last executing test programs: 19.372365717s ago: executing program 1 (id=270): r0 = inotify_init1(0x0) fchmod(r0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x5421, &(0x7f0000000140)={'bond_slave_0\x00', {0x2, 0x0, @multicast2}}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8903, 0x0) r1 = mq_open(&(0x7f0000000000)='@\x97\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0xffff, 0x2}) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x5451, 0x0) 19.261044068s ago: executing program 1 (id=272): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={0x0}}, 0x844) 19.141105081s ago: executing program 1 (id=273): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r2, r0, 0x0) r3 = accept4$inet(r0, 0x0, 0x0, 0x0) write$P9_RVERSION(r3, 0x0, 0x0) 19.028112173s ago: executing program 1 (id=274): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000580)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) dup2(r1, r2) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 18.922810053s ago: executing program 1 (id=275): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$VT_RESIZE(r2, 0x8906, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r3 = accept4$inet(r1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000)=0xfffffffe, 0x4) 16.338222168s ago: executing program 1 (id=277): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r1, &(0x7f00000000c0)=""/29, 0x1d) r2 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 1.582935976s ago: executing program 0 (id=309): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) dup3(r2, r3, 0x0) accept$inet(r3, 0x0, 0x0) 1.481929605s ago: executing program 0 (id=310): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000000)=0x80) dup3(r1, r3, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r3, 0x0, 0x0, 0x0) 1.35586447s ago: executing program 0 (id=311): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x40040, 0x0) dup3(r0, r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = accept4$inet6(r1, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 1.241694552s ago: executing program 0 (id=312): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r1, r0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0x5450, 0x0) 1.161447177s ago: executing program 0 (id=313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=314): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) kernel console output (not intermixed with test programs): [ 48.707252][ T31] audit: type=1400 audit(48.590:68): avc: denied { read write } for pid=3107 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.758643][ T31] audit: type=1400 audit(48.680:69): avc: denied { open } for pid=3107 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:38488' (ED25519) to the list of known hosts. [ 57.740684][ T31] audit: type=1400 audit(57.660:70): avc: denied { name_bind } for pid=3108 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.453638][ T31] audit: type=1400 audit(60.370:71): avc: denied { execute } for pid=3110 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.464618][ T31] audit: type=1400 audit(60.390:72): avc: denied { execute_no_trans } for pid=3110 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 62.623359][ T31] audit: type=1400 audit(62.540:73): avc: denied { mounton } for pid=3110 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 62.625653][ T31] audit: type=1400 audit(62.550:74): avc: denied { mount } for pid=3110 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.634843][ T3110] cgroup: Unknown subsys name 'net' [ 62.639522][ T31] audit: type=1400 audit(62.560:75): avc: denied { unmount } for pid=3110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.875038][ T3110] cgroup: Unknown subsys name 'hugetlb' [ 62.876128][ T3110] cgroup: Unknown subsys name 'rlimit' [ 63.158670][ T31] audit: type=1400 audit(63.080:76): avc: denied { setattr } for pid=3110 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.159617][ T31] audit: type=1400 audit(63.080:77): avc: denied { mounton } for pid=3110 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 63.160439][ T31] audit: type=1400 audit(63.080:78): avc: denied { mount } for pid=3110 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 63.397722][ T3112] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 63.399330][ T31] audit: type=1400 audit(63.320:79): avc: denied { relabelto } for pid=3112 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 63.405851][ T31] audit: type=1400 audit(63.330:80): avc: denied { write } for pid=3112 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 63.439815][ T31] audit: type=1400 audit(63.360:81): avc: denied { read } for pid=3110 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 63.445840][ T31] audit: type=1400 audit(63.360:82): avc: denied { open } for pid=3110 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 70.256418][ T3110] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.988114][ T31] audit: type=1400 audit(71.910:83): avc: denied { execmem } for pid=3113 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.067371][ T31] audit: type=1400 audit(71.980:84): avc: denied { mounton } for pid=3115 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 72.068520][ T31] audit: type=1400 audit(71.980:85): avc: denied { mount } for pid=3115 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 72.069290][ T31] audit: type=1400 audit(71.990:86): avc: denied { read } for pid=3115 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.079748][ T31] audit: type=1400 audit(72.000:87): avc: denied { open } for pid=3115 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.090502][ T31] audit: type=1400 audit(72.010:88): avc: denied { mounton } for pid=3115 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 72.118490][ T31] audit: type=1400 audit(72.040:89): avc: denied { module_request } for pid=3115 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.119448][ T31] audit: type=1400 audit(72.040:90): avc: denied { module_request } for pid=3116 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.261232][ T31] audit: type=1400 audit(72.180:91): avc: denied { sys_module } for pid=3116 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.056939][ T31] audit: type=1400 audit(72.980:92): avc: denied { ioctl } for pid=3116 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=691 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.416986][ T3116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.427367][ T3116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.525685][ T3115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.531486][ T3115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.297474][ T3116] hsr_slave_0: entered promiscuous mode [ 75.301817][ T3116] hsr_slave_1: entered promiscuous mode [ 75.414773][ T3115] hsr_slave_0: entered promiscuous mode [ 75.416745][ T3115] hsr_slave_1: entered promiscuous mode [ 75.418085][ T3115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.418545][ T3115] Cannot create hsr debugfs directory [ 75.661385][ T3116] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.674976][ T3116] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.689546][ T3116] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.700360][ T3116] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.755554][ T3115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.761101][ T3115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.769897][ T3115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.781351][ T3115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.346491][ T3116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.619802][ T3115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.742145][ T3116] veth0_vlan: entered promiscuous mode [ 79.770449][ T3116] veth1_vlan: entered promiscuous mode [ 79.837148][ T3116] veth0_macvtap: entered promiscuous mode [ 79.848827][ T3116] veth1_macvtap: entered promiscuous mode [ 79.916933][ T3116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.917684][ T3116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.918102][ T3116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.918448][ T3116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.039065][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 80.039166][ T31] audit: type=1400 audit(79.950:96): avc: denied { mount } for pid=3116 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.040201][ T31] audit: type=1400 audit(79.960:97): avc: denied { mounton } for pid=3116 comm="syz-executor" path="/syzkaller.K12fZb/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.054558][ T31] audit: type=1400 audit(79.960:98): avc: denied { mount } for pid=3116 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 80.065404][ T31] audit: type=1400 audit(79.990:99): avc: denied { unmount } for pid=3116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 80.070457][ T31] audit: type=1400 audit(79.990:100): avc: denied { mounton } for pid=3116 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 80.079596][ T31] audit: type=1400 audit(80.000:101): avc: denied { mount } for pid=3116 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.193571][ T3115] veth0_vlan: entered promiscuous mode [ 80.209802][ T31] audit: type=1400 audit(80.130:102): avc: denied { read write } for pid=3116 comm="syz-executor" name="loop1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.227424][ T31] audit: type=1400 audit(80.140:103): avc: denied { open } for pid=3116 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.228170][ T31] audit: type=1400 audit(80.140:104): avc: denied { ioctl } for pid=3116 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.230242][ T3115] veth1_vlan: entered promiscuous mode [ 80.293721][ T3115] veth0_macvtap: entered promiscuous mode [ 80.298424][ T3115] veth1_macvtap: entered promiscuous mode [ 80.328561][ T3115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.328849][ T3115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.329028][ T3115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.329211][ T3115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.313401][ T31] audit: type=1400 audit(83.230:105): avc: denied { name_bind } for pid=3811 comm="syz.0.9" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 85.142803][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 85.142919][ T31] audit: type=1400 audit(85.060:112): avc: denied { write } for pid=3828 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.648287][ T31] audit: type=1400 audit(85.570:113): avc: denied { ioctl } for pid=3828 comm="syz.1.17" path="socket:[1966]" dev="sockfs" ino=1966 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.997034][ T31] audit: type=1400 audit(87.920:114): avc: denied { ioctl } for pid=3866 comm="syz.1.32" path="socket:[2028]" dev="sockfs" ino=2028 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.468181][ T31] audit: type=1400 audit(88.390:115): avc: denied { create } for pid=3873 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.484102][ T31] audit: type=1400 audit(88.410:116): avc: denied { write } for pid=3873 comm="syz.0.35" path="socket:[2575]" dev="sockfs" ino=2575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.812262][ T31] audit: type=1400 audit(88.730:117): avc: denied { create } for pid=3894 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.814704][ T3896] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.817868][ T31] audit: type=1400 audit(88.740:118): avc: denied { ioctl } for pid=3894 comm="syz.1.45" path="socket:[2601]" dev="sockfs" ino=2601 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.820698][ T31] audit: type=1400 audit(88.740:119): avc: denied { bind } for pid=3894 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.825346][ T31] audit: type=1400 audit(88.740:120): avc: denied { write } for pid=3894 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.647994][ T31] audit: type=1400 audit(104.570:121): avc: denied { ioctl } for pid=3958 comm="syz.0.73" path="pid:[4026532651]" dev="nsfs" ino=4026532651 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.818249][ T31] audit: type=1400 audit(109.740:122): avc: denied { create } for pid=3980 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.305322][ T31] audit: type=1400 audit(112.220:123): avc: denied { prog_load } for pid=3996 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 112.308316][ T31] audit: type=1400 audit(112.230:124): avc: denied { bpf } for pid=3996 comm="syz.0.87" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.327396][ T31] audit: type=1400 audit(112.250:125): avc: denied { create } for pid=3996 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.337626][ T3997] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.658501][ T4001] Zero length message leads to an empty skb [ 114.100222][ T31] audit: type=1400 audit(114.020:126): avc: denied { create } for pid=4017 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.493921][ T31] audit: type=1400 audit(117.410:127): avc: denied { append } for pid=4040 comm="syz.0.106" name="001" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.680380][ T31] audit: type=1400 audit(117.600:128): avc: denied { map_create } for pid=4047 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 117.681293][ T31] audit: type=1400 audit(117.600:129): avc: denied { map_read map_write } for pid=4047 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 117.703413][ T31] audit: type=1400 audit(117.620:130): avc: denied { perfmon } for pid=4047 comm="syz.0.109" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.778845][ T31] audit: type=1400 audit(123.700:131): avc: denied { execute } for pid=4094 comm="syz.0.129" path=2F6D656D66643AFF2D02C195386FF2466ACC4B870E3A13BED54E49C46A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.222465][ T31] audit: type=1400 audit(127.140:132): avc: denied { create } for pid=4167 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 131.333547][ T31] audit: type=1400 audit(131.250:133): avc: denied { write } for pid=4218 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.334567][ T31] audit: type=1400 audit(131.250:134): avc: denied { ioctl } for pid=4218 comm="syz.0.187" path="socket:[4280]" dev="sockfs" ino=4280 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.082376][ T4251] SELinux: Context system_u:object_r:devtty_t:s0 is not valid (left unmapped). [ 135.086302][ T31] audit: type=1400 audit(135.010:135): avc: denied { relabelto } for pid=4250 comm="syz.0.199" name="cgroup.controllers" dev="tmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devtty_t:s0" [ 135.090668][ T31] audit: type=1400 audit(135.010:136): avc: denied { associate } for pid=4250 comm="syz.0.199" name="cgroup.controllers" dev="tmpfs" ino=646 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:devtty_t:s0" [ 135.137587][ T31] audit: type=1400 audit(135.060:137): avc: denied { unlink } for pid=3115 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devtty_t:s0" [ 135.724003][ T31] audit: type=1400 audit(135.640:138): avc: denied { prog_run } for pid=4262 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 135.759031][ T31] audit: type=1400 audit(135.680:139): avc: denied { setopt } for pid=4262 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.767033][ T31] audit: type=1400 audit(135.690:140): avc: denied { name_bind } for pid=4262 comm="syz.0.205" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 136.603197][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 136.609878][ T31] audit: type=1400 audit(136.510:141): avc: denied { name_bind } for pid=4272 comm="syz.1.210" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 136.715937][ T31] audit: type=1400 audit(136.640:142): avc: denied { write } for pid=4274 comm="syz.0.211" name="ip6_tables_targets" dev="proc" ino=4026532821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 136.744709][ T31] audit: type=1400 audit(136.670:143): avc: denied { ioctl } for pid=4274 comm="syz.0.211" path="socket:[3817]" dev="sockfs" ino=3817 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.354401][ T4333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4333 comm=syz.0.237 [ 153.850412][ T31] audit: type=1400 audit(153.770:144): avc: denied { unmount } for pid=3116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 158.474564][ T31] audit: type=1400 audit(158.400:145): avc: denied { setopt } for pid=4430 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 170.031906][ T4503] block nbd0: NBD_DISCONNECT [ 170.035117][ T4503] block nbd0: Disconnected due to user request. [ 170.035912][ T4503] block nbd0: shutting down sockets [ 174.344483][ T31] audit: type=1400 audit(174.270:146): avc: denied { connect } for pid=4521 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.356799][ T4522] ------------[ cut here ]------------ [ 174.357669][ T4522] WARNING: CPU: 1 PID: 4522 at lib/refcount.c:28 refcount_warn_saturate+0x13c/0x174 [ 174.359094][ T4522] refcount_t: underflow; use-after-free. [ 174.359362][ T4522] Modules linked in: [ 174.360413][ T4522] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 174.361995][ T4522] CPU: 1 UID: 0 PID: 4522 Comm: syz.0.314 Not tainted 6.11.0-syzkaller #0 [ 174.363826][ T4522] Hardware name: ARM-Versatile Express [ 174.365160][ T4522] Call trace: [ 174.366139][ T4522] [<81983358>] (dump_backtrace) from [<81983454>] (show_stack+0x18/0x1c) [ 174.366930][ T4522] r7:00000000 r6:826228c4 r5:00000000 r4:820355f0 [ 174.367451][ T4522] [<8198343c>] (show_stack) from [<819a13b8>] (dump_stack_lvl+0x54/0x7c) [ 174.368033][ T4522] [<819a1364>] (dump_stack_lvl) from [<819a13f8>] (dump_stack+0x18/0x1c) [ 174.368708][ T4522] r5:00000000 r4:8286ed18 [ 174.368929][ T4522] [<819a13e0>] (dump_stack) from [<81983efc>] (panic+0x120/0x370) [ 174.369394][ T4522] [<81983ddc>] (panic) from [<802421cc>] (get_taint+0x0/0x1c) [ 174.369804][ T4522] r3:8260c5c4 r2:00000001 r1:8201dda8 r0:82025b74 [ 174.370128][ T4522] r7:80832e10 [ 174.370314][ T4522] [<80242158>] (check_panic_on_warn) from [<8024232c>] (__warn+0x80/0x188) [ 174.370760][ T4522] [<802422ac>] (__warn) from [<8024261c>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 174.373406][ T4522] r8:00000009 r7:820840e0 r6:e0715c84 r5:8371bc00 r4:00000000 [ 174.373941][ T4522] [<80242438>] (warn_slowpath_fmt) from [<80832e10>] (refcount_warn_saturate+0x13c/0x174) [ 174.374760][ T4522] r10:00000000 r9:847bb284 r8:00000000 r7:00000000 r6:818114cc r5:00000002 [ 174.375438][ T4522] r4:84921840 [ 174.375681][ T4522] [<80832cd4>] (refcount_warn_saturate) from [<81483ec4>] (sk_skb_reason_drop+0x1d8/0x248) [ 174.376149][ T4522] [<81483cec>] (sk_skb_reason_drop) from [<818114cc>] (j1939_session_destroy+0x78/0x200) [ 174.376647][ T4522] r9:847bb284 r8:00000000 r7:e0715f38 r6:851f6650 r5:851f6600 r4:84921840 [ 174.377160][ T4522] [<81811454>] (j1939_session_destroy) from [<818127e8>] (j1939_session_put+0x54/0x58) [ 174.377898][ T4522] r6:851f6600 r5:833c1400 r4:00000004 [ 174.378282][ T4522] [<81812794>] (j1939_session_put) from [<8181081c>] (j1939_sk_sendmsg+0x41c/0x548) [ 174.378772][ T4522] [<81810400>] (j1939_sk_sendmsg) from [<8146ebd4>] (__sock_sendmsg+0x44/0x78) [ 174.379275][ T4522] r10:00000000 r9:e0715dd4 r8:e0715dd4 r7:00000000 r6:833c1400 r5:e0715f38 [ 174.379719][ T4522] r4:00000000 [ 174.380021][ T4522] [<8146eb90>] (__sock_sendmsg) from [<8146fbd8>] (____sys_sendmsg+0x2ac/0x2cc) [ 174.380517][ T4522] r7:00000000 r6:00000000 r5:833c1400 r4:e0715f38 [ 174.380829][ T4522] [<8146f92c>] (____sys_sendmsg) from [<81471b44>] (___sys_sendmsg+0x9c/0xd0) [ 174.381363][ T4522] r10:e0715e34 r9:20000180 r8:00000000 r7:00000000 r6:833c1400 r5:e0715f38 [ 174.381745][ T4522] r4:00000000 [ 174.382102][ T4522] [<81471aa8>] (___sys_sendmsg) from [<8147205c>] (sys_sendmsg+0x78/0xbc) [ 174.382660][ T4522] r10:00000128 r9:8371bc00 r8:8020029c r7:00000000 r6:20000180 r5:833c1400 [ 174.383157][ T4522] r4:00000000 [ 174.383394][ T4522] [<81471fe4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 174.383961][ T4522] Exception stack(0xe0715fa8 to 0xe0715ff0) [ 174.384632][ T4522] 5fa0: 00000000 00000000 00000004 20000180 00000000 00000000 [ 174.385089][ T4522] 5fc0: 00000000 00000000 002862f0 00000128 00000000 00006364 003d0f00 76b490bc [ 174.385558][ T4522] 5fe0: 76b48ec0 76b48eb0 000189d0 00132da0 [ 174.385964][ T4522] r7:00000128 r6:002862f0 r5:00000000 r4:00000000 [ 174.390750][ T4522] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:06:21 Registers: info registers vcpu 0 CPU#0 R00=0000003a R01=00020000 R02=76e810dc R03=00000010 R04=017ecc68 R05=7e822c14 R06=76fb45a0 R07=7e822ca4 R08=00000000 R09=00000013 R10=76e80e60 R11=017ed0c3 R12=000000f9 R13=ec51dff8 R14=76e08168 R15=76e08168 PSR=40000093 -Z-- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=76f5a21a s17=00000000 d08=0000000076f5a21a s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=8275499c R01=ebc0f000 R02=ebc0f000 R03=ebc0f018 R04=83e6f440 R05=20000093 R06=00000f01 R07=00000001 R08=8287146c R09=0000005f R10=00000001 R11=e0715a0c R12=00000002 R13=e07159e8 R14=8275499c R15=809db924 PSR=80000093 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000