last executing test programs: 4.385796646s ago: executing program 1 (id=2): syz_open_dev$I2C(0x0, 0xa, 0x480) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) 3.680110616s ago: executing program 0 (id=4): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x1, 0x0, &(0x7f0000000140)=[{}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r2, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) 3.679750916s ago: executing program 1 (id=5): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) socket$inet(0x2, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x101002, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x210}], 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.500966506s ago: executing program 0 (id=6): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, 0x0, 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) 1.0796115s ago: executing program 1 (id=7): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, &(0x7f0000000080)) 890.297561ms ago: executing program 0 (id=8): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x42000, &(0x7f0000000340)={0x11, 0x0, r1}, 0x14) 790.837336ms ago: executing program 0 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 371.13469ms ago: executing program 0 (id=10): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80d40, 0x0) r1 = syz_io_uring_setup(0x19d3, &(0x7f00000003c0)={0x0, 0x46cd, 0x10100, 0x0, 0x8000000}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x650}}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r4 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4882, 0x8, 0x5, 0xf7}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 0s ago: executing program 0 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 0s ago: executing program 1 (id=12): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x0, 0xfffe, 0x4, 0x3, 0xcc7, 0x4, 0x80008, 0xe, 0x6, 0x2, 0x1, 0x7, 0x1, 0x6, 0x10000103, 0x0, 0x1a44d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x0, 0x20001e58, 0x7, 0xe69, 0x3c, 0x8, 0xa, 0xffffffff, 0xeffffff8]}) ioctl$COMEDI_SETRSUBD(r0, 0x6410) kernel console output (not intermixed with test programs): [ 46.097921][ T28] audit: type=1400 audit(46.020:56): avc: denied { read write } for pid=3079 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.098382][ T28] audit: type=1400 audit(46.020:57): avc: denied { open } for pid=3079 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:57244' (ED25519) to the list of known hosts. [ 62.080378][ T28] audit: type=1400 audit(62.000:58): avc: denied { name_bind } for pid=3082 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 63.897313][ T28] audit: type=1400 audit(63.820:59): avc: denied { execute } for pid=3083 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.906128][ T28] audit: type=1400 audit(63.830:60): avc: denied { execute_no_trans } for pid=3083 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 66.879080][ T28] audit: type=1400 audit(66.800:61): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.884899][ T28] audit: type=1400 audit(66.810:62): avc: denied { mount } for pid=3083 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.899668][ T3083] cgroup: Unknown subsys name 'net' [ 66.908474][ T28] audit: type=1400 audit(66.830:63): avc: denied { unmount } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.045490][ T3083] cgroup: Unknown subsys name 'cpuset' [ 67.049740][ T3083] cgroup: Unknown subsys name 'hugetlb' [ 67.050551][ T3083] cgroup: Unknown subsys name 'rlimit' [ 67.264356][ T28] audit: type=1400 audit(67.180:64): avc: denied { setattr } for pid=3083 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.266756][ T28] audit: type=1400 audit(67.190:65): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.267151][ T28] audit: type=1400 audit(67.190:66): avc: denied { mount } for pid=3083 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 67.467114][ T3085] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 67.468512][ T28] audit: type=1400 audit(67.390:67): avc: denied { relabelto } for pid=3085 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.474648][ T28] audit: type=1400 audit(67.390:68): avc: denied { write } for pid=3085 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 67.511402][ T28] audit: type=1400 audit(67.430:69): avc: denied { read } for pid=3083 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.514323][ T28] audit: type=1400 audit(67.430:70): avc: denied { open } for pid=3083 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 74.503947][ T3083] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.471431][ T28] audit: type=1400 audit(76.390:71): avc: denied { execmem } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.524131][ T28] audit: type=1400 audit(76.430:72): avc: denied { read } for pid=3088 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.524481][ T28] audit: type=1400 audit(76.440:73): avc: denied { open } for pid=3088 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.524761][ T28] audit: type=1400 audit(76.440:74): avc: denied { mounton } for pid=3088 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 76.546140][ T28] audit: type=1400 audit(76.470:75): avc: denied { module_request } for pid=3088 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.627925][ T28] audit: type=1400 audit(76.550:76): avc: denied { sys_module } for pid=3088 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.216516][ T28] audit: type=1400 audit(77.140:77): avc: denied { ioctl } for pid=3088 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.312339][ T3088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.319710][ T3088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.405475][ T3089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.416153][ T3089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.107890][ T3088] hsr_slave_0: entered promiscuous mode [ 79.111390][ T3088] hsr_slave_1: entered promiscuous mode [ 79.223333][ T3089] hsr_slave_0: entered promiscuous mode [ 79.224160][ T3089] hsr_slave_1: entered promiscuous mode [ 79.228668][ T3089] debugfs: 'hsr0' already exists in 'hsr' [ 79.230064][ T3089] Cannot create hsr debugfs directory [ 79.465945][ T28] audit: type=1400 audit(79.390:78): avc: denied { create } for pid=3088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.468081][ T28] audit: type=1400 audit(79.390:79): avc: denied { write } for pid=3088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.471988][ T28] audit: type=1400 audit(79.390:80): avc: denied { read } for pid=3088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.482389][ T3088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.513917][ T3088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.547944][ T3088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.577404][ T3088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.699512][ T3089] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.710441][ T3089] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.719985][ T3089] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.735471][ T3089] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.374403][ T3088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.539650][ T3089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.131074][ T3088] veth0_vlan: entered promiscuous mode [ 83.164207][ T3088] veth1_vlan: entered promiscuous mode [ 83.242548][ T3088] veth0_macvtap: entered promiscuous mode [ 83.266966][ T3088] veth1_macvtap: entered promiscuous mode [ 83.351970][ T2192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.352698][ T2192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.356427][ T2192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.356861][ T2192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.517887][ T28] audit: type=1400 audit(83.440:81): avc: denied { mount } for pid=3088 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.525786][ T28] audit: type=1400 audit(83.450:82): avc: denied { mounton } for pid=3088 comm="syz-executor" path="/syzkaller.wRHTXj/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.535098][ T28] audit: type=1400 audit(83.460:83): avc: denied { mount } for pid=3088 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.542517][ T3089] veth0_vlan: entered promiscuous mode [ 83.548622][ T28] audit: type=1400 audit(83.470:84): avc: denied { mounton } for pid=3088 comm="syz-executor" path="/syzkaller.wRHTXj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 83.554135][ T28] audit: type=1400 audit(83.470:85): avc: denied { mounton } for pid=3088 comm="syz-executor" path="/syzkaller.wRHTXj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 83.565895][ T3089] veth1_vlan: entered promiscuous mode [ 83.582361][ T28] audit: type=1400 audit(83.500:86): avc: denied { unmount } for pid=3088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.592363][ T28] audit: type=1400 audit(83.510:87): avc: denied { mounton } for pid=3088 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.599017][ T28] audit: type=1400 audit(83.520:88): avc: denied { mount } for pid=3088 comm="syz-executor" name="/" dev="gadgetfs" ino=3098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.615523][ T28] audit: type=1400 audit(83.540:89): avc: denied { mount } for pid=3088 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.617497][ T28] audit: type=1400 audit(83.540:90): avc: denied { mounton } for pid=3088 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 83.641761][ T3089] veth0_macvtap: entered promiscuous mode [ 83.655587][ T3089] veth1_macvtap: entered promiscuous mode [ 83.704703][ T3088] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.765989][ T2192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.767124][ T2192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.767858][ T2192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.768100][ T2192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.375461][ T3697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.957749][ T3727] 8<--- cut here --- [ 88.957998][ T3727] Unable to handle kernel paging request at virtual address fee04f27 when write SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 88.973658][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 88.974034][ T28] audit: type=1400 audit(88.880:111): avc: denied { read } for pid=2895 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 88.974243][ T28] audit: type=1400 audit(88.880:112): avc: denied { search } for pid=2895 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.974428][ T28] audit: type=1400 audit(88.880:113): avc: denied { search } for pid=2895 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.974608][ T28] audit: type=1400 audit(88.880:114): avc: denied { add_name } for pid=2895 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.974780][ T28] audit: type=1400 audit(88.880:115): avc: denied { create } for pid=2895 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.974968][ T28] audit: type=1400 audit(88.880:116): avc: denied { append open } for pid=2895 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.975151][ T28] audit: type=1400 audit(88.880:117): avc: denied { getattr } for pid=2895 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.014100][ T3727] [fee04f27] *pgd=80000080007003, *pmd=00000000 [ 89.018382][ T3727] Internal error: Oops: a06 [#1] SMP ARM [ 89.020913][ T3727] Modules linked in: [ 89.022424][ T3727] CPU: 1 UID: 0 PID: 3727 Comm: syz.1.12 Not tainted syzkaller #0 PREEMPT [ 89.023478][ T3727] Hardware name: ARM-Versatile Express [ 89.023944][ T3727] PC is at parport_attach+0x174/0x1d0 [ 89.024823][ T3727] LR is at parport_attach+0x164/0x1d0 [ 89.025099][ T3727] pc : [<81433874>] lr : [<81433864>] psr: 60000013 [ 89.025371][ T3727] sp : e0171d30 ip : e0171d30 fp : e0171d54 [ 89.025596][ T3727] r10: 82b2f064 r9 : 00000003 r8 : 83381240 [ 89.026033][ T3727] r7 : e0171d90 r6 : 83381240 r5 : 00000000 r4 : 00000000 [ 89.026301][ T3727] r3 : fee04f27 r2 : 81e24a18 r1 : 00000001 r0 : 814334e4 [ 89.026647][ T3727] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 89.026940][ T3727] Control: 30c5387d Table: 85e99180 DAC: 00000000 [ 89.027222][ T3727] Register r0 information: non-slab/vmalloc memory [ 89.027999][ T3727] Register r1 information: non-paged memory [ 89.028474][ T3727] Register r2 information: non-slab/vmalloc memory [ 89.028746][ T3727] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 89.029264][ T3727] Register r4 information: NULL pointer [ 89.029514][ T3727] Register r5 information: NULL pointer [ 89.029727][ T3727] Register r6 information: slab kmalloc-192 start 83381240 pointer offset 0 size 192 [ 89.030994][ T3727] Register r7 information: 2-page vmalloc region starting at 0xe0170000 allocated at kernel_clone+0xac/0x428 [ 89.031492][ T3727] Register r8 information: slab kmalloc-192 start 83381240 pointer offset 0 size 192 [ 89.032097][ T3727] Register r9 information: non-paged memory [ 89.032345][ T3727] Register r10 information: non-slab/vmalloc memory [ 89.032600][ T3727] Register r11 information: 2-page vmalloc region starting at 0xe0170000 allocated at kernel_clone+0xac/0x428 [ 89.033226][ T3727] Register r12 information: 2-page vmalloc region starting at 0xe0170000 allocated at kernel_clone+0xac/0x428 [ 89.033682][ T3727] Process syz.1.12 (pid: 3727, stack limit = 0xe0170000) [ 89.034119][ T3727] Stack: (0xe0171d30 to 0xe0172000) [ 89.034515][ T3727] 1d20: e0171d4c e0171d40 829d6700 829d6700 [ 89.034799][ T3727] 1d40: 81e24ed8 00000000 e0171d8c e0171d58 8142f3ec 8143370c 40946400 00000000 [ 89.035086][ T3727] 1d60: e0171d7c 200000c0 83381240 b5403587 40946400 00000003 00000003 846e0000 [ 89.035475][ T3727] 1d80: e0171e4c e0171d90 8142abf8 8142f2ec 656d6f63 705f6964 6f707261 00007472 [ 89.035760][ T3727] 1da0: 00000000 00004f27 00000000 0000fffe 00000004 00000003 00000cc7 00000004 [ 89.036049][ T3727] 1dc0: 00080008 0000000e 00000006 00000002 00000001 00000007 00000001 00000006 [ 89.036573][ T3727] 1de0: 10000103 00000000 0001a44d 00000003 3fff7fff 00000089 00000010 00000000 [ 89.037096][ T3727] 1e00: 20001e58 00000007 00000e69 0000003c 00000008 0000000a ffffffff effffff8 [ 89.037563][ T3727] 1e20: 00000000 211202b1 00000000 838d5180 83381240 200000c0 40946400 00000003 [ 89.037848][ T3727] 1e40: e0171f14 e0171e50 8142bf1c 8142ab30 00000000 211202b1 00000000 00000000 [ 89.038173][ T3727] 1e60: 824b857c e0171ea4 0000005f 84217be8 00000064 83381270 e0171ee4 e0171e88 [ 89.038537][ T3727] 1e80: 807cf0d0 807c54a8 00000064 00000001 00000000 e0171ea4 830e2490 834db000 [ 89.039038][ T3727] 1ea0: 00006400 0000000b e0171e98 00000000 00000000 211202b1 00000000 838d5180 [ 89.039348][ T3727] 1ec0: 40946400 200000c0 200000c0 838d5180 00000003 846e0000 e0171ef4 e0171ee8 [ 89.039629][ T3727] 1ee0: 807cf200 211202b1 e0171f14 00000000 838d5181 40946400 200000c0 838d5180 [ 89.039918][ T3727] 1f00: 00000003 846e0000 e0171fa4 e0171f18 80590598 8142bbd4 ecac8b10 846e0000 [ 89.040208][ T3727] 1f20: e0171f3c e0171f30 81ae45f4 81ae44c0 e0171f54 e0171f40 8025a824 8028c290 [ 89.040520][ T3727] 1f40: e0171fb0 40000000 e0171f84 e0171f58 80220bf8 8025a7e0 00000000 8281d2bc [ 89.040811][ T3727] 1f60: e0171fb0 0013e480 ecac8b10 80220b4c 00000000 211202b1 e0171fac 00000000 [ 89.041140][ T3727] 1f80: 00000000 00346310 00000036 8020029c 846e0000 00000036 00000000 e0171fa8 [ 89.041437][ T3727] 1fa0: 80200060 80590360 00000000 00000000 00000003 40946400 200000c0 00000000 [ 89.041716][ T3727] 1fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f990dc [ 89.041993][ T3727] 1fe0: 76f98e88 76f98e78 00018ba0 001302e0 60000010 00000003 00000000 00000000 [ 89.042431][ T3727] Call trace: [ 89.042945][ T3727] [<81433700>] (parport_attach) from [<8142f3ec>] (comedi_device_attach+0x10c/0x248) [ 89.044121][ T3727] r6:00000000 r5:81e24ed8 r4:829d6700 [ 89.044405][ T3727] [<8142f2e0>] (comedi_device_attach) from [<8142abf8>] (do_devconfig_ioctl+0xd4/0x21c) [ 89.044760][ T3727] r10:846e0000 r9:00000003 r8:00000003 r7:40946400 r6:b5403587 r5:83381240 [ 89.045179][ T3727] r4:200000c0 [ 89.045526][ T3727] [<8142ab24>] (do_devconfig_ioctl) from [<8142bf1c>] (comedi_unlocked_ioctl+0x354/0x1dbc) [ 89.045878][ T3727] r8:00000003 r7:40946400 r6:200000c0 r5:83381240 r4:838d5180 [ 89.046225][ T3727] [<8142bbc8>] (comedi_unlocked_ioctl) from [<80590598>] (sys_ioctl+0x244/0xb5c) [ 89.046676][ T3727] r10:846e0000 r9:00000003 r8:838d5180 r7:200000c0 r6:40946400 r5:838d5181 [ 89.046936][ T3727] r4:00000000 [ 89.047078][ T3727] [<80590354>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 89.047397][ T3727] Exception stack(0xe0171fa8 to 0xe0171ff0) [ 89.047619][ T3727] 1fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 89.047915][ T3727] 1fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f990dc [ 89.048192][ T3727] 1fe0: 76f98e88 76f98e78 00018ba0 001302e0 [ 89.048417][ T3727] r10:00000036 r9:846e0000 r8:8020029c r7:00000036 r6:00346310 r5:00000000 [ 89.048684][ T3727] r4:00000000 [ 89.049126][ T3727] Code: e596306c e3a04000 e7f33053 e2433612 (e5c34000) [ 89.050955][ T3727] ---[ end trace 0000000000000000 ]--- [ 89.059565][ T3727] Kernel panic - not syncing: Fatal exception [ 89.063762][ T3727] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:00:31 Registers: info registers vcpu 0 CPU#0 R00=829cd3d0 R01=82455d90 R02=b23b1690 R03=81ae4ec0 R04=82ac5380 R05=7d357000 R06=00004482 R07=00000014 R08=dddc8200 R09=dddc81d0 R10=00000014 R11=df801e64 R12=df801e68 R13=df801e58 R14=8136dbc4 R15=81ae4ed0 PSR=60010193 -ZC- A S svc32 s00=00000000 s01=00010000 d00=0001000000000000 s02=00080004 s03=000c0000 d01=000c000000080004 s04=000e0014 s05=00200000 d02=00200000000e0014 s06=00180000 s07=73000000 d03=7300000000180000 s08=000061fd s09=00020000 d04=00020000000061fd s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00020000 d06=0002000000000000 s14=00340000 s15=00140000 d07=0014000000340000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=0008000d s33=000da803 d16=000da8030008000d s34=b0030008 s35=aa08000d d17=aa08000db0030008 s36=d9cab2f0 s37=27d39ec8 d18=27d39ec8d9cab2f0 s38=060166aa s39=02010800 d19=02010800060166aa s40=08000d80 s41=4084a180 d20=4084a18008000d80 s42=06006efe s43=00200800 d21=0020080006006efe s44=08000608 s45=0156d000 d22=0156d00008000608 s46=00080608 s47=02010000 d23=0201000000080608 s48=1e58946f s49=cb613522 d24=cb6135221e58946f s50=a07a681b s51=399892fa d25=399892faa07a681b s52=a0159187 s53=6b92deb3 d26=6b92deb3a0159187 s54=028cf503 s55=bcdd25b4 d27=bcdd25b4028cf503 s56=4f0b6e45 s57=a45ea09a d28=a45ea09a4f0b6e45 s58=76221376 s59=a6f24814 d29=a6f2481476221376 s60=8c69c54a s61=0eccf8a6 d30=0eccf8a68c69c54a s62=52627c77 s63=0f91ea3f d31=0f91ea3f52627c77 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=ebf89d84 R01=00000c40 R02=00000000 R03=00000000 R04=83001480 R05=00000000 R06=8515b000 R07=00000c40 R08=00001000 R09=8280c82c R10=851b9800 R11=ebf89bdc R12=8515bc00 R13=ebf89b90 R14=00000000 R15=807ec958 PSR=600f0013 -ZC- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=00000000 s03=00000000 d01=0000000000000000 s04=ef0cee00 s05=ef0cee00 d02=ef0cee00ef0cee00 s06=08040200 s07=80402000 d03=8040200008040200 s08=00000c00 s09=c0200c03 d04=c0200c0300000c00 s10=08040201 s11=80402000 d05=8040200008040201 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000