last executing test programs: 3.838604986s ago: executing program 0 (id=31): r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x24008004}, 0x829c14574d2609e5) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000041) 3.728121808s ago: executing program 0 (id=32): r0 = io_uring_setup(0x2ae6, &(0x7f0000000000)={0x0, 0xb9f2, 0x400, 0x1, 0xa9}) syz_ublk_setup_io_uring(0x208b, &(0x7f0000000080)={0x0, 0x524, 0x20, 0x2, 0x59, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) munmap$IORING_OFF_SQ_RING(r1, 0x7) 3.528825262s ago: executing program 0 (id=33): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) close(0x3) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) 1.637388631s ago: executing program 0 (id=49): r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0), r1) 1.47426243s ago: executing program 0 (id=51): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$selinux_create(r1, 0x0, 0x0) 1.251402386s ago: executing program 0 (id=53): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x3, 0x3, 0x60, 0x6, 'syz1\x00', 0x10}) 690.63754ms ago: executing program 1 (id=57): r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000002b40), 0x2, 0x0) r1 = dup(r0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, 0x0) 469.056786ms ago: executing program 1 (id=58): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = dup(r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004004}, 0xa0) 310.486784ms ago: executing program 1 (id=59): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) 229.856944ms ago: executing program 1 (id=60): r0 = fsopen(&(0x7f0000000080)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000200)="fd", 0x1) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) 118.657327ms ago: executing program 1 (id=61): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = dup(r0) ioctl$FBIOBLANK(r1, 0x4611, 0x2) 0s ago: executing program 1 (id=62): r0 = syz_ublk_setup_io_uring(0x691e, &(0x7f0000000000)={0x0, 0xd0f9, 0x2, 0x3, 0x10034f}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000640)={0x1, 0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/17, 0x11}], 0x0}, 0x20) kernel console output (not intermixed with test programs): [ 41.383233][ T28] audit: type=1400 audit(41.280:88): avc: denied { write } for pid=3095 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.789319][ T28] audit: type=1400 audit(41.690:89): avc: denied { write } for pid=3098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.371901][ T28] audit: type=1400 audit(42.270:90): avc: denied { write } for pid=3102 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.816193][ T28] audit: type=1400 audit(44.710:91): avc: denied { read write } for pid=3105 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:28394' (ED25519) to the list of known hosts. [ 62.264911][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 62.265584][ T28] audit: type=1400 audit(62.160:93): avc: denied { name_bind } for pid=3109 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 63.902922][ T28] audit: type=1400 audit(63.800:94): avc: denied { execute } for pid=3110 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.905175][ T28] audit: type=1400 audit(63.800:95): avc: denied { execute_no_trans } for pid=3110 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 67.664509][ T28] audit: type=1400 audit(67.560:96): avc: denied { mounton } for pid=3110 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 67.669060][ T28] audit: type=1400 audit(67.560:97): avc: denied { mount } for pid=3110 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.687081][ T3110] cgroup: Unknown subsys name 'net' [ 67.696637][ T28] audit: type=1400 audit(67.590:98): avc: denied { unmount } for pid=3110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.823675][ T3110] cgroup: Unknown subsys name 'cpuset' [ 67.827560][ T3110] cgroup: Unknown subsys name 'hugetlb' [ 67.829898][ T3110] cgroup: Unknown subsys name 'rlimit' [ 68.020350][ T28] audit: type=1400 audit(67.920:99): avc: denied { setattr } for pid=3110 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.023112][ T28] audit: type=1400 audit(67.920:100): avc: denied { mounton } for pid=3110 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 68.024437][ T28] audit: type=1400 audit(67.920:101): avc: denied { mount } for pid=3110 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 68.233134][ T3112] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 68.237725][ T28] audit: type=1400 audit(68.130:102): avc: denied { relabelto } for pid=3112 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.243724][ T28] audit: type=1400 audit(68.140:103): avc: denied { write } for pid=3112 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 68.276491][ T28] audit: type=1400 audit(68.170:104): avc: denied { read } for pid=3110 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.277290][ T28] audit: type=1400 audit(68.170:105): avc: denied { open } for pid=3110 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 74.770314][ T3110] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.806800][ T28] audit: type=1400 audit(76.700:106): avc: denied { execmem } for pid=3113 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.868536][ T28] audit: type=1400 audit(76.760:107): avc: denied { read } for pid=3115 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.868621][ T28] audit: type=1400 audit(76.760:108): avc: denied { open } for pid=3115 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.868645][ T28] audit: type=1400 audit(76.760:109): avc: denied { mounton } for pid=3115 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 76.882122][ T28] audit: type=1400 audit(76.780:110): avc: denied { module_request } for pid=3115 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.949989][ T28] audit: type=1400 audit(76.850:111): avc: denied { sys_module } for pid=3117 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.466055][ T28] audit: type=1400 audit(77.360:112): avc: denied { create } for pid=3117 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.499848][ T28] audit: type=1400 audit(77.400:113): avc: denied { write } for pid=3117 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.618739][ T28] audit: type=1400 audit(77.510:114): avc: denied { read } for pid=3117 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.676464][ T28] audit: type=1400 audit(77.570:115): avc: denied { ioctl } for pid=3117 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=678 ioctlcmd=0x400454ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.885644][ T3117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.900736][ T3117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.077611][ T3115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.095064][ T3115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.630447][ T3117] hsr_slave_0: entered promiscuous mode [ 79.632244][ T3117] hsr_slave_1: entered promiscuous mode [ 79.837532][ T3115] hsr_slave_0: entered promiscuous mode [ 79.842765][ T3115] hsr_slave_1: entered promiscuous mode [ 79.843849][ T3115] debugfs: 'hsr0' already exists in 'hsr' [ 79.844204][ T3115] Cannot create hsr debugfs directory [ 80.154848][ T3117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.165074][ T3117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.168073][ T3117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.176783][ T3117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.186598][ T3117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.200807][ T3117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.203505][ T3117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.212586][ T3117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.213337][ T3115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.223417][ T3115] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.250485][ T3115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.257326][ T3115] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.271678][ T3115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.281868][ T3115] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.297828][ T3115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.305775][ T3115] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.008907][ T3117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.062219][ T3115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.409426][ T3117] veth0_vlan: entered promiscuous mode [ 83.425356][ T3117] veth1_vlan: entered promiscuous mode [ 83.476775][ T3117] veth0_macvtap: entered promiscuous mode [ 83.489857][ T3117] veth1_macvtap: entered promiscuous mode [ 83.560241][ T2643] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.560522][ T2643] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.560564][ T2643] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.560595][ T2643] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.663367][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 83.663509][ T28] audit: type=1400 audit(83.560:121): avc: denied { mount } for pid=3117 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.673126][ T28] audit: type=1400 audit(83.570:122): avc: denied { mounton } for pid=3117 comm="syz-executor" path="/syzkaller.5WUj8F/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.677360][ T28] audit: type=1400 audit(83.570:123): avc: denied { mount } for pid=3117 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.685932][ T28] audit: type=1400 audit(83.580:124): avc: denied { mounton } for pid=3117 comm="syz-executor" path="/syzkaller.5WUj8F/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 83.687919][ T28] audit: type=1400 audit(83.580:125): avc: denied { mounton } for pid=3117 comm="syz-executor" path="/syzkaller.5WUj8F/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 83.704694][ T28] audit: type=1400 audit(83.600:126): avc: denied { unmount } for pid=3117 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.712324][ T28] audit: type=1400 audit(83.610:127): avc: denied { mounton } for pid=3117 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.713848][ T28] audit: type=1400 audit(83.610:128): avc: denied { mount } for pid=3117 comm="syz-executor" name="/" dev="gadgetfs" ino=1958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.747317][ T3115] veth0_vlan: entered promiscuous mode [ 83.759031][ T3115] veth1_vlan: entered promiscuous mode [ 83.799907][ T3115] veth0_macvtap: entered promiscuous mode [ 83.805849][ T3115] veth1_macvtap: entered promiscuous mode [ 83.843212][ T205] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.859189][ T2643] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.897513][ T28] audit: type=1400 audit(83.790:129): avc: denied { mounton } for pid=3117 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 83.897698][ T28] audit: type=1400 audit(83.790:130): avc: denied { mount } for pid=3117 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 83.908878][ T54] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.908987][ T54] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.976382][ T3117] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.727222][ T3753] Zero length message leads to an empty skb [ 85.360137][ T3767] capability: warning: `syz.0.12' uses deprecated v2 capabilities in a way that may be insecure [ 87.710814][ T3061] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.869505][ T3061] usb 1-1: Using ep0 maxpacket: 8 [ 87.877955][ T3061] usb 1-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 87.930647][ T3061] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.930802][ T3061] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 87.931062][ T3061] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.960966][ T3061] hub 1-1:1.0: bad descriptor, ignoring hub [ 87.961341][ T3061] hub 1-1:1.0: probe with driver hub failed with error -5 [ 88.432362][ T23] usb 1-1: USB disconnect, device number 2 [ 88.749357][ T23] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 88.921213][ T23] usb 1-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 88.946199][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.946316][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 88.946402][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.009340][ T23] hub 1-1:1.0: bad descriptor, ignoring hub [ 89.009421][ T23] hub 1-1:1.0: probe with driver hub failed with error -5 [ 89.240207][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 89.240329][ T28] audit: type=1400 audit(89.140:145): avc: denied { write } for pid=3858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.340394][ T41] usb 1-1: USB disconnect, device number 3 [ 89.556196][ T28] audit: type=1400 audit(89.450:146): avc: denied { write } for pid=3874 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.614858][ T28] audit: type=1400 audit(89.510:147): avc: denied { create } for pid=3877 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.631324][ T28] audit: type=1400 audit(89.530:148): avc: denied { write } for pid=3877 comm="syz.0.51" path="socket:[2716]" dev="sockfs" ino=2716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.961413][ T28] audit: type=1400 audit(89.850:149): avc: denied { write } for pid=3888 comm="syz.1.55" name="rt_cache" dev="proc" ino=4026532669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.052102][ T28] audit: type=1400 audit(90.950:150): avc: denied { sqpoll } for pid=3902 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.260986][ T54] ------------[ cut here ]------------ [ 91.261331][ T54] WARNING: io_uring/sqpoll.c:88 at io_sq_thread_stop+0x94/0xcc, CPU#0: kworker/u8:3/54 [ 91.264351][ T54] Modules linked in: [ 91.266529][ T54] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 91.267221][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT [ 91.267577][ T54] Hardware name: ARM-Versatile Express [ 91.268057][ T54] Workqueue: iou_exit io_ring_exit_work [ 91.268667][ T54] Call trace: [ 91.269027][ T54] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 91.269504][ T54] r7:8341c57c r6:00000000 r5:82542a90 r4:00000001 [ 91.269766][ T54] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 91.270047][ T54] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 91.270358][ T54] r7:8341c57c r6:00000000 r5:84c70000 r4:83688d7c [ 91.270582][ T54] [<8021f750>] (dump_stack) from [<80202610>] (vpanic+0x114/0x324) [ 91.270890][ T54] [<802024fc>] (vpanic) from [<80202854>] (trace_suspend_resume+0x0/0x100) [ 91.271176][ T54] r7:80971a24 [ 91.271304][ T54] [<80202820>] (panic) from [<80252ce4>] (proc_taint+0x0/0x18c) [ 91.271605][ T54] r3:8340b188 r2:00000001 r1:825282a4 r0:8252fc74 [ 91.271825][ T54] [<80252c6c>] (check_panic_on_warn) from [<802530a8>] (__warn+0x98/0x1a4) [ 91.272114][ T54] [<80253010>] (__warn) from [<8025332c>] (warn_slowpath_fmt+0x178/0x1f4) [ 91.272448][ T54] r8:00000009 r7:825a73f4 r6:df93ddf4 r5:84c70000 r4:00000000 [ 91.272689][ T54] [<802531b8>] (warn_slowpath_fmt) from [<80971a24>] (io_sq_thread_stop+0x94/0xcc) [ 91.273103][ T54] r10:83613fb0 r9:8722a2f4 r8:83403d80 r7:8722a240 r6:8722a27c r5:872cd250 [ 91.273403][ T54] r4:872cd200 [ 91.273543][ T54] [<80971990>] (io_sq_thread_stop) from [<80971abc>] (io_put_sq_data+0x60/0x9c) [ 91.273866][ T54] r5:872cd200 r4:872cd200 [ 91.274022][ T54] [<80971a5c>] (io_put_sq_data) from [<80971b8c>] (io_sq_thread_finish+0x94/0xa0) [ 91.274396][ T54] r5:872cd200 r4:8722a000 [ 91.274550][ T54] [<80971af8>] (io_sq_thread_finish) from [<80209108>] (io_ring_exit_work+0x268/0x55c) [ 91.274953][ T54] r7:8722a240 r6:8722a040 r5:8722a000 r4:8722a304 [ 91.275200][ T54] [<80208ea0>] (io_ring_exit_work) from [<80279ba4>] (process_one_work+0x1f8/0x5cc) [ 91.275567][ T54] r10:83fe2205 r9:02000000 r8:84c70000 r7:83c12a00 r6:83fe2200 r5:8722a304 [ 91.276182][ T54] r4:844b2500 [ 91.276318][ T54] [<802799ac>] (process_one_work) from [<8027ab50>] (worker_thread+0x16c/0x318) [ 91.276582][ T54] r10:83c12a00 r9:844b2530 r8:84c70000 r7:83403d80 r6:83c12a20 r5:83c12a00 [ 91.276845][ T54] r4:844b2500 [ 91.276972][ T54] [<8027a9e4>] (worker_thread) from [<80285798>] (kthread+0x11c/0x154) [ 91.277288][ T54] r10:00000000 r9:df8f9e88 r8:844b2480 r7:844b2500 r6:8027a9e4 r5:84c70000 [ 91.277590][ T54] r4:83f3b980 [ 91.277730][ T54] [<8028567c>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 91.278156][ T54] Exception stack(0xdf93dfb0 to 0xdf93dff8) [ 91.278481][ T54] dfa0: 00000000 00000000 00000000 00000000 [ 91.278783][ T54] dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 91.279060][ T54] dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 91.279337][ T54] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8028567c r4:83f3b980 [ 91.281523][ T54] Rebooting in 86400 seconds..