last executing test programs: 17.453534957s ago: executing program 1 (id=7): unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000002800)=ANY=[@ANYBLOB="18020000022000000000000002000000850000002e000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 16.25100497s ago: executing program 0 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r4, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 15.123407689s ago: executing program 1 (id=10): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x20100) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0xf) 14.930033799s ago: executing program 1 (id=11): syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 2.637730132s ago: executing program 0 (id=12): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000001b00)="9b4448dbe1", 0x5}], 0x1) 2.529859688s ago: executing program 0 (id=13): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x274, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x260, 0x1, [@m_csum={0x84, 0x14, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x8, 0x1, 0xa}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x80, 0xffffffffffffffff, 0x48fe, 0x2}, 0x11}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x30, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x1a8, 0x1b, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x0, 0x87}, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, 0xffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0xffffffffffffffff, 0x6, 0x7}, @loopback, @broadcast, 0x80, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x5, 0xa7, 0xffff0001}, @broadcast, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x4, 0x0, 0x3, 0x9711}, @multicast1, @multicast1, 0x95c5050eeb275cf0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0xfffffffb, 0x736fe187decc650e, 0x101, 0x30000}, @remote, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0xb111, 0x8, 0x838, 0x2a}, @private=0xa010101, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x18, 0x5af3, 0x8, 0x9, 0xcd}, @private=0xa010100, @multicast1, 0xff}}]}, {0x65, 0x6, "00dbe2375389f4c61bb80b5c04766adf4c4041ab3363ca93e40c5281d6bb7035fa3fb2838101ae15e668e34175f78ce7df4b1c48d956acfb10ab481c7729eedfcdef8b67015dd90447d814cbb37713b8e2a37054e99152bbb3f0c77e56a1f6ab9d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.452679141s ago: executing program 0 (id=14): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, 0xffffffffffffffff, 0x4}, 0x10) 2.391882435s ago: executing program 0 (id=15): r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000380)=""/239) 2.308427259s ago: executing program 0 (id=16): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) eventfd2(0xb0, 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x20182) syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 1.080321133s ago: executing program 1 (id=17): r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000008100)={0x2020}, 0x2020) 989.846168ms ago: executing program 1 (id=18): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b15, 0x0) 0s ago: executing program 1 (id=19): r0 = gettid() r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x9, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xa8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x7006, &(0x7f0000000240)=ANY=[]) close(0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) kernel console output (not intermixed with test programs): [ 47.685864][ T31] audit: type=1400 audit(47.600:56): avc: denied { read write } for pid=3095 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.686359][ T31] audit: type=1400 audit(47.600:57): avc: denied { open } for pid=3095 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:27845' (ED25519) to the list of known hosts. [ 59.018413][ T31] audit: type=1400 audit(58.930:58): avc: denied { name_bind } for pid=3098 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.480984][ T31] audit: type=1400 audit(60.390:59): avc: denied { execute } for pid=3099 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.541950][ T31] audit: type=1400 audit(60.450:60): avc: denied { execute_no_trans } for pid=3099 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.293195][ T31] audit: type=1400 audit(63.210:61): avc: denied { mounton } for pid=3099 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.297108][ T31] audit: type=1400 audit(63.210:62): avc: denied { mount } for pid=3099 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.320473][ T3099] cgroup: Unknown subsys name 'net' [ 63.329091][ T31] audit: type=1400 audit(63.240:63): avc: denied { unmount } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.495193][ T3099] cgroup: Unknown subsys name 'cpuset' [ 63.503871][ T3099] cgroup: Unknown subsys name 'hugetlb' [ 63.504831][ T3099] cgroup: Unknown subsys name 'rlimit' [ 63.793475][ T31] audit: type=1400 audit(63.710:64): avc: denied { setattr } for pid=3099 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.797511][ T31] audit: type=1400 audit(63.710:65): avc: denied { mounton } for pid=3099 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 63.804372][ T31] audit: type=1400 audit(63.720:66): avc: denied { mount } for pid=3099 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 63.993067][ T3101] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 64.000061][ T31] audit: type=1400 audit(63.910:67): avc: denied { relabelto } for pid=3101 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 64.043586][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 64.044073][ T31] audit: type=1400 audit(63.950:69): avc: denied { read } for pid=3099 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 64.044343][ T31] audit: type=1400 audit(63.960:70): avc: denied { open } for pid=3099 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 71.889526][ T3099] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.681214][ T31] audit: type=1400 audit(73.590:71): avc: denied { execmem } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.745025][ T31] audit: type=1400 audit(73.660:72): avc: denied { read } for pid=3104 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.746295][ T31] audit: type=1400 audit(73.660:73): avc: denied { open } for pid=3104 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.753998][ T31] audit: type=1400 audit(73.670:74): avc: denied { mounton } for pid=3104 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.777023][ T31] audit: type=1400 audit(73.690:75): avc: denied { module_request } for pid=3105 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.777425][ T31] audit: type=1400 audit(73.690:76): avc: denied { module_request } for pid=3104 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.848941][ T31] audit: type=1400 audit(73.760:77): avc: denied { sys_module } for pid=3104 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.385933][ T31] audit: type=1400 audit(74.300:78): avc: denied { ioctl } for pid=3105 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=675 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.572655][ T3105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.580243][ T3105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.587647][ T3104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.595792][ T3104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.479381][ T3105] hsr_slave_0: entered promiscuous mode [ 76.482844][ T3105] hsr_slave_1: entered promiscuous mode [ 76.578236][ T3104] hsr_slave_0: entered promiscuous mode [ 76.581615][ T3104] hsr_slave_1: entered promiscuous mode [ 76.583581][ T3104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.585813][ T3104] Cannot create hsr debugfs directory [ 76.966651][ T31] audit: type=1400 audit(76.880:79): avc: denied { create } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.971236][ T31] audit: type=1400 audit(76.880:80): avc: denied { write } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.985942][ T3105] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.004449][ T3105] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.020099][ T3105] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.038175][ T3105] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.049025][ T3104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.082693][ T3104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.098740][ T3104] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.118152][ T3104] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.757036][ T3104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.817542][ T3105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.364778][ T3104] veth0_vlan: entered promiscuous mode [ 80.387738][ T3104] veth1_vlan: entered promiscuous mode [ 80.456580][ T3104] veth0_macvtap: entered promiscuous mode [ 80.484752][ T3104] veth1_macvtap: entered promiscuous mode [ 80.529285][ T3105] veth0_vlan: entered promiscuous mode [ 80.569662][ T3105] veth1_vlan: entered promiscuous mode [ 80.585903][ T3104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.587422][ T3104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.588416][ T3104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.589338][ T3104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.777014][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 80.778082][ T31] audit: type=1400 audit(80.690:82): avc: denied { mount } for pid=3104 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.787354][ T3105] veth0_macvtap: entered promiscuous mode [ 80.796088][ T31] audit: type=1400 audit(80.710:83): avc: denied { mounton } for pid=3104 comm="syz-executor" path="/syzkaller.s4qi02/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.799015][ T31] audit: type=1400 audit(80.710:84): avc: denied { mount } for pid=3104 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 80.808445][ T3105] veth1_macvtap: entered promiscuous mode [ 80.819854][ T31] audit: type=1400 audit(80.730:85): avc: denied { mounton } for pid=3104 comm="syz-executor" path="/syzkaller.s4qi02/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 80.831721][ T31] audit: type=1400 audit(80.740:86): avc: denied { mounton } for pid=3104 comm="syz-executor" path="/syzkaller.s4qi02/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 80.871697][ T31] audit: type=1400 audit(80.780:87): avc: denied { unmount } for pid=3104 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 80.886474][ T31] audit: type=1400 audit(80.800:88): avc: denied { mounton } for pid=3104 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 80.888474][ T31] audit: type=1400 audit(80.800:89): avc: denied { mount } for pid=3104 comm="syz-executor" name="/" dev="gadgetfs" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 80.899295][ T31] audit: type=1400 audit(80.810:90): avc: denied { mount } for pid=3104 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.902730][ T31] audit: type=1400 audit(80.810:91): avc: denied { mounton } for pid=3104 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 80.958979][ T3105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.961975][ T3105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.965079][ T3105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.966992][ T3105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.967712][ T3104] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.782902][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.941337][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 81.948100][ T23] usb 1-1: config 80 has an invalid interface number: 207 but max is 0 [ 81.948425][ T23] usb 1-1: config 80 has no interface number 0 [ 81.948873][ T23] usb 1-1: config 80 interface 207 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 81.949102][ T23] usb 1-1: config 80 interface 207 has no altsetting 0 [ 81.969950][ T23] usb 1-1: New USB device found, idVendor=0f11, idProduct=2060, bcdDevice=90.59 [ 81.970978][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.971218][ T23] usb 1-1: Product: syz [ 81.971512][ T23] usb 1-1: Manufacturer: syz [ 81.971702][ T23] usb 1-1: SerialNumber: syz [ 82.197483][ T23] ldusb 1-1:80.207: Interrupt in endpoint not found [ 82.207084][ T23] usb 1-1: USB disconnect, device number 2 [ 82.651822][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.802780][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 82.838949][ T23] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 82.839408][ T23] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 82.839718][ T23] usb 1-1: Product: syz [ 82.839932][ T23] usb 1-1: Manufacturer: syz [ 82.840124][ T23] usb 1-1: SerialNumber: syz [ 82.845038][ T23] usb 1-1: config 0 descriptor?? [ 83.072313][ T725] usb 1-1: USB disconnect, device number 3 [ 88.882002][ T3856] block device autoloading is deprecated and will be removed. [ 88.885097][ T3856] syz.1.11: attempt to access beyond end of device [ 88.885097][ T3856] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 99.012550][ T725] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.161444][ T725] usb 2-1: Using ep0 maxpacket: 8 [ 99.183915][ T725] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.185522][ T725] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.188581][ T725] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.189762][ T725] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.192249][ T725] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.196082][ T725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.437090][ T725] usb 2-1: GET_CAPABILITIES returned 0 [ 99.438260][ T725] usbtmc 2-1:16.0: can't read capabilities [ 99.655206][ T23] usb 2-1: USB disconnect, device number 2 [ 99.754999][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 99.755395][ T31] audit: type=1400 audit(99.670:116): avc: denied { create } for pid=3891 comm="syz.1.19" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.765344][ T31] audit: type=1400 audit(99.680:117): avc: denied { ioctl } for pid=3891 comm="syz.1.19" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=2025 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 100.222428][ T3892] ------------[ cut here ]------------ [ 100.223011][ T3892] WARNING: CPU: 0 PID: 3892 at mm/highmem.c:622 kunmap_local_indexed+0x20c/0x224 [ 100.224405][ T3892] Modules linked in: [ 100.225250][ T3892] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 100.226240][ T3892] CPU: 0 UID: 0 PID: 3892 Comm: syz.1.19 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 100.226781][ T3892] Hardware name: ARM-Versatile Express [ 100.227554][ T3892] Call trace: [ 100.228317][ T3892] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 100.229235][ T3892] r7:00000000 r6:8282083c r5:00000000 r4:8225b4e0 [ 100.229591][ T3892] [<80201ae4>] (show_stack) from [<8021fdf4>] (dump_stack_lvl+0x54/0x7c) [ 100.229944][ T3892] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 100.230305][ T3892] r5:00000000 r4:82a6dd18 [ 100.230637][ T3892] [<8021fe1c>] (dump_stack) from [<80202614>] (panic+0x120/0x374) [ 100.231058][ T3892] [<802024f4>] (panic) from [<80258578>] (get_taint+0x0/0x1c) [ 100.231439][ T3892] r3:8280c684 r2:00000001 r1:82242028 r0:822499c0 [ 100.231715][ T3892] r7:804bc12c [ 100.231890][ T3892] [<80258504>] (check_panic_on_warn) from [<802586dc>] (__warn+0x80/0x188) [ 100.232267][ T3892] [<8025865c>] (__warn) from [<8025895c>] (warn_slowpath_fmt+0x178/0x1f4) [ 100.232692][ T3892] r8:00000009 r7:822752b8 r6:dfa85d1c r5:840c4800 r4:00000000 [ 100.232996][ T3892] [<802587e8>] (warn_slowpath_fmt) from [<804bc12c>] (kunmap_local_indexed+0x20c/0x224) [ 100.233457][ T3892] r10:00000000 r9:deb6bdfc r8:dece4498 r7:00a00000 r6:00000003 r5:840c4800 [ 100.233812][ T3892] r4:ffefd000 [ 100.233981][ T3892] [<804bbf20>] (kunmap_local_indexed) from [<805373a0>] (move_pages+0xb24/0x19c8) [ 100.234360][ T3892] r7:00a00000 r6:00000000 r5:84b26a9c r4:849ede00 [ 100.234625][ T3892] [<8053687c>] (move_pages) from [<805be4b4>] (userfaultfd_ioctl+0xff8/0x21c4) [ 100.235029][ T3892] r10:849ede00 r9:dfa85e98 r8:21000000 r7:00000001 r6:00000000 r5:20000040 [ 100.235388][ T3892] r4:8597d000 [ 100.235554][ T3892] [<805bd4bc>] (userfaultfd_ioctl) from [<805679c4>] (sys_ioctl+0x130/0xdc8) [ 100.235982][ T3892] r10:840c4800 r9:85278c00 r8:00000003 r7:20000040 r6:85278c01 r5:00000000 [ 100.236327][ T3892] r4:c028aa05 [ 100.236536][ T3892] [<80567894>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 100.237002][ T3892] Exception stack(0xdfa85fa8 to 0xdfa85ff0) [ 100.237743][ T3892] 5fa0: 00000000 00000000 00000003 c028aa05 20000040 00000000 [ 100.238364][ T3892] 5fc0: 00000000 00000000 002f6300 00000036 002e0000 00000000 00006364 76b650bc [ 100.238766][ T3892] 5fe0: 76b64ec0 76b64eb0 000193a4 00131fc0 [ 100.239116][ T3892] r10:00000036 r9:840c4800 r8:8020029c r7:00000036 r6:002f6300 r5:00000000 [ 100.239467][ T3892] r4:00000000 [ 100.242035][ T3892] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:54:22 Registers: info registers vcpu 0 CPU#0 R00=fffffffe R01=00000000 R02=00000000 R03=840c4800 R04=8295a2b0 R05=80000093 R06=82828458 R07=00000000 R08=00000000 R09=00000000 R10=0000039e R11=dfa85b84 R12=00000000 R13=dfa85b38 R14=00000003 R15=802e8430 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=e03c9bd4 R01=00000000 R02=00000003 R03=84838000 R04=84991d80 R05=852f5200 R06=852f543c R07=e03c9ef0 R08=00000000 R09=00000000 R10=00000002 R11=e03c9d1c R12=e03c9ca0 R13=e03c9c28 R14=815498ec R15=81549f9c PSR=60000013 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000