last executing test programs: 4.471329579s ago: executing program 1 (id=2): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.89316308s ago: executing program 0 (id=1): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x4050) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0x8008330e, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x8, 0xb, 0x6, 0x0, 0xffffffffffffffff, 0xcb02}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000300)="13dc61af6131dba170edf5468a8267c663", 0x1000, r3}, 0x38) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) setfsgid(0xee00) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7fffffff}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = gettid() sched_setscheduler(r5, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r9, 0x10001) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="796104000000000000007e00001b7010cbb6e72e75dbe73bdb4324de446be7bcaf7c1a894d2f9620d101e2b5ec841fe88b6ad4d05bdfc027292e3acb9eb6d14addb938a7690c075d462c823e1f34bed03dc0ed038874f30b49702e1ca0e618ef1c865e2ed6"], 0x14}}, 0x0) 3.388364428s ago: executing program 1 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x50}}, 0x24040810) 3.131830131s ago: executing program 1 (id=4): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) writev(r0, &(0x7f0000000200)=[{&(0x7f0000002380)='h', 0x1}], 0x1) 2.769989351s ago: executing program 1 (id=5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x28, 0x3a, 0x1, @rand_addr=' \x01\x00', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) 2.393690611s ago: executing program 1 (id=6): setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x70) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) 0s ago: executing program 1 (id=7): openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7625, &(0x7f00000003c0)={0x0, 0x9678, 0x2, 0x0, 0xf7}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) kernel console output (not intermixed with test programs): [ 57.597682][ T31] audit: type=1400 audit(57.480:56): avc: denied { read write } for pid=3112 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.598013][ T31] audit: type=1400 audit(57.480:57): avc: denied { open } for pid=3112 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:51566' (ED25519) to the list of known hosts. [ 68.932115][ T31] audit: type=1400 audit(68.820:58): avc: denied { name_bind } for pid=3115 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.533844][ T31] audit: type=1400 audit(70.420:59): avc: denied { execute } for pid=3116 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 70.579008][ T31] audit: type=1400 audit(70.450:60): avc: denied { execute_no_trans } for pid=3116 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 74.302310][ T31] audit: type=1400 audit(74.190:61): avc: denied { mounton } for pid=3116 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 74.306151][ T31] audit: type=1400 audit(74.190:62): avc: denied { mount } for pid=3116 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.324172][ T3116] cgroup: Unknown subsys name 'net' [ 74.335753][ T31] audit: type=1400 audit(74.220:63): avc: denied { unmount } for pid=3116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.474213][ T3116] cgroup: Unknown subsys name 'cpuset' [ 74.481693][ T3116] cgroup: Unknown subsys name 'hugetlb' [ 74.482530][ T3116] cgroup: Unknown subsys name 'rlimit' [ 74.787333][ T31] audit: type=1400 audit(74.670:64): avc: denied { setattr } for pid=3116 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.790070][ T31] audit: type=1400 audit(74.680:65): avc: denied { mounton } for pid=3116 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 74.791482][ T31] audit: type=1400 audit(74.680:66): avc: denied { mount } for pid=3116 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 74.995975][ T3118] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 74.998204][ T31] audit: type=1400 audit(74.890:67): avc: denied { relabelto } for pid=3118 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 75.002937][ T31] audit: type=1400 audit(74.890:68): avc: denied { write } for pid=3118 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 75.041074][ T31] audit: type=1400 audit(74.930:69): avc: denied { read } for pid=3116 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 75.042452][ T31] audit: type=1400 audit(74.930:70): avc: denied { open } for pid=3116 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 83.186134][ T3116] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.243056][ T31] audit: type=1400 audit(85.130:71): avc: denied { execmem } for pid=3119 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 85.295313][ T31] audit: type=1400 audit(85.180:72): avc: denied { read } for pid=3121 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.295702][ T31] audit: type=1400 audit(85.180:73): avc: denied { open } for pid=3121 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.306080][ T31] audit: type=1400 audit(85.190:74): avc: denied { mounton } for pid=3121 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 85.335604][ T31] audit: type=1400 audit(85.220:75): avc: denied { module_request } for pid=3121 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 85.348301][ T31] audit: type=1400 audit(85.220:76): avc: denied { module_request } for pid=3122 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 85.417350][ T31] audit: type=1400 audit(85.300:77): avc: denied { sys_module } for pid=3122 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 86.003834][ T31] audit: type=1400 audit(85.890:78): avc: denied { ioctl } for pid=3122 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=676 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.358342][ T3122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.366100][ T3122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.523457][ T3121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.533367][ T3121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.490305][ T3122] hsr_slave_0: entered promiscuous mode [ 88.493863][ T3122] hsr_slave_1: entered promiscuous mode [ 88.644282][ T3121] hsr_slave_0: entered promiscuous mode [ 88.648413][ T3121] hsr_slave_1: entered promiscuous mode [ 88.650243][ T3121] debugfs: 'hsr0' already exists in 'hsr' [ 88.651647][ T3121] Cannot create hsr debugfs directory [ 89.282130][ T31] audit: type=1400 audit(89.170:79): avc: denied { create } for pid=3122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.285591][ T31] audit: type=1400 audit(89.170:80): avc: denied { write } for pid=3122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.300523][ T3122] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.324838][ T3122] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.339328][ T3122] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.348549][ T3122] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.495777][ T3121] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.508254][ T3121] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.525846][ T3121] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.544052][ T3121] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.379704][ T3122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.575170][ T3121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.827806][ T3122] veth0_vlan: entered promiscuous mode [ 93.852981][ T3122] veth1_vlan: entered promiscuous mode [ 93.954854][ T3122] veth0_macvtap: entered promiscuous mode [ 93.973157][ T3122] veth1_macvtap: entered promiscuous mode [ 94.059238][ T3057] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.059907][ T3057] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.060022][ T3057] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.060134][ T3057] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.253473][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 94.254061][ T31] audit: type=1400 audit(94.140:82): avc: denied { mount } for pid=3122 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.264104][ T31] audit: type=1400 audit(94.150:83): avc: denied { mounton } for pid=3122 comm="syz-executor" path="/syzkaller.QWcWwW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 94.274922][ T31] audit: type=1400 audit(94.160:84): avc: denied { mount } for pid=3122 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 94.289940][ T31] audit: type=1400 audit(94.180:85): avc: denied { mounton } for pid=3122 comm="syz-executor" path="/syzkaller.QWcWwW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 94.295889][ T31] audit: type=1400 audit(94.180:86): avc: denied { mounton } for pid=3122 comm="syz-executor" path="/syzkaller.QWcWwW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 94.322968][ T31] audit: type=1400 audit(94.210:87): avc: denied { unmount } for pid=3122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 94.332984][ T31] audit: type=1400 audit(94.220:88): avc: denied { mounton } for pid=3122 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 94.337877][ T31] audit: type=1400 audit(94.220:89): avc: denied { mount } for pid=3122 comm="syz-executor" name="/" dev="gadgetfs" ino=2000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 94.348134][ T31] audit: type=1400 audit(94.230:90): avc: denied { mount } for pid=3122 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 94.351110][ T31] audit: type=1400 audit(94.240:91): avc: denied { mounton } for pid=3122 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 94.442893][ T3122] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.540749][ T3121] veth0_vlan: entered promiscuous mode [ 94.572381][ T3121] veth1_vlan: entered promiscuous mode [ 94.659255][ T3121] veth0_macvtap: entered promiscuous mode [ 94.684680][ T3121] veth1_macvtap: entered promiscuous mode [ 94.805598][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.806656][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.821096][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.821578][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.681998][ T3818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3'. [ 96.423938][ T3821] random: crng reseeded on system resumption [ 100.592611][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 100.593096][ T31] audit: type=1400 audit(100.480:106): avc: denied { allowed } for pid=3831 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 104.588769][ T31] audit: type=1400 audit(104.450:107): avc: denied { sqpoll } for pid=3831 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 105.147371][ T31] audit: type=1400 audit(104.990:108): avc: denied { create } for pid=3831 comm="syz.1.7" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 105.672167][ T3835] 8<--- cut here --- [ 105.672344][ T3835] Unable to handle kernel paging request at virtual address fee04f2a when write [ 105.672485][ T3835] [fee04f2a] *pgd=80000080007003, *pmd=00000000 [ 105.673458][ T3835] Internal error: Oops: a06 [#1] SMP ARM [ 105.677836][ T3835] Modules linked in: [ 105.681444][ T3835] CPU: 1 UID: 0 PID: 3835 Comm: syz.1.7 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 105.682555][ T3835] Hardware name: ARM-Versatile Express [ 105.683154][ T3835] PC is at subdev_8255_io+0x60/0x6c [ 105.684109][ T3835] LR is at subdev_8255_io+0x4c/0x6c [ 105.684375][ T3835] pc : [<813b7dd0>] lr : [<813b7dbc>] psr: 60000013 [ 105.684773][ T3835] sp : dfeb9cb8 ip : dfeb9cb8 fp : dfeb9cd4 [ 105.686557][ T3835] r10: 00000000 r9 : 00000000 r8 : 00000084 [ 105.687162][ T3835] r7 : 00004f27 r6 : 0000009b r5 : 84014c00 r4 : 00004f2a [ 105.687678][ T3835] r3 : 0000009b r2 : fee04f2a r1 : 00000001 r0 : 84014c00 [ 105.688209][ T3835] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 105.688688][ T3835] Control: 30c5387d Table: 85b09a00 DAC: 00000000 [ 105.689150][ T3835] Register r0 information: slab kmalloc-192 start 84014c00 pointer offset 0 size 192 [ 105.690665][ T3835] Register r1 information: non-paged memory [ 105.691355][ T3835] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 105.692114][ T3835] Register r3 information: non-paged memory [ 105.692475][ T3835] Register r4 information: non-paged memory [ 105.692754][ T3835] Register r5 information: slab kmalloc-192 start 84014c00 pointer offset 0 size 192 [ 105.693387][ T3835] Register r6 information: non-paged memory [ 105.693694][ T3835] Register r7 information: non-paged memory [ 105.693985][ T3835] Register r8 information: non-paged memory [ 105.694274][ T3835] Register r9 information: NULL pointer [ 105.694570][ T3835] Register r10 information: NULL pointer [ 105.694946][ T3835] Register r11 information: 2-page vmalloc region starting at 0xdfeb8000 allocated at kernel_clone+0xac/0x3ec [ 105.695429][ T3835] Register r12 information: 2-page vmalloc region starting at 0xdfeb8000 allocated at kernel_clone+0xac/0x3ec [ 105.695945][ T3835] Process syz.1.7 (pid: 3835, stack limit = 0xdfeb8000) [ 105.696664][ T3835] Stack: (0xdfeb9cb8 to 0xdfeba000) [ 105.697135][ T3835] 9ca0: 813b7d70 84014c00 [ 105.697531][ T3835] 9cc0: 00004f27 00004f27 dfeb9cf4 dfeb9cd8 813b7aa8 813b7d7c 00004f27 80503c30 [ 105.697919][ T3835] 9ce0: 85a41000 85a41000 dfeb9d14 dfeb9cf8 813b7e68 813b7a5c 85a41000 84014c00 [ 105.698295][ T3835] 9d00: dfeb9da4 00004f27 dfeb9d54 dfeb9d18 813b805c 813b7de8 dfeb9d3c dfeb9d28 [ 105.698756][ T3835] 9d20: 81a3c6b0 00000000 813a2a3c 829d0084 84014c00 84014c44 dfeb9d90 84014c00 [ 105.699185][ T3835] 9d40: 00000000 82b16f00 dfeb9d8c dfeb9d58 813a6f60 813b7fac 200000c0 00000000 [ 105.699614][ T3835] 9d60: 84b4a400 200000c0 84014c00 b5403587 200000c0 84b4a400 40946400 00000003 [ 105.699993][ T3835] 9d80: dfeb9e4c dfeb9d90 813a2ae0 813a6e64 35353238 00000000 00000000 00000000 [ 105.700302][ T3835] 9da0: 00000000 00004f27 00000005 00000002 00000401 00000001 00000cc7 00000fff [ 105.700719][ T3835] 9dc0: 5c952399 00000005 000003ff 00000802 00001600 00000001 00000001 00000009 [ 105.701135][ T3835] 9de0: 0000e1cb 00000006 00000004 00000003 00000395 80000089 fffffffd 00000000 [ 105.701587][ T3835] 9e00: fffffff5 ffffeadb 00000003 0000003c 00000008 00000004 08000000 dffffffa [ 105.702541][ T3835] 9e20: 00000000 84a52e24 00000000 85aa1780 84014c00 200000c0 200000c0 84b4a400 [ 105.702913][ T3835] 9e40: dfeb9f14 dfeb9e50 813a3aac 813a29ec 00000000 00000000 00000000 84a52e24 [ 105.703226][ T3835] 9e60: 00000000 00000000 8247054c 0000005f 83b95058 84014c30 84192444 84b4a400 [ 105.703572][ T3835] 9e80: dfeb9ee4 dfeb9e90 80797824 8078db88 00000064 00000001 00000000 dfeb9eac [ 105.703916][ T3835] 9ea0: 84a189d0 834e1a18 00006400 0000000b dfeb9ea0 00000000 00000000 84a52e24 [ 105.704251][ T3835] 9ec0: 85aa1780 40946400 200000c0 200000c0 85aa1780 00000007 dfeb9ef4 dfeb9ee8 [ 105.704633][ T3835] 9ee0: 80797944 84a52e24 dfeb9f14 40946400 00000000 85aa1781 200000c0 85aa1780 [ 105.705004][ T3835] 9f00: 00000007 84b4a400 dfeb9fa4 dfeb9f18 8056cdf8 813a34dc ecac8b10 84b4a400 [ 105.705375][ T3835] 9f20: dfeb9f3c dfeb9f30 81a38778 81a38648 dfeb9f54 dfeb9f40 8025e490 8028ef8c [ 105.705662][ T3835] 9f40: dfeb9fb0 40000000 dfeb9f84 dfeb9f58 802229ec 8025e44c 00000000 8281cddc [ 105.706018][ T3835] 9f60: dfeb9fb0 0014c820 ecac8b10 80222940 00000000 84a52e24 dfeb9fac 00000000 [ 105.706484][ T3835] 9f80: 00000000 002f6448 00000036 8020029c 84b4a400 00000036 00000000 dfeb9fa8 [ 105.706968][ T3835] 9fa0: 80200060 8056ccd4 00000000 00000000 00000007 40946400 200000c0 00000000 [ 105.707510][ T3835] 9fc0: 00000000 00000000 002f6448 00000036 002e0000 00000000 00006364 76fab0bc [ 105.708247][ T3835] 9fe0: 76faaec0 76faaeb0 0001948c 001322c0 60000010 00000007 00000000 00000000 [ 105.708905][ T3835] Call trace: [ 105.709460][ T3835] [<813b7d70>] (subdev_8255_io) from [<813b7aa8>] (subdev_8255_do_config+0x58/0x60) [ 105.710358][ T3835] r7:00004f27 r6:00004f27 r5:84014c00 r4:813b7d70 [ 105.710758][ T3835] [<813b7a50>] (subdev_8255_do_config) from [<813b7e68>] (subdev_8255_io_init+0x8c/0x9c) [ 105.711156][ T3835] r4:85a41000 [ 105.711352][ T3835] [<813b7ddc>] (subdev_8255_io_init) from [<813b805c>] (dev_8255_attach+0xbc/0x114) [ 105.711792][ T3835] r7:00004f27 r6:dfeb9da4 r5:84014c00 r4:85a41000 [ 105.712022][ T3835] [<813b7fa0>] (dev_8255_attach) from [<813a6f60>] (comedi_device_attach+0x108/0x250) [ 105.712610][ T3835] r10:82b16f00 r9:00000000 r8:84014c00 r7:dfeb9d90 r6:84014c44 r5:84014c00 [ 105.713073][ T3835] r4:829d0084 [ 105.713258][ T3835] [<813a6e58>] (comedi_device_attach) from [<813a2ae0>] (do_devconfig_ioctl+0x100/0x220) [ 105.713634][ T3835] r10:00000003 r9:40946400 r8:84b4a400 r7:200000c0 r6:b5403587 r5:84014c00 [ 105.713939][ T3835] r4:200000c0 [ 105.714140][ T3835] [<813a29e0>] (do_devconfig_ioctl) from [<813a3aac>] (comedi_unlocked_ioctl+0x5dc/0x1c24) [ 105.714659][ T3835] r8:84b4a400 r7:200000c0 r6:200000c0 r5:84014c00 r4:85aa1780 [ 105.715043][ T3835] [<813a34d0>] (comedi_unlocked_ioctl) from [<8056cdf8>] (sys_ioctl+0x130/0xba0) [ 105.715512][ T3835] r10:84b4a400 r9:00000007 r8:85aa1780 r7:200000c0 r6:85aa1781 r5:00000000 [ 105.715813][ T3835] r4:40946400 [ 105.715963][ T3835] [<8056ccc8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 105.716346][ T3835] Exception stack(0xdfeb9fa8 to 0xdfeb9ff0) [ 105.716998][ T3835] 9fa0: 00000000 00000000 00000007 40946400 200000c0 00000000 [ 105.717825][ T3835] 9fc0: 00000000 00000000 002f6448 00000036 002e0000 00000000 00006364 76fab0bc [ 105.718308][ T3835] 9fe0: 76faaec0 76faaeb0 0001948c 001322c0 [ 105.718490][ T3835] r10:00000036 r9:84b4a400 r8:8020029c r7:00000036 r6:002f6448 r5:00000000 [ 105.718910][ T3835] r4:00000000 [ 105.719386][ T3835] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 105.720088][ T3835] ---[ end trace 0000000000000000 ]--- [ 105.720943][ T3835] Kernel panic - not syncing: Fatal exception [ 105.723795][ T3835] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:47:20 Registers: info registers vcpu 0 CPU#0 R00=84051780 R01=00000400 R02=00000001 R03=dfa31400 R04=84051780 R05=83342400 R06=00000000 R07=83c17800 R08=83c17808 R09=83c17800 R10=00000040 R11=df801674 R12=df801660 R13=df801660 R14=80a1c55c R15=80a1c564 PSR=60000113 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=822602a4 R02=00000000 R03=81a38fb0 R04=00000006 R05=828f7848 R06=00000000 R07=828f7840 R08=84b4a400 R09=00000028 R10=828f7848 R11=dfeb993c R12=dfeb9940 R13=dfeb9930 R14=8033d964 R15=81a38fc0 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000