last executing test programs: 17.1827283s ago: executing program 1 (id=59): connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) 16.724130248s ago: executing program 1 (id=61): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2}) 11.314989656s ago: executing program 1 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x1, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0xfffffff8, 0x2, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0xffffffff, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x7, 0x70, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0xfffffffb]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x2, 0x40}}}]}}]}, 0x468}}, 0x0) 10.609758534s ago: executing program 1 (id=67): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newtfilter={0x114, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0x7}, {0xe4, 0x2, [@TCA_BASIC_EMATCHES={0xe0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xe}, {0x5, 0x40}}}]}}, @TCF_EM_CONTAINER={0xb8, 0x2, 0x0, 0x0, {{0x9, 0x0, 0xbf6e}, "45ff1dc3630c6cc68666ff0b3c308fc073e686f2e2220dcce7ffa5ca6a5d442e4e53771be9e995d4070a96d38e041b3d882efa763aee3fb06ea57e195c9fa3fe810b07cadc20b8f258acfaf668aa2a0f9e264f2f4d43864659dc1e309cf68d51adf3a2c3d5ce1d23425cfd6cda68d57e9242d9e52a46b345e6ad32225c6ea64a27efe6ddc7b24292875cbc19ec92c0cc0c5ebc03b48773878d3666cbddbe807eaa7886369ecd730ebc30e8e3"}}]}]}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) 10.103436474s ago: executing program 0 (id=68): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ptrace(0x8, r0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) 9.374476813s ago: executing program 0 (id=69): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 8.904272993s ago: executing program 1 (id=70): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) 8.903993862s ago: executing program 0 (id=71): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) dup(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090561eb10000000010200090502", @ANYRES64=r1], 0x0) 8.412051242s ago: executing program 1 (id=72): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 4.072083696s ago: executing program 0 (id=73): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000001801000020786c2500000000902020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) 1.210813531s ago: executing program 0 (id=74): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 0s ago: executing program 0 (id=75): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0xd, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:3086' (ED25519) to the list of known hosts. [ 234.431401][ T30] audit: type=1400 audit(233.870:46): avc: denied { name_bind } for pid=3314 comm="sshd-session" src=30002 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 235.016256][ T30] audit: type=1400 audit(234.460:47): avc: denied { execute } for pid=3315 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 235.020850][ T30] audit: type=1400 audit(234.460:48): avc: denied { execute_no_trans } for pid=3315 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 241.670079][ T30] audit: type=1400 audit(241.110:49): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 241.690203][ T30] audit: type=1400 audit(241.130:50): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 241.747589][ T3315] cgroup: Unknown subsys name 'net' [ 241.784656][ T30] audit: type=1400 audit(241.220:51): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 242.067448][ T3315] cgroup: Unknown subsys name 'cpuset' [ 242.143419][ T3315] cgroup: Unknown subsys name 'rlimit' [ 242.400219][ T30] audit: type=1400 audit(241.840:52): avc: denied { setattr } for pid=3315 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.409333][ T30] audit: type=1400 audit(241.850:53): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 242.410325][ T30] audit: type=1400 audit(241.850:54): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 243.091071][ T3318] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 243.099561][ T30] audit: type=1400 audit(242.540:55): avc: denied { relabelto } for pid=3318 comm="mkswap" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 243.105490][ T30] audit: type=1400 audit(242.550:56): avc: denied { write } for pid=3318 comm="mkswap" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 243.241381][ T30] audit: type=1400 audit(242.680:57): avc: denied { read } for pid=3315 comm="syz-executor" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 243.247139][ T30] audit: type=1400 audit(242.690:58): avc: denied { open } for pid=3315 comm="syz-executor" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 243.268097][ T3315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 276.555267][ T30] audit: type=1400 audit(275.990:59): avc: denied { execmem } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 276.647673][ T30] audit: type=1400 audit(276.090:60): avc: denied { read } for pid=3321 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 276.651277][ T30] audit: type=1400 audit(276.090:61): avc: denied { open } for pid=3322 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 276.676960][ T30] audit: type=1400 audit(276.120:62): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 276.756881][ T30] audit: type=1400 audit(276.200:63): avc: denied { module_request } for pid=3322 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 277.046163][ T30] audit: type=1400 audit(276.480:64): avc: denied { sys_module } for pid=3321 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 285.539786][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.644802][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.603370][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.630249][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.703569][ T3321] hsr_slave_0: entered promiscuous mode [ 290.713885][ T3321] hsr_slave_1: entered promiscuous mode [ 291.219042][ T3322] hsr_slave_0: entered promiscuous mode [ 291.229864][ T3322] hsr_slave_1: entered promiscuous mode [ 291.241140][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 291.243612][ T3322] Cannot create hsr debugfs directory [ 293.669622][ T30] audit: type=1400 audit(293.110:65): avc: denied { create } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 293.680646][ T30] audit: type=1400 audit(293.120:66): avc: denied { write } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 293.700056][ T30] audit: type=1400 audit(293.140:67): avc: denied { read } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 293.740695][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 293.839609][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 293.965489][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 294.008119][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 294.653637][ T3322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 294.730266][ T3322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 294.784151][ T3322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 294.854132][ T3322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 298.554106][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.997720][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.242138][ T3321] veth0_vlan: entered promiscuous mode [ 310.294400][ T3321] veth1_vlan: entered promiscuous mode [ 310.573553][ T3321] veth0_macvtap: entered promiscuous mode [ 310.628946][ T3321] veth1_macvtap: entered promiscuous mode [ 311.170572][ T1638] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.181045][ T1638] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.223416][ T1638] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.227826][ T1638] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.596165][ T3322] veth0_vlan: entered promiscuous mode [ 311.891322][ T30] audit: type=1400 audit(311.330:68): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 311.914978][ T30] audit: type=1400 audit(311.350:69): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/syzkaller.BawQ5E/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 311.957901][ T3322] veth1_vlan: entered promiscuous mode [ 311.990740][ T30] audit: type=1400 audit(311.430:70): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 312.035753][ T30] audit: type=1400 audit(311.480:71): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/syzkaller.BawQ5E/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 312.049030][ T30] audit: type=1400 audit(311.490:72): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/syzkaller.BawQ5E/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 312.176456][ T30] audit: type=1400 audit(311.620:73): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 312.221491][ T30] audit: type=1400 audit(311.660:74): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 312.258958][ T30] audit: type=1400 audit(311.700:75): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="gadgetfs" ino=3881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 312.317337][ T30] audit: type=1400 audit(311.760:76): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 312.324911][ T30] audit: type=1400 audit(311.770:77): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 312.701160][ T3322] veth0_macvtap: entered promiscuous mode [ 312.709403][ T3321] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 312.813955][ T3322] veth1_macvtap: entered promiscuous mode [ 313.566059][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.567161][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.567542][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.567882][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.205445][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 317.209428][ T30] audit: type=1400 audit(316.630:85): avc: denied { read } for pid=3480 comm="syz.1.4" name="rtc0" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 317.215896][ T30] audit: type=1400 audit(316.650:86): avc: denied { open } for pid=3480 comm="syz.1.4" path="/dev/rtc0" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 317.233482][ T30] audit: type=1400 audit(316.670:87): avc: denied { ioctl } for pid=3480 comm="syz.1.4" path="/dev/rtc0" dev="devtmpfs" ino=708 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 317.944229][ T30] audit: type=1400 audit(317.380:88): avc: denied { read write } for pid=3483 comm="syz.1.5" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 317.945316][ T30] audit: type=1400 audit(317.380:89): avc: denied { open } for pid=3483 comm="syz.1.5" path="/dev/raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 317.985474][ T30] audit: type=1400 audit(317.420:90): avc: denied { ioctl } for pid=3483 comm="syz.1.5" path="/dev/raw-gadget" dev="devtmpfs" ino=702 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 318.090599][ T3484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.135960][ T3484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.016277][ T3489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'. [ 319.394022][ T30] audit: type=1400 audit(318.830:91): avc: denied { create } for pid=3490 comm="syz.0.8" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 319.540090][ T30] audit: type=1400 audit(318.960:92): avc: denied { ioctl } for pid=3490 comm="syz.0.8" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4184 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 319.931394][ T30] audit: type=1400 audit(319.370:93): avc: denied { prog_load } for pid=3492 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 319.975247][ T30] audit: type=1400 audit(319.420:94): avc: denied { bpf } for pid=3492 comm="syz.1.9" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 322.803786][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 322.805931][ T3506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.810883][ T30] audit: type=1400 audit(322.220:96): avc: denied { create } for pid=3505 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 322.816317][ T3506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.847190][ T30] audit: type=1400 audit(322.290:97): avc: denied { ioctl } for pid=3505 comm="syz.0.15" path="socket:[3960]" dev="sockfs" ino=3960 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 322.870451][ T30] audit: type=1400 audit(322.310:98): avc: denied { write } for pid=3505 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.655663][ T30] audit: type=1400 audit(323.090:99): avc: denied { allowed } for pid=3511 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 323.767155][ T30] audit: type=1400 audit(323.190:100): avc: denied { map } for pid=3511 comm="syz.0.17" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 323.771456][ T30] audit: type=1400 audit(323.210:101): avc: denied { read write } for pid=3511 comm="syz.0.17" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 325.193111][ T30] audit: type=1400 audit(324.620:102): avc: denied { open } for pid=3515 comm="syz.0.19" path="/dev/ptyq4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 325.224321][ T30] audit: type=1400 audit(324.660:103): avc: denied { ioctl } for pid=3515 comm="syz.0.19" path="/dev/ptyq4" dev="devtmpfs" ino=115 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 328.071142][ T3524] syz.0.23 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 329.724500][ T30] audit: type=1400 audit(329.160:104): avc: denied { bind } for pid=3529 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 329.791218][ T30] audit: type=1400 audit(329.230:105): avc: denied { map } for pid=3508 comm="syz.1.16" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 329.957317][ T3510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.614681][ T30] audit: type=1400 audit(333.040:106): avc: denied { write } for pid=3544 comm="syz.0.32" name="rt6_stats" dev="proc" ino=4026532745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 336.884696][ T30] audit: type=1400 audit(336.330:107): avc: denied { name_bind } for pid=3552 comm="syz.0.35" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 336.899698][ T30] audit: type=1400 audit(336.330:108): avc: denied { node_bind } for pid=3552 comm="syz.0.35" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 349.537644][ T30] audit: type=1400 audit(348.480:109): avc: denied { create } for pid=3552 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 352.373950][ T30] audit: type=1400 audit(351.800:110): avc: denied { create } for pid=3564 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 357.144713][ T30] audit: type=1400 audit(356.230:111): avc: denied { setopt } for pid=3564 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 360.396940][ T30] audit: type=1400 audit(359.810:112): avc: denied { create } for pid=3569 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 360.409804][ T30] audit: type=1400 audit(359.850:113): avc: denied { bind } for pid=3569 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 360.982721][ T30] audit: type=1400 audit(360.420:114): avc: denied { setopt } for pid=3569 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 361.033399][ T30] audit: type=1400 audit(360.470:115): avc: denied { accept } for pid=3569 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 366.821194][ T30] audit: type=1400 audit(366.260:116): avc: denied { create } for pid=3581 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 366.868230][ T30] audit: type=1400 audit(366.310:117): avc: denied { setopt } for pid=3581 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 368.397351][ T30] audit: type=1400 audit(367.830:118): avc: denied { name_bind } for pid=3584 comm="syz.0.42" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 370.418374][ T30] audit: type=1400 audit(369.860:119): avc: denied { ioctl } for pid=3580 comm="syz.1.40" path="socket:[4315]" dev="sockfs" ino=4315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.995790][ T30] audit: type=1400 audit(370.380:120): avc: denied { append } for pid=3580 comm="syz.1.40" name="nvme-fabrics" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 372.498089][ T3591] nvme_fabrics: missing parameter 'transport=%s' [ 372.498942][ T3591] nvme_fabrics: missing parameter 'nqn=%s' [ 376.609405][ T30] audit: type=1400 audit(376.010:121): avc: denied { read write } for pid=3600 comm="syz.0.45" name="event0" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 376.621284][ T30] audit: type=1400 audit(376.040:122): avc: denied { open } for pid=3600 comm="syz.0.45" path="/dev/input/event0" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 376.679848][ T30] audit: type=1400 audit(376.120:123): avc: denied { ioctl } for pid=3600 comm="syz.0.45" path="/dev/input/event0" dev="devtmpfs" ino=748 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 378.384091][ T3605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.416275][ T3605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.926311][ T30] audit: type=1400 audit(378.370:124): avc: denied { connect } for pid=3606 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 379.207517][ T3609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.263900][ T3609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.240714][ T3618] syz.1.53 uses obsolete (PF_INET,SOCK_PACKET) [ 380.263518][ T30] audit: type=1400 audit(379.690:125): avc: denied { ioctl } for pid=3616 comm="syz.1.53" path="socket:[4095]" dev="sockfs" ino=4095 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.915075][ T30] audit: type=1400 audit(380.360:126): avc: denied { create } for pid=3621 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 380.923277][ T30] audit: type=1400 audit(380.360:127): avc: denied { write } for pid=3621 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 381.164036][ T3624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.171536][ T3624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.540877][ T30] audit: type=1400 audit(381.980:128): avc: denied { create } for pid=3633 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 382.558630][ T30] audit: type=1400 audit(382.000:129): avc: denied { bind } for pid=3633 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 382.570278][ T30] audit: type=1400 audit(382.000:130): avc: denied { node_bind } for pid=3633 comm="syz.1.61" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 382.674763][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 383.107498][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 384.225526][ T23] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 384.243419][ T23] usb 1-1: config 0 has no interface number 0 [ 384.806864][ T23] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 384.808203][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.822463][ T23] usb 1-1: Product: syz [ 384.824933][ T23] usb 1-1: Manufacturer: syz [ 384.826877][ T23] usb 1-1: SerialNumber: syz [ 384.973825][ T23] usb 1-1: config 0 descriptor?? [ 385.134945][ T23] smsc95xx v2.0.0 [ 385.624734][ T23] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 385.629029][ T23] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 386.150055][ T23] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 386.156886][ T23] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 386.250610][ T23] usb 1-1: USB disconnect, device number 2 [ 388.313595][ T3643] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 388.757780][ T30] audit: type=1400 audit(388.200:131): avc: denied { read } for pid=3645 comm="syz.0.66" name="fb0" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 388.758306][ T30] audit: type=1400 audit(388.200:132): avc: denied { open } for pid=3645 comm="syz.0.66" path="/dev/fb0" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 388.769130][ T30] audit: type=1400 audit(388.210:133): avc: denied { ioctl } for pid=3645 comm="syz.0.66" path="/dev/fb0" dev="devtmpfs" ino=619 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 389.110955][ T3648] netlink: 132 bytes leftover after parsing attributes in process `syz.1.67'. [ 390.466775][ T30] audit: type=1400 audit(389.900:134): avc: denied { map_create } for pid=3655 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 390.492827][ T30] audit: type=1400 audit(389.920:135): avc: denied { map_read map_write } for pid=3655 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 390.863999][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 392.577872][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.579582][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 392.597269][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 392.597998][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 392.598201][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 393.020165][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 393.021450][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 393.026839][ T9] usb 1-1: Manufacturer: syz [ 393.273748][ T9] usb 1-1: config 0 descriptor?? [ 393.800883][ T23] usb 1-1: USB disconnect, device number 3 [ 399.696857][ T3669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.697712][ T3669] IPv6: NLM_F_CREATE should be set when creating new route [ 399.698159][ T3669] IPv6: NLM_F_CREATE should be set when creating new route [ 399.721359][ T3669] ------------[ cut here ]------------ [ 399.721710][ T3669] WARNING: CPU: 1 PID: 3669 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0x89c/0xa6c [ 399.724827][ T3669] Modules linked in: [ 399.726338][ T3669] CPU: 1 UID: 0 PID: 3669 Comm: syz.0.75 Not tainted syzkaller #0 PREEMPT [ 399.726978][ T3669] Hardware name: linux,dummy-virt (DT) [ 399.728226][ T3669] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 399.728752][ T3669] pc : nsim_fib_event_nb+0x89c/0xa6c [ 399.728983][ T3669] lr : nsim_fib_event_nb+0x2d8/0xa6c [ 399.729184][ T3669] sp : ffff8000a1bf6e50 [ 399.729555][ T3669] x29: ffff8000a1bf6e50 x28: ffff0000122d2880 x27: ffff8000a1bf7040 [ 399.730110][ T3669] x26: 0000000000000000 x25: ffff8000a1bf7040 x24: ffff00001f14c800 [ 399.730421][ T3669] x23: 0000000000000001 x22: ffff00001f14c800 x21: ffff00000fd16540 [ 399.730776][ T3669] x20: ffff00001e91f000 x19: 0000000000000001 x18: 0000000000000000 [ 399.731144][ T3669] x17: 0000000000000000 x16: ffff00006a0ad4c4 x15: ffff8000844de518 [ 399.731475][ T3669] x14: ffff8000844de420 x13: ffff800080045d78 x12: ffff600003e29906 [ 399.731849][ T3669] x11: 1fffe00003e29905 x10: ffff600003e29905 x9 : dfff800000000000 [ 399.732347][ T3669] x8 : ffff00001f14c82f x7 : 0000000000000001 x6 : ffff600003e29905 [ 399.732647][ T3669] x5 : ffff00001f14c82c x4 : ffff600003e29906 x3 : ffff00001f14c818 [ 399.732952][ T3669] x2 : 1fffe00003e29903 x1 : 0000000000000000 x0 : ffff00001f14c818 [ 399.733426][ T3669] Call trace: [ 399.733778][ T3669] nsim_fib_event_nb+0x89c/0xa6c (P) [ 399.734098][ T3669] notifier_call_chain+0x11c/0x49c [ 399.734317][ T3669] atomic_notifier_call_chain+0x70/0x134 [ 399.734510][ T3669] call_fib_notifiers+0x34/0x58 [ 399.734703][ T3669] call_fib6_notifiers+0x44/0x70 [ 399.734939][ T3669] call_fib6_multipath_entry_notifiers+0xcc/0x13c [ 399.735144][ T3669] ip6_route_multipath_add+0x6e4/0x11cc [ 399.735336][ T3669] inet6_rtm_newroute+0xc0/0x138 [ 399.735519][ T3669] rtnetlink_rcv_msg+0x65c/0x8d4 [ 399.735700][ T3669] netlink_rcv_skb+0x19c/0x338 [ 399.735878][ T3669] rtnetlink_rcv+0x18/0x24 [ 399.736041][ T3669] netlink_unicast+0x424/0x700 [ 399.736214][ T3669] netlink_sendmsg+0x644/0xa54 [ 399.736386][ T3669] __sock_sendmsg+0xc8/0x168 [ 399.736581][ T3669] ____sys_sendmsg+0x500/0x764 [ 399.736822][ T3669] ___sys_sendmsg+0x11c/0x19c [ 399.736998][ T3669] __sys_sendmsg+0x114/0x19c [ 399.737168][ T3669] __arm64_sys_sendmsg+0x70/0xa0 [ 399.737353][ T3669] invoke_syscall+0x6c/0x258 [ 399.737553][ T3669] el0_svc_common.constprop.0+0xac/0x230 [ 399.737802][ T3669] do_el0_svc+0x40/0x58 [ 399.737980][ T3669] el0_svc+0x50/0x1a0 [ 399.738151][ T3669] el0t_64_sync_handler+0xa0/0xe4 [ 399.738375][ T3669] el0t_64_sync+0x198/0x19c [ 399.738768][ T3669] irq event stamp: 344 [ 399.738993][ T3669] hardirqs last enabled at (343): [] _raw_spin_unlock_irqrestore+0x80/0xac [ 399.739272][ T3669] hardirqs last disabled at (344): [] el1_brk64+0x1c/0x48 [ 399.739517][ T3669] softirqs last enabled at (338): [] ip6_route_multipath_add+0x30c/0x11cc [ 399.739806][ T3669] softirqs last disabled at (336): [] ip6_route_multipath_add+0x2ec/0x11cc [ 399.740250][ T3669] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 402.773548][ T3594] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.095347][ T3594] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.340269][ T3594] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.601572][ T3594] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.159744][ T30] audit: type=1400 audit(403.580:136): avc: denied { read } for pid=3165 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 407.026993][ T3594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.104356][ T3594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.164895][ T3594] bond0 (unregistering): Released all slaves [ 407.546477][ T3594] hsr_slave_0: left promiscuous mode [ 407.562649][ T3594] hsr_slave_1: left promiscuous mode [ 407.634618][ T3594] veth1_macvtap: left promiscuous mode [ 407.637828][ T3594] veth0_macvtap: left promiscuous mode [ 407.640042][ T3594] veth1_vlan: left promiscuous mode [ 407.643011][ T3594] veth0_vlan: left promiscuous mode [ 413.430332][ T3594] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.719276][ T3594] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.959313][ T3594] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.115485][ T3594] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.930096][ T3594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.006659][ T3594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.071158][ T3594] bond0 (unregistering): Released all slaves [ 417.546065][ T3594] hsr_slave_0: left promiscuous mode [ 417.566315][ T3594] hsr_slave_1: left promiscuous mode [ 417.686628][ T3594] veth1_macvtap: left promiscuous mode [ 417.688207][ T3594] veth0_macvtap: left promiscuous mode [ 417.689774][ T3594] veth1_vlan: left promiscuous mode [ 417.695711][ T3594] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 12:36:51 Registers: info registers vcpu 0 CPU#0 PC=ffff80008174d374 X00=ffff80008d4f0000 X01=0000000000000000 X02=1fffe00001b86707 X03=ffff80008710e210 X04=dfff800000000000 X05=1ffff00010e21c42 X06=ffff6000024c2b58 X07=0000000000000001 X08=ffff000012615ac7 X09=dfff800000000000 X10=ffff6000024c2b58 X11=1fffe000024c2b58 X12=ffff6000024c2b59 X13=0000000000000000 X14=0000000001de7866 X15=ffff00000f632140 X16=0000000000000000 X17=1fffe0000252c9e0 X18=ffff00000f632150 X19=0000000000000000 X20=0000000000020000 X21=ffff00000dc33830 X22=ffff800087110b19 X23=0000000000000002 X24=ffff800087110000 X25=ffff000012d49470 X26=ffff80008581b660 X27=ffff00000dc33830 X28=1fffe000025a9280 X29=ffff8000800064f0 X30=ffff80008037c570 SP=ffff8000800064f0 PSTATE=400000c5 -Z-- EL1h FPCR=00000000 FPSR=00000000 Q00=2525252525252525:2525252525252525 Q01=000000756c6c2570:6f6f6c2f7665642f Q02=0000000000000000:ffffffff00000000 Q03=ffffff000000ff00:0000000000000000 Q04=0000000000000000:fff000f000000000 Q05=bb448243222c92da:e3914ed4e87380b0 Q06=6edc4d3a2914b135:d8e9c869e2695c88 Q07=b20fae707afde253:388e9c6c4fa85ca0 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffe1060220:0000ffffe1060220 Q17=ffffff80ffffffd0:0000ffffe10601f0 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff80008031daf4 X00=00000000000003c0 X01=ffff7fffe3003000 X02=0000000000000000 X03=1fffe000024c2b59 X04=00000000d75f21af X05=0000000000048000 X06=ffff0000126165a0 X07=2c15284c9f0fa973 X08=0000000000000000 X09=ffff8000897e6000 X10=ffff000012616550 X11=0000000000000000 X12=0000000000000150 X13=0000000000008000 X14=0000000000000000 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=ffff8000870aa548 X20=ffff800087ac2a58 X21=0000000000000000 X22=0000000000000001 X23=0000000000000001 X24=0000000000000000 X25=ffff800081a39278 X26=0000000000000000 X27=00000000000003c0 X28=ffff8000a1bf6390 X29=ffff8000a1bf63b0 X30=ffff80008031dad4 SP=ffff8000a1bf6390 PSTATE=100003c5 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=2525252525252525:2525252525252525 Q01=000000756c6c2570:6f6f6c2f7665642f Q02=0000000000000000:ffffffff00000000 Q03=ffffff000000ff00:0000000000000000 Q04=0000000000000000:fff000f000000000 Q05=bb448243222c92da:e3914ed4e87380b0 Q06=6edc4d3a2914b135:d8e9c869e2695c88 Q07=b20fae707afde253:388e9c6c4fa85ca0 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffd7c67b00:0000ffffd7c67b00 Q17=ffffff80ffffffd0:0000ffffd7c67ad0 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000