last executing test programs: 2.951491558s ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x0, 0x609}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MTU={0x8, 0x4, 0xff}]}, 0x50}}, 0x40014) 1.910230356s ago: executing program 1 (id=2): mprotect(&(0x7f00008e4000/0x4000)=nil, 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) 388.379458ms ago: executing program 0 (id=3): r0 = socket(0x10, 0x80002, 0x0) getsockopt(r0, 0x1, 0x5, &(0x7f0000000540)=""/96, &(0x7f0000000780)=0x60) 0s ago: executing program 0 (id=4): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711035000000276699aebfa946975f9fba17f80000c60000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) kernel console output (not intermixed with test programs): [ 189.931160][ T29] audit: type=1400 audit(189.590:78): avc: denied { write } for pid=3350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.135894][ T29] audit: type=1400 audit(190.800:79): avc: denied { write } for pid=3356 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.803523][ T29] audit: type=1400 audit(192.460:80): avc: denied { write } for pid=3360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.738424][ T29] audit: type=1400 audit(193.400:81): avc: denied { write } for pid=3363 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.253065][ T29] audit: type=1400 audit(194.920:82): avc: denied { write } for pid=3368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.884826][ T29] audit: type=1400 audit(195.550:83): avc: denied { write } for pid=3371 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:32557' (ED25519) to the list of known hosts. [ 224.330076][ T29] audit: type=1400 audit(223.990:84): avc: denied { name_bind } for pid=3376 comm="sshd-session" src=30002 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 224.936135][ T29] audit: type=1400 audit(224.600:85): avc: denied { execute } for pid=3377 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 224.947644][ T29] audit: type=1400 audit(224.610:86): avc: denied { execute_no_trans } for pid=3377 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 233.177143][ T29] audit: type=1400 audit(232.840:87): avc: denied { mounton } for pid=3377 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 233.215825][ T29] audit: type=1400 audit(232.880:88): avc: denied { mount } for pid=3377 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 233.245979][ T3377] cgroup: Unknown subsys name 'net' [ 233.310755][ T29] audit: type=1400 audit(232.970:89): avc: denied { unmount } for pid=3377 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 233.645229][ T3377] cgroup: Unknown subsys name 'cpuset' [ 233.716726][ T3377] cgroup: Unknown subsys name 'rlimit' [ 234.123702][ T29] audit: type=1400 audit(233.790:90): avc: denied { setattr } for pid=3377 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.133911][ T29] audit: type=1400 audit(233.790:91): avc: denied { mounton } for pid=3377 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 234.140901][ T29] audit: type=1400 audit(233.800:92): avc: denied { mount } for pid=3377 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 234.789183][ T3380] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 234.794170][ T29] audit: type=1400 audit(234.460:93): avc: denied { relabelto } for pid=3380 comm="mkswap" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 234.800199][ T29] audit: type=1400 audit(234.460:94): avc: denied { write } for pid=3380 comm="mkswap" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 234.907982][ T29] audit: type=1400 audit(234.570:95): avc: denied { read } for pid=3377 comm="syz-executor" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 234.918628][ T29] audit: type=1400 audit(234.570:96): avc: denied { open } for pid=3377 comm="syz-executor" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 234.951725][ T3377] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 260.326388][ T29] audit: type=1400 audit(259.990:97): avc: denied { execmem } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 260.394339][ T29] audit: type=1400 audit(260.060:98): avc: denied { read } for pid=3383 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 260.401773][ T29] audit: type=1400 audit(260.060:99): avc: denied { open } for pid=3383 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 260.420633][ T29] audit: type=1400 audit(260.080:100): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 260.478044][ T29] audit: type=1400 audit(260.140:101): avc: denied { module_request } for pid=3383 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 260.734254][ T29] audit: type=1400 audit(260.400:102): avc: denied { sys_module } for pid=3385 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 268.836239][ T3383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.897495][ T3383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.516584][ T3385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.575441][ T3385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.969101][ T3383] hsr_slave_0: entered promiscuous mode [ 273.007132][ T3383] hsr_slave_1: entered promiscuous mode [ 273.578149][ T3385] hsr_slave_0: entered promiscuous mode [ 273.588613][ T3385] hsr_slave_1: entered promiscuous mode [ 273.601481][ T3385] debugfs: 'hsr0' already exists in 'hsr' [ 273.604978][ T3385] Cannot create hsr debugfs directory [ 276.580841][ T29] audit: type=1400 audit(276.230:103): avc: denied { create } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 276.582875][ T29] audit: type=1400 audit(276.240:104): avc: denied { write } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 276.594431][ T29] audit: type=1400 audit(276.260:105): avc: denied { read } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 276.673523][ T3383] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 276.832157][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 276.857065][ T3383] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.935665][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 276.978102][ T3383] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 277.047043][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 277.056412][ T3383] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.095055][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 277.807731][ T3385] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.858870][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 277.867904][ T3385] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 277.901818][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 277.908541][ T3385] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 277.956436][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 277.966608][ T3385] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 277.996314][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.907485][ T3383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.466221][ T3385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.645391][ T3383] veth0_vlan: entered promiscuous mode [ 292.834872][ T3383] veth1_vlan: entered promiscuous mode [ 293.153030][ T3383] veth0_macvtap: entered promiscuous mode [ 293.204586][ T3383] veth1_macvtap: entered promiscuous mode [ 293.277110][ T3385] veth0_vlan: entered promiscuous mode [ 293.685178][ T3385] veth1_vlan: entered promiscuous mode [ 294.073007][ T26] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.085932][ T26] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.142113][ T1048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.263964][ T123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.864123][ T29] audit: type=1400 audit(294.530:106): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/syzkaller.2hsPFc/syz-tmp" dev="vda" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 294.874608][ T29] audit: type=1400 audit(294.540:107): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 294.896047][ T29] audit: type=1400 audit(294.560:108): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/syzkaller.2hsPFc/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 294.923185][ T29] audit: type=1400 audit(294.590:109): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 294.958984][ T3385] veth0_macvtap: entered promiscuous mode [ 294.973464][ T29] audit: type=1400 audit(294.640:110): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/syzkaller.2hsPFc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 294.991827][ T29] audit: type=1400 audit(294.660:111): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/syzkaller.2hsPFc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 295.124834][ T3385] veth1_macvtap: entered promiscuous mode [ 295.126919][ T29] audit: type=1400 audit(294.790:112): avc: denied { unmount } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 295.208332][ T29] audit: type=1400 audit(294.860:113): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 295.260792][ T29] audit: type=1400 audit(294.920:114): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="gadgetfs" ino=2954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 295.395773][ T29] audit: type=1400 audit(295.060:115): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 295.828402][ T3383] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 295.883898][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.884423][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.884926][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.885125][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.667564][ T3537] ------------[ cut here ]------------ [ 299.668997][ T3537] UBSAN: array-index-out-of-bounds in kernel/bpf/disasm.c:306:21 [ 299.673725][ T3537] index 3 is out of range for type 'char *[3]' [ 299.675393][ T3537] CPU: 1 UID: 0 PID: 3537 Comm: syz.0.4 Tainted: G W syzkaller #0 PREEMPT [ 299.675515][ T3537] Tainted: [W]=WARN [ 299.675547][ T3537] Hardware name: linux,dummy-virt (DT) [ 299.675625][ T3537] Call trace: [ 299.675725][ T3537] show_stack+0x18/0x24 (C) [ 299.675889][ T3537] dump_stack_lvl+0x7c/0xb0 [ 299.676011][ T3537] dump_stack+0x1c/0x28 [ 299.676071][ T3537] ubsan_epilogue+0x10/0x44 [ 299.676145][ T3537] __ubsan_handle_out_of_bounds+0xa0/0xc4 [ 299.676245][ T3537] print_bpf_insn+0x1640/0x1a80 [ 299.676317][ T3537] diag_print_insn_context+0x2cc/0x754 [ 299.676377][ T3537] bpf_diag_source+0x57c/0x10c8 [ 299.676427][ T3537] bpf_diag_program_structure+0x1a4/0x24c [ 299.676477][ T3537] bpf_check+0x3a00/0x7698 [ 299.676530][ T3537] bpf_prog_load+0x1098/0x1fb0 [ 299.676584][ T3537] __sys_bpf+0xadc/0x2c70 [ 299.676636][ T3537] __arm64_sys_bpf+0xb0/0x10c [ 299.676689][ T3537] invoke_syscall+0x74/0x240 [ 299.676836][ T3537] el0_svc_common.constprop.0+0xac/0x230 [ 299.676901][ T3537] do_el0_svc+0x40/0x58 [ 299.676953][ T3537] el0_svc+0x58/0x2a4 [ 299.677013][ T3537] el0t_64_sync_handler+0xa0/0xe4 [ 299.677119][ T3537] el0t_64_sync+0x198/0x19c [ 299.691379][ T3537] ---[ end trace ]--- [ 299.692840][ T3537] ================================================================== [ 299.693131][ T3537] BUG: KASAN: global-out-of-bounds in print_bpf_insn+0x1620/0x1a80 [ 299.693331][ T3537] Read of size 8 at addr ffff800085b17d98 by task syz.0.4/3537 [ 299.693387][ T3537] [ 299.693476][ T3537] CPU: 1 UID: 0 PID: 3537 Comm: syz.0.4 Tainted: G W syzkaller #0 PREEMPT [ 299.693538][ T3537] Tainted: [W]=WARN [ 299.693559][ T3537] Hardware name: linux,dummy-virt (DT) [ 299.693591][ T3537] Call trace: [ 299.693615][ T3537] show_stack+0x18/0x24 (C) [ 299.693675][ T3537] dump_stack_lvl+0x7c/0xb0 [ 299.693796][ T3537] print_report+0x18c/0x4e8 [ 299.693855][ T3537] kasan_report+0xb8/0x15c [ 299.693948][ T3537] __asan_report_load8_noabort+0x20/0x34 [ 299.694000][ T3537] print_bpf_insn+0x1620/0x1a80 [ 299.694049][ T3537] diag_print_insn_context+0x2cc/0x754 [ 299.694101][ T3537] bpf_diag_source+0x57c/0x10c8 [ 299.694144][ T3537] bpf_diag_program_structure+0x1a4/0x24c [ 299.694216][ T3537] bpf_check+0x3a00/0x7698 [ 299.694273][ T3537] bpf_prog_load+0x1098/0x1fb0 [ 299.694330][ T3537] __sys_bpf+0xadc/0x2c70 [ 299.694378][ T3537] __arm64_sys_bpf+0xb0/0x10c [ 299.694425][ T3537] invoke_syscall+0x74/0x240 [ 299.694471][ T3537] el0_svc_common.constprop.0+0xac/0x230 [ 299.694517][ T3537] do_el0_svc+0x40/0x58 [ 299.694559][ T3537] el0_svc+0x58/0x2a4 [ 299.694610][ T3537] el0t_64_sync_handler+0xa0/0xe4 [ 299.694654][ T3537] el0t_64_sync+0x198/0x19c [ 299.694722][ T3537] [ 299.694795][ T3537] The buggy address belongs to the variable: [ 299.694822][ T3537] bpf_ldsx_string+0x18/0x3a0 [ 299.694879][ T3537] [ 299.694926][ T3537] The buggy address belongs to a vmalloc virtual mapping [ 299.695222][ T3537] The buggy address belongs to the physical page: [ 299.695698][ T3537] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x45d17 [ 299.695910][ T3537] flags: 0x1ffc00000002000(reserved|node=0|zone=0|lastcpupid=0x7ff) [ 299.696824][ T3537] raw: 01ffc00000002000 fffffdffc01745c8 fffffdffc01745c8 0000000000000000 [ 299.696937][ T3537] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 299.697119][ T3537] page dumped because: kasan: bad access detected [ 299.697200][ T3537] [ 299.697253][ T3537] Memory state around the buggy address: [ 299.697608][ T3537] ffff800085b17c80: 00 00 00 05 f9 f9 f9 f9 00 06 f9 f9 f9 f9 f9 f9 [ 299.697743][ T3537] ffff800085b17d00: 00 04 f9 f9 f9 f9 f9 f9 00 05 f9 f9 f9 f9 f9 f9 [ 299.697807][ T3537] >ffff800085b17d80: 00 00 00 f9 f9 f9 f9 f9 00 00 00 06 f9 f9 f9 f9 [ 299.697874][ T3537] ^ [ 299.698033][ T3537] ffff800085b17e00: 00 00 00 03 f9 f9 f9 f9 00 00 00 00 01 f9 f9 f9 [ 299.698090][ T3537] ffff800085b17e80: f9 f9 f9 f9 07 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 299.698237][ T3537] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 299.781350][ T3537] Disabling lock debugging due to kernel taint [ 300.465588][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.707045][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.875788][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.074397][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.763592][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 301.764448][ T29] audit: type=1400 audit(301.430:124): avc: denied { read } for pid=3227 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 302.397868][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.458913][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.515762][ T36] bond0 (unregistering): Released all slaves [ 302.679194][ T36] hsr_slave_0: left promiscuous mode [ 302.687589][ T36] hsr_slave_1: left promiscuous mode [ 302.711794][ T36] veth1_macvtap: left promiscuous mode [ 302.712381][ T36] veth0_macvtap: left promiscuous mode [ 302.713205][ T36] veth1_vlan: left promiscuous mode [ 302.713785][ T36] veth0_vlan: left promiscuous mode [ 305.523517][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.704519][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.875484][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.903502][ T29] audit: type=1400 audit(305.570:125): avc: denied { write } for pid=3543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.067785][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.384171][ T29] audit: type=1400 audit(306.050:126): avc: denied { write } for pid=3546 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.592482][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.643916][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.697775][ T36] bond0 (unregistering): Released all slaves [ 307.760815][ T3227] 8021q: adding VLAN 0 to HW filter on device eth1 [ 307.878259][ T36] hsr_slave_0: left promiscuous mode [ 307.887306][ T36] hsr_slave_1: left promiscuous mode [ 307.923527][ T36] veth1_macvtap: left promiscuous mode [ 307.925035][ T36] veth0_macvtap: left promiscuous mode [ 307.926783][ T36] veth1_vlan: left promiscuous mode [ 307.928313][ T36] veth0_vlan: left promiscuous mode [ 311.394138][ T29] audit: type=1400 audit(311.060:127): avc: denied { write } for pid=3554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.889095][ T29] audit: type=1400 audit(311.550:128): avc: denied { write } for pid=3557 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.232978][ T3227] 8021q: adding VLAN 0 to HW filter on device eth2 [ 313.115534][ T29] audit: type=1400 audit(312.780:129): avc: denied { write } for pid=3561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.573643][ T29] audit: type=1400 audit(313.240:130): avc: denied { write } for pid=3564 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.932665][ T3227] 8021q: adding VLAN 0 to HW filter on device eth3 [ 314.823034][ T29] audit: type=1400 audit(314.490:131): avc: denied { write } for pid=3568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.317533][ T29] audit: type=1400 audit(314.980:132): avc: denied { write } for pid=3571 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.676526][ T3227] 8021q: adding VLAN 0 to HW filter on device eth4 [ 316.565416][ T29] audit: type=1400 audit(316.230:133): avc: denied { write } for pid=3575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.021389][ T29] audit: type=1400 audit(316.680:134): avc: denied { write } for pid=3578 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.299984][ T3227] 8021q: adding VLAN 0 to HW filter on device eth5 [ 318.465854][ T29] audit: type=1400 audit(318.130:135): avc: denied { write } for pid=3583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.958054][ T29] audit: type=1400 audit(318.620:136): avc: denied { write } for pid=3586 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.345623][ T3227] 8021q: adding VLAN 0 to HW filter on device eth6 [ 320.418504][ T29] audit: type=1400 audit(320.080:137): avc: denied { write } for pid=3591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.821800][ T29] audit: type=1400 audit(320.480:138): avc: denied { write } for pid=3594 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.121196][ T3227] 8021q: adding VLAN 0 to HW filter on device eth8 [ 322.362002][ T29] audit: type=1400 audit(322.030:139): avc: denied { write } for pid=3599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.855730][ T29] audit: type=1400 audit(322.520:140): avc: denied { write } for pid=3602 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.255507][ T3227] 8021q: adding VLAN 0 to HW filter on device eth7 VM DIAGNOSIS: 14:06:38 Registers: info registers vcpu 0 CPU#0 PC=ffff8000812d2278 X00=0000000000000002 X01=0000000000000004 X02=0000000000000000 X03=ffff8000812d24a0 X04=ffff700011b2d128 X05=ffff80008d968940 X06=ffff700011b6ac50 X07=0000000000000001 X08=0000000000000003 X09=dfff800000000000 X10=ffff700011b6ac50 X11=1ffff00011b6ac50 X12=ffff700010ef9549 X13=0000000000000001 X14=1fffe0000d7f33e5 X15=1850f70890f9ab2b X16=ab66000091fbffff X17=09d2f8139fb53652 X18=ffff00006bf7d268 X19=ffff00001cd93400 X20=1ffff00011b72dd4 X21=0000000000000014 X22=ffff8000879d1660 X23=0000000000000000 X24=ffff800084aa7220 X25=0000000000000000 X26=0000000000000000 X27=0000000000000000 X28=ffff8000877c7ee0 X29=ffff80008db96d60 X30=ffff8000803b88d4 SP=ffff80008db96c10 PSTATE=80000005 N--- EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=30706f6f6c2f6b63:6f6c622f6c617574 Q02=605a2ec3aa72d694:0000aaa071b7b3c2 Q03=ff00000000000000:0000000000000000 Q04=3333333333333333:3333333333333333 Q05=0000000000000000:30000000cccccccc Q06=0000000000000073:0000aaaadb1b43c0 Q07=0000000000000074:0000aaaadb1b1600 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffd629ed30:0000ffffd629ed30 Q17=ffffff80ffffffd0:0000ffffd629ed00 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff8000819b54cc X00=ffff80008dbd1000 X01=0000000000000000 X02=1ffff00010ef9579 X03=1fffe0000d7f61dc X04=aca246d78b60134b X05=1fffe0000d7f623e X06=0000000000000000 X07=0000000041b58ab3 X08=ffff8000881218e3 X09=dfff800000000000 X10=ffff70001102431c X11=1ffff0001102431c X12=ffff70001102431d X13=ffff7fffe483b000 X14=1ffff00010ef96d3 X15=ffff8000877cb698 X16=ffff80008dba0000 X17=ffff7fffe483b000 X18=0000000000000000 X19=ffff8000877cabc0 X20=0000000000000405 X21=ffff8000800a28e8 X22=0000000000000000 X23=ffff800085a90400 X24=ffff800085dc9080 X25=0000000000000006 X26=ffff00000e592800 X27=0000000000000001 X28=0000000000000001 X29=ffff80008dba7ec0 X30=ffff8000804098c4 SP=ffff80008dba7ec0 PSTATE=100000c5 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=0100000000000000:0100000000000000 Q01=0000000100000000:0000000000000000 Q02=0000000000000001:0000000000000000 Q03=00d000a800000000:0000000000000000 Q04=0000000000000000:0000000000000002 Q05=0000000000000001:0000000000000002 Q06=0000ffffb89c65b0:0000ffffb89c6590 Q07=0000ffffb89c65a8:0000ffffb89c6578 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=bb448243222c92da:e3914ed4e87380b0 Q23=43788d6f07084f17:4508b00c6052a10f Q24=b20fae707afde253:388e9c6c4fa85ca0 Q25=8e9f894b2581e79e:20c883c9819d5c97 Q26=57c93d417f4d0394:89cd11f6992873d1 Q27=6b69be1163cb6500:a4ac85c293540e63 Q28=6edc4d3a2914b135:d8e9c869e2695c88 Q29=0000000000000000:0009000700030001 Q30=ffffff80ffffffd8:0000ffffcea40c80 Q31=0000000000000000:0000000000000000