last executing test programs: 21.848642139s ago: executing program 0 (id=122): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611887000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x6, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x29, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3f}, 0x94) 21.44031407s ago: executing program 0 (id=123): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002c80)=ANY=[@ANYBLOB="480200001000010029bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 21.199329222s ago: executing program 0 (id=125): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001600)='\b', 0xfffffffffffffd68, 0x4004095, 0x0, 0xd56888b5705b13c6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x10da) 6.172314311s ago: executing program 0 (id=140): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x6) 5.158481534s ago: executing program 0 (id=142): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000080)=r2) close(r3) 5.010114201s ago: executing program 0 (id=143): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000cf00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1003}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r3, r4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x2f, 0x0, "f4f5f6e10dde8e6ca6992064b9ceaa389cef541f8de8270585d6e8824a651d91fc9885abcd138faf403c1080d47b57efe3c0dd95724c4d95cee871c1871fd3654fc699277fac544dac8010de109c03fe"}, 0xd8) sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="6795", 0x2}], 0x1}}], 0x2, 0x0) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) 4.602376832s ago: executing program 1 (id=144): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 3.526045118s ago: executing program 1 (id=145): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) 3.083884831s ago: executing program 1 (id=146): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc"], 0x8c}}, 0x0) 2.562777748s ago: executing program 1 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x4070bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) 229.868499ms ago: executing program 1 (id=148): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=149): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) kernel console output (not intermixed with test programs): [ 46.705773][ T31] audit: type=1400 audit(46.630:56): avc: denied { read write } for pid=3086 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.708777][ T31] audit: type=1400 audit(46.630:57): avc: denied { open } for pid=3086 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:14689' (ED25519) to the list of known hosts. [ 57.556541][ T31] audit: type=1400 audit(57.480:58): avc: denied { name_bind } for pid=3089 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 59.843495][ T31] audit: type=1400 audit(59.770:59): avc: denied { execute } for pid=3090 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 59.850077][ T31] audit: type=1400 audit(59.770:60): avc: denied { execute_no_trans } for pid=3090 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 62.399629][ T31] audit: type=1400 audit(62.330:61): avc: denied { mounton } for pid=3090 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 62.405086][ T31] audit: type=1400 audit(62.330:62): avc: denied { mount } for pid=3090 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.422496][ T3090] cgroup: Unknown subsys name 'net' [ 62.431710][ T31] audit: type=1400 audit(62.360:63): avc: denied { unmount } for pid=3090 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.653990][ T3090] cgroup: Unknown subsys name 'cpuset' [ 62.662152][ T3090] cgroup: Unknown subsys name 'hugetlb' [ 62.665868][ T3090] cgroup: Unknown subsys name 'rlimit' [ 62.949472][ T31] audit: type=1400 audit(62.880:64): avc: denied { setattr } for pid=3090 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.953994][ T31] audit: type=1400 audit(62.880:65): avc: denied { mounton } for pid=3090 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 62.960872][ T31] audit: type=1400 audit(62.890:66): avc: denied { mount } for pid=3090 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 63.090835][ T3092] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 63.096820][ T31] audit: type=1400 audit(63.020:67): avc: denied { relabelto } for pid=3092 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 63.099131][ T31] audit: type=1400 audit(63.030:68): avc: denied { write } for pid=3092 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 63.133862][ T31] audit: type=1400 audit(63.060:69): avc: denied { read } for pid=3090 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 63.138165][ T31] audit: type=1400 audit(63.060:70): avc: denied { open } for pid=3090 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 70.174861][ T3090] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.006061][ T31] audit: type=1400 audit(71.930:71): avc: denied { execmem } for pid=3093 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.066191][ T31] audit: type=1400 audit(71.990:72): avc: denied { read } for pid=3095 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.066662][ T31] audit: type=1400 audit(71.990:73): avc: denied { open } for pid=3095 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.073897][ T31] audit: type=1400 audit(72.000:74): avc: denied { mounton } for pid=3095 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 72.099134][ T31] audit: type=1400 audit(72.030:75): avc: denied { module_request } for pid=3095 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.179693][ T31] audit: type=1400 audit(72.110:77): avc: denied { sys_module } for pid=3096 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.180167][ T31] audit: type=1400 audit(72.110:76): avc: denied { sys_module } for pid=3095 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.756611][ T31] audit: type=1400 audit(72.680:78): avc: denied { ioctl } for pid=3095 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=675 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.730044][ T3095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.773095][ T3095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.777937][ T3096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.815166][ T3096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.414213][ T3096] hsr_slave_0: entered promiscuous mode [ 74.420330][ T3096] hsr_slave_1: entered promiscuous mode [ 74.754116][ T3095] hsr_slave_0: entered promiscuous mode [ 74.759314][ T3095] hsr_slave_1: entered promiscuous mode [ 74.761476][ T3095] debugfs: 'hsr0' already exists in 'hsr' [ 74.762834][ T3095] Cannot create hsr debugfs directory [ 74.875235][ T31] audit: type=1400 audit(74.800:79): avc: denied { create } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.879095][ T31] audit: type=1400 audit(74.810:80): avc: denied { write } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.890114][ T3096] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.903158][ T3096] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.912387][ T3096] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.921237][ T3096] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.167714][ T3095] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.174749][ T3095] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.182887][ T3095] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.192956][ T3095] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.472243][ T3096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.798131][ T3095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.437670][ T3096] veth0_vlan: entered promiscuous mode [ 77.464979][ T3096] veth1_vlan: entered promiscuous mode [ 77.561508][ T3096] veth0_macvtap: entered promiscuous mode [ 77.574769][ T3096] veth1_macvtap: entered promiscuous mode [ 77.661559][ T3096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.662240][ T3096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.662381][ T3096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.662488][ T3096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.840396][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 77.840778][ T31] audit: type=1400 audit(77.770:82): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.852056][ T31] audit: type=1400 audit(77.780:83): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/syzkaller.qDxEqW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.862627][ T31] audit: type=1400 audit(77.790:84): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.872824][ T31] audit: type=1400 audit(77.800:85): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/syzkaller.qDxEqW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 77.879091][ T31] audit: type=1400 audit(77.810:86): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/syzkaller.qDxEqW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 77.903079][ T31] audit: type=1400 audit(77.830:87): avc: denied { unmount } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.913285][ T31] audit: type=1400 audit(77.840:88): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 77.919642][ T31] audit: type=1400 audit(77.850:89): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="gadgetfs" ino=1881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 77.925240][ T31] audit: type=1400 audit(77.850:90): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.949703][ T31] audit: type=1400 audit(77.880:91): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 78.027216][ T3096] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.240381][ T3785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.527424][ T3095] veth0_vlan: entered promiscuous mode [ 78.548811][ T3095] veth1_vlan: entered promiscuous mode [ 78.606846][ T3095] veth0_macvtap: entered promiscuous mode [ 78.619246][ T3095] veth1_macvtap: entered promiscuous mode [ 78.671727][ T3095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.673180][ T3095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.676899][ T3095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.677226][ T3095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.079464][ T3827] capability: warning: `syz.1.16' uses deprecated v2 capabilities in a way that may be insecure [ 83.228699][ T3840] netlink: 112 bytes leftover after parsing attributes in process `syz.0.22'. [ 83.804944][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 83.807729][ T31] audit: type=1400 audit(83.730:109): avc: denied { ioctl } for pid=3843 comm="syz.0.24" path="socket:[2433]" dev="sockfs" ino=2433 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.836761][ T31] audit: type=1400 audit(83.760:110): avc: denied { create } for pid=3844 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.847842][ T31] audit: type=1400 audit(83.780:111): avc: denied { write } for pid=3844 comm="syz.1.25" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.183080][ T31] audit: type=1400 audit(85.110:112): avc: denied { read write } for pid=3848 comm="syz.1.26" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 85.196066][ T31] audit: type=1400 audit(85.120:113): avc: denied { open } for pid=3848 comm="syz.1.26" path="/16/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 85.280382][ T31] audit: type=1400 audit(85.210:114): avc: denied { unmount } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 85.628920][ T31] audit: type=1400 audit(85.560:115): avc: denied { create } for pid=3859 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.739251][ T31] audit: type=1400 audit(85.670:116): avc: denied { setopt } for pid=3859 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.741946][ T31] audit: type=1400 audit(85.670:117): avc: denied { read } for pid=3859 comm="syz.1.29" path="socket:[2444]" dev="sockfs" ino=2444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.722083][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.798129][ T31] audit: type=1400 audit(86.730:118): avc: denied { write } for pid=3859 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.977119][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.977724][ T43] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 86.978093][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.978185][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.037280][ T43] usb 1-1: config 0 descriptor?? [ 87.280930][ T43] usb 1-1: string descriptor 0 read error: -71 [ 87.306410][ T43] usb 1-1: USB disconnect, device number 2 [ 88.012975][ T3886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.607263][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 90.607676][ T31] audit: type=1400 audit(90.510:121): avc: denied { name_bind } for pid=3938 comm="syz.1.40" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 90.607980][ T31] audit: type=1400 audit(90.540:122): avc: denied { node_bind } for pid=3938 comm="syz.1.40" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 92.137994][ T3944] netlink: 'syz.0.42': attribute type 1 has an invalid length. [ 95.249038][ T3967] block device autoloading is deprecated and will be removed. [ 98.556863][ T31] audit: type=1326 audit(98.440:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x7ffc0000 [ 98.557378][ T31] audit: type=1326 audit(98.460:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x7ffc0000 [ 98.557723][ T31] audit: type=1326 audit(98.460:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x131fc0 code=0x7ffc0000 [ 98.557970][ T31] audit: type=1326 audit(98.460:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x7ffc0000 [ 98.558229][ T31] audit: type=1326 audit(98.460:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x7ffc0000 [ 98.558474][ T31] audit: type=1326 audit(98.460:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x131fc0 code=0x7ffc0000 [ 98.558705][ T31] audit: type=1326 audit(98.460:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x7ffc0000 [ 98.558961][ T31] audit: type=1326 audit(98.460:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x7ffc0000 [ 98.589839][ T31] audit: type=1326 audit(98.520:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000028 syscall=294 compat=0 ip=0x131fc0 code=0x7ffc0000 [ 98.592038][ T31] audit: type=1326 audit(98.520:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x7ffc0000 [ 101.234046][ T4001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=4001 comm=syz.0.56 [ 101.757056][ T4003] pim6reg0: tun_chr_ioctl cmd 1074304026 [ 103.316626][ T4027] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.616829][ T4048] fuse: Bad value for 'group_id' [ 105.618004][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 105.619084][ T31] audit: type=1400 audit(105.540:143): avc: denied { execute } for pid=4046 comm="syz.0.70" path="/34/file1" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.620991][ T31] audit: type=1400 audit(105.550:144): avc: denied { mounton } for pid=4047 comm="syz.1.69" path="/34/file0" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.624360][ T4048] fuse: Bad value for 'group_id' [ 105.886616][ T31] audit: type=1400 audit(105.810:145): avc: denied { create } for pid=4056 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.052368][ T4055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73'. [ 109.576868][ T4087] netlink: 64 bytes leftover after parsing attributes in process `syz.0.87'. [ 111.496675][ T31] audit: type=1400 audit(111.410:146): avc: denied { lock } for pid=4096 comm="syz.0.91" path="socket:[3277]" dev="sockfs" ino=3277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 115.256835][ T4103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.94'. [ 120.259815][ T31] audit: type=1800 audit(120.190:147): pid=4118 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.99" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 121.511757][ T4122] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.512306][ T4122] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.518688][ T4122] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.521833][ T4122] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.608984][ T31] audit: type=1400 audit(129.540:148): avc: denied { append } for pid=4138 comm="syz.0.107" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 129.800615][ T31] audit: type=1400 audit(129.730:149): avc: denied { create } for pid=4143 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.132639][ T31] audit: type=1400 audit(133.060:150): avc: denied { write } for pid=4168 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.971428][ T4173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'. [ 134.783308][ T4182] netlink: 76 bytes leftover after parsing attributes in process `syz.0.123'. [ 134.788782][ T4182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.233513][ T4187] syz.0.125 uses obsolete (PF_INET,SOCK_PACKET) [ 135.241816][ T31] audit: type=1400 audit(135.170:151): avc: denied { ioctl } for pid=4185 comm="syz.0.125" path="socket:[2884]" dev="sockfs" ino=2884 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.399245][ T31] audit: type=1400 audit(135.330:152): avc: denied { read } for pid=4186 comm="syz.1.126" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.401442][ T31] audit: type=1400 audit(135.330:153): avc: denied { open } for pid=4186 comm="syz.1.126" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.466692][ T31] audit: type=1400 audit(135.340:154): avc: denied { ioctl } for pid=4186 comm="syz.1.126" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.630597][ T31] audit: type=1400 audit(135.550:155): avc: denied { set_context_mgr } for pid=4186 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 136.499338][ T31] audit: type=1400 audit(136.430:156): avc: denied { allowed } for pid=4185 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 136.519979][ T31] audit: type=1400 audit(136.450:157): avc: denied { create } for pid=4185 comm="syz.0.125" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 136.537815][ T31] audit: type=1400 audit(136.450:158): avc: denied { map } for pid=4185 comm="syz.0.125" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 136.538847][ T31] audit: type=1400 audit(136.470:159): avc: denied { read write } for pid=4185 comm="syz.0.125" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 140.154228][ T4199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.129'. [ 141.126056][ T3779] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.286399][ T3779] usb 2-1: Using ep0 maxpacket: 8 [ 141.310880][ T3779] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 141.311349][ T3779] usb 2-1: config 179 has no interface number 0 [ 141.311759][ T3779] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 141.311899][ T3779] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 141.312172][ T3779] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 141.312300][ T3779] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 141.312463][ T3779] usb 2-1: config 179 interface 65 has no altsetting 0 [ 141.312663][ T3779] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 141.320704][ T3779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.377153][ T3779] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input3 [ 141.568623][ T9] usb 2-1: USB disconnect, device number 2 [ 141.568813][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 144.521051][ T31] audit: type=1400 audit(144.450:160): avc: denied { create } for pid=4236 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.528060][ T31] audit: type=1400 audit(144.460:161): avc: denied { bind } for pid=4236 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.544494][ T31] audit: type=1400 audit(144.470:162): avc: denied { write } for pid=4236 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.418128][ T4398] netlink: 44 bytes leftover after parsing attributes in process `syz.1.146'. [ 153.420134][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 156.195289][ T31] audit: type=1400 audit(156.120:163): avc: denied { ioctl } for pid=4409 comm="syz.1.149" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3461 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 156.214992][ T31] audit: type=1400 audit(156.140:164): avc: denied { create } for pid=4409 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.221146][ T31] audit: type=1400 audit(156.150:165): avc: denied { setopt } for pid=4409 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.359419][ T4410] ------------[ cut here ]------------ [ 156.359885][ T4410] WARNING: CPU: 1 PID: 4410 at mm/highmem.c:622 kunmap_local_indexed+0x20c/0x224 [ 156.362710][ T4410] Modules linked in: [ 156.364573][ T4410] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 156.367462][ T4410] CPU: 1 UID: 0 PID: 4410 Comm: syz.1.149 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 156.368304][ T4410] Hardware name: ARM-Versatile Express [ 156.368841][ T4410] Call trace: [ 156.369530][ T4410] [<80201a20>] (dump_backtrace) from [<80201b1c>] (show_stack+0x18/0x1c) [ 156.370349][ T4410] r7:00000000 r6:8281fa3c r5:00000000 r4:8225cbf4 [ 156.370735][ T4410] [<80201b04>] (show_stack) from [<8021fde0>] (dump_stack_lvl+0x54/0x7c) [ 156.371235][ T4410] [<8021fd8c>] (dump_stack_lvl) from [<8021fe20>] (dump_stack+0x18/0x1c) [ 156.371670][ T4410] r5:00000000 r4:82a6dd18 [ 156.371932][ T4410] [<8021fe08>] (dump_stack) from [<80202634>] (panic+0x120/0x374) [ 156.372552][ T4410] [<80202514>] (panic) from [<80254700>] (get_taint+0x0/0x1c) [ 156.372906][ T4410] r3:8280c684 r2:00000001 r1:82243730 r0:8224b0d8 [ 156.373556][ T4410] r7:804b848c [ 156.373852][ T4410] [<8025468c>] (check_panic_on_warn) from [<80254864>] (__warn+0x80/0x188) [ 156.374289][ T4410] [<802547e4>] (__warn) from [<80254ae4>] (warn_slowpath_fmt+0x178/0x1f4) [ 156.375002][ T4410] r8:00000009 r7:822769cc r6:df9c1d1c r5:85f35400 r4:00000000 [ 156.375502][ T4410] [<80254970>] (warn_slowpath_fmt) from [<804b848c>] (kunmap_local_indexed+0x20c/0x224) [ 156.376275][ T4410] r10:00000000 r9:deb61d64 r8:deba5e74 r7:00a00000 r6:00000003 r5:85f35400 [ 156.376659][ T4410] r4:ffedc000 [ 156.376832][ T4410] [<804b8280>] (kunmap_local_indexed) from [<805336f0>] (move_pages+0xb24/0x19c8) [ 156.377238][ T4410] r7:00a00000 r6:fffffff0 r5:854286e4 r4:83bdb300 [ 156.377507][ T4410] [<80532bcc>] (move_pages) from [<805bad04>] (userfaultfd_ioctl+0xff8/0x21c4) [ 156.377910][ T4410] r10:83bdb300 r9:df9c1e98 r8:21000000 r7:00000001 r6:00000000 r5:20000040 [ 156.378237][ T4410] r4:85883000 [ 156.378409][ T4410] [<805b9d0c>] (userfaultfd_ioctl) from [<805637a8>] (sys_ioctl+0x130/0xba0) [ 156.379039][ T4410] r10:85f35400 r9:00000003 r8:848aacc0 r7:20000040 r6:848aacc1 r5:00000000 [ 156.379632][ T4410] r4:c028aa05 [ 156.379802][ T4410] [<80563678>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 156.380376][ T4410] Exception stack(0xdf9c1fa8 to 0xdf9c1ff0) [ 156.380882][ T4410] 1fa0: 00000000 00000000 00000003 c028aa05 20000040 00000000 [ 156.381257][ T4410] 1fc0: 00000000 00000000 002f6300 00000036 002e0000 00000000 00006364 76b8a0bc [ 156.381596][ T4410] 1fe0: 76b89ec0 76b89eb0 000193a4 00131fc0 [ 156.381899][ T4410] r10:00000036 r9:85f35400 r8:8020029c r7:00000036 r6:002f6300 r5:00000000 [ 156.382224][ T4410] r4:00000000 [ 156.386622][ T4410] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:32:30 Registers: info registers vcpu 0 CPU#0 R00=85503540 R01=82c1c6c0 R02=000000ca R03=00000002 R04=85503540 R05=84ac2000 R06=83fd5000 R07=83fd5000 R08=83a7630a R09=00000036 R10=00000036 R11=82801534 R12=00000000 R13=828014c0 R14=8189bdbc R15=80299b58 PSR=20000113 --C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=00000000 R02=85f35400 R03=00000001 R04=df9c1ba8 R05=80000093 R06=82827660 R07=00000000 R08=00000001 R09=00000000 R10=000003cf R11=df9c1b8c R12=df9c1b78 R13=df9c1b78 R14=802e3098 R15=802e3168 PSR=20000093 --C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000