00000006 R05=828f8dc8 R06=00000000 R07=828f8dc0 R08=83a80c00 R09=00000028 R10=828f8dc8 R11=df801e54 R12=df801e58 R13=df801e48 R14=80340894 R15=81a25390 PSR=00000193 ---- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=82820850 R02=00000007 R03=82828450 R04=82a6dd18 R05=00000000 R06=8282083c R07=00000000 R08=822499c0 R09=804bc12c R10=00000000 R11=ea80dc8c R12=ea80dc90 R13=ea80dc80 R14=802025a4 R15=802e2a68 PSR=20000093 --C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000