last executing test programs: 6.342843041s ago: executing program 1 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 6.203112057s ago: executing program 1 (id=110): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r0) 5.785697266s ago: executing program 1 (id=112): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)='\b\x00', 0x2}, {&(0x7f00000002c0)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000300)=ANY=[], 0x40}, 0x0) 5.452156944s ago: executing program 1 (id=113): accept(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200006, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="c6", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 2.454142004s ago: executing program 0 (id=122): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000040000000000200000a14000000050001"], 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x8010) 2.124299142s ago: executing program 0 (id=123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xe, 0x0, &(0x7f0000000580)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e) 1.7111428s ago: executing program 0 (id=124): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x10, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000010c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000001100)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{r1, 0xffffffffffffffff}, &(0x7f0000001740), &(0x7f0000001780)=r0}, 0x20) close(r2) 1.251944114s ago: executing program 0 (id=125): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x800, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 459.457496ms ago: executing program 1 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1cf) mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000840)='27', 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000980)='asymmetric\x00', &(0x7f00000009c0)='id:cb2e') 363.989218ms ago: executing program 0 (id=127): r0 = syz_io_uring_setup(0x315b, &(0x7f00000009c0)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000b00)=[@ioring_restriction_register_op={0x0, 0x18}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000b40)={0xffff, r0, 0x1, {0x1, 0x7}, 0x1}, 0x1) 232.948453ms ago: executing program 1 (id=128): futex(0x0, 0x9, 0x1, 0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019640)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000019680)='./tracing\x00', &(0x7f00000196c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000019700)='./tracing/events/sched/filter\x00', 0x2240, 0x13) readv(r0, &(0x7f0000019740)=[{&(0x7f0000019780)=""/152, 0x98}], 0x1) 0s ago: executing program 0 (id=129): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x10, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000010c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000001100)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{r1, 0xffffffffffffffff}, &(0x7f0000001740), &(0x7f0000001780)=r0}, 0x20) close(r2) kernel console output (not intermixed with test programs): [ 43.808622][ T28] audit: type=1400 audit(43.710:91): avc: denied { read write } for pid=3111 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.809481][ T28] audit: type=1400 audit(43.710:92): avc: denied { open } for pid=3111 comm="scp" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:48817' (ED25519) to the list of known hosts. [ 61.686734][ T28] audit: type=1400 audit(61.580:93): avc: denied { name_bind } for pid=3114 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 62.559859][ T28] audit: type=1400 audit(62.460:94): avc: denied { execute } for pid=3115 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 62.562851][ T28] audit: type=1400 audit(62.460:95): avc: denied { execute_no_trans } for pid=3115 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 65.661398][ T28] audit: type=1400 audit(65.560:96): avc: denied { mounton } for pid=3115 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.665757][ T28] audit: type=1400 audit(65.560:97): avc: denied { mount } for pid=3115 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.684305][ T3115] cgroup: Unknown subsys name 'net' [ 65.694015][ T28] audit: type=1400 audit(65.590:98): avc: denied { unmount } for pid=3115 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.854813][ T3115] cgroup: Unknown subsys name 'cpuset' [ 65.862010][ T3115] cgroup: Unknown subsys name 'hugetlb' [ 65.862728][ T3115] cgroup: Unknown subsys name 'rlimit' [ 66.049511][ T28] audit: type=1400 audit(65.950:99): avc: denied { setattr } for pid=3115 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.051983][ T28] audit: type=1400 audit(65.950:100): avc: denied { mounton } for pid=3115 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.053517][ T28] audit: type=1400 audit(65.950:101): avc: denied { mount } for pid=3115 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.254675][ T3117] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.257940][ T28] audit: type=1400 audit(66.160:102): avc: denied { relabelto } for pid=3117 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 74.338898][ T3115] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.596846][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 76.596968][ T28] audit: type=1400 audit(76.480:106): avc: denied { execmem } for pid=3118 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.670009][ T28] audit: type=1400 audit(76.570:107): avc: denied { read } for pid=3120 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.671243][ T28] audit: type=1400 audit(76.570:108): avc: denied { open } for pid=3120 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.680508][ T28] audit: type=1400 audit(76.580:109): avc: denied { mounton } for pid=3120 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 76.707412][ T28] audit: type=1400 audit(76.610:110): avc: denied { module_request } for pid=3120 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.790678][ T28] audit: type=1400 audit(76.690:111): avc: denied { sys_module } for pid=3120 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.363943][ T28] audit: type=1400 audit(77.260:112): avc: denied { create } for pid=3120 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.364073][ T28] audit: type=1400 audit(77.260:113): avc: denied { create } for pid=3121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.402781][ T28] audit: type=1400 audit(77.300:114): avc: denied { write } for pid=3121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.504127][ T28] audit: type=1400 audit(77.400:115): avc: denied { read } for pid=3121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.334701][ T3121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.343336][ T3121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.425499][ T3120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.439892][ T3120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.356002][ T3121] hsr_slave_0: entered promiscuous mode [ 80.362140][ T3121] hsr_slave_1: entered promiscuous mode [ 80.498774][ T3120] hsr_slave_0: entered promiscuous mode [ 80.500029][ T3120] hsr_slave_1: entered promiscuous mode [ 80.500759][ T3120] debugfs: 'hsr0' already exists in 'hsr' [ 80.501083][ T3120] Cannot create hsr debugfs directory [ 80.870617][ T3121] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.881053][ T3121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.883441][ T3121] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.890810][ T3121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.907119][ T3121] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.911555][ T3121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.913772][ T3121] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.924731][ T3121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.008890][ T3120] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.015762][ T3120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.021907][ T3120] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.028720][ T3120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.041022][ T3120] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.044686][ T3120] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.056960][ T3120] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.060426][ T3120] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.732852][ T3120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.743304][ T3121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.551195][ T3121] veth0_vlan: entered promiscuous mode [ 84.582036][ T3121] veth1_vlan: entered promiscuous mode [ 84.662514][ T3121] veth0_macvtap: entered promiscuous mode [ 84.677198][ T3121] veth1_macvtap: entered promiscuous mode [ 84.771824][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.772495][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.812311][ T2592] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.813180][ T2592] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.904749][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 84.904865][ T28] audit: type=1400 audit(84.800:122): avc: denied { mount } for pid=3121 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.932937][ T28] audit: type=1400 audit(84.830:123): avc: denied { mounton } for pid=3121 comm="syz-executor" path="/syzkaller.BkNQzZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.933913][ T3120] veth0_vlan: entered promiscuous mode [ 84.941727][ T28] audit: type=1400 audit(84.840:124): avc: denied { mount } for pid=3121 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.953612][ T28] audit: type=1400 audit(84.850:125): avc: denied { mounton } for pid=3121 comm="syz-executor" path="/syzkaller.BkNQzZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.953750][ T28] audit: type=1400 audit(84.850:126): avc: denied { mounton } for pid=3121 comm="syz-executor" path="/syzkaller.BkNQzZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.968664][ T28] audit: type=1400 audit(84.870:127): avc: denied { unmount } for pid=3121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.974301][ T28] audit: type=1400 audit(84.870:128): avc: denied { mounton } for pid=3121 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.974813][ T3120] veth1_vlan: entered promiscuous mode [ 84.978088][ T28] audit: type=1400 audit(84.870:129): avc: denied { mount } for pid=3121 comm="syz-executor" name="/" dev="gadgetfs" ino=2267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 85.052706][ T3120] veth0_macvtap: entered promiscuous mode [ 85.071525][ T3120] veth1_macvtap: entered promiscuous mode [ 85.133430][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.134392][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.134678][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.188973][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.210317][ T28] audit: type=1400 audit(85.110:130): avc: denied { mounton } for pid=3121 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 85.211396][ T28] audit: type=1400 audit(85.110:131): avc: denied { mount } for pid=3121 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 85.330794][ T3121] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.062859][ T3752] device-mapper: ioctl: populate_table: next target spec (offset 47) overlaps 'struct dm_ioctl' [ 90.611634][ T3795] netlink: 'syz.1.18': attribute type 2 has an invalid length. [ 90.611849][ T3795] netlink: 119 bytes leftover after parsing attributes in process `syz.1.18'. [ 91.258051][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 91.258144][ T28] audit: type=1400 audit(91.160:150): avc: denied { write } for pid=3798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.554321][ T28] audit: type=1400 audit(91.450:151): avc: denied { write } for pid=3805 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.988177][ T28] audit: type=1400 audit(91.890:152): avc: denied { ioctl } for pid=3806 comm="syz.1.22" path="socket:[3340]" dev="sockfs" ino=3340 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.279138][ T3808] netlink: 14 bytes leftover after parsing attributes in process `syz.1.22'. [ 92.798827][ T28] audit: type=1400 audit(92.700:153): avc: denied { create } for pid=3823 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.816931][ T28] audit: type=1400 audit(92.710:154): avc: denied { write } for pid=3823 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.909159][ T28] audit: type=1400 audit(92.810:155): avc: denied { write } for pid=3825 comm="syz.1.27" name="snmp6" dev="proc" ino=4026532695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 93.622831][ T28] audit: type=1400 audit(93.520:156): avc: denied { nlmsg_write } for pid=3839 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 93.703605][ T28] audit: type=1400 audit(93.600:157): avc: denied { perfmon } for pid=3841 comm="syz.1.33" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.746575][ T28] audit: type=1400 audit(93.640:158): avc: denied { prog_run } for pid=3841 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 99.569852][ T28] audit: type=1400 audit(99.470:159): avc: denied { read } for pid=3851 comm="syz.0.38" path="socket:[3407]" dev="sockfs" ino=3407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.008830][ T28] audit: type=1400 audit(99.910:160): avc: denied { create } for pid=3845 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.671056][ T28] audit: type=1400 audit(101.570:161): avc: denied { allowed } for pid=3860 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 102.189144][ T28] audit: type=1400 audit(102.090:162): avc: denied { create } for pid=3864 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 103.381576][ T28] audit: type=1400 audit(103.280:163): avc: denied { mount } for pid=3870 comm="syz.1.45" name="/" dev="ramfs" ino=2416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 104.949363][ T28] audit: type=1400 audit(104.850:164): avc: denied { create } for pid=3876 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.976914][ T28] audit: type=1400 audit(104.870:165): avc: denied { setopt } for pid=3876 comm="syz.1.47" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.053235][ T28] audit: type=1400 audit(104.950:166): avc: denied { write } for pid=3876 comm="syz.1.47" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.753361][ T28] audit: type=1400 audit(105.650:167): avc: denied { remount } for pid=3881 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.192770][ T3887] IPv6: Can't replace route, no match found [ 112.135615][ T3934] *** NOT YET: opcode 85 *** [ 114.061988][ T28] audit: type=1400 audit(113.960:168): avc: denied { mount } for pid=3941 comm="syz.0.73" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 114.079283][ T28] audit: type=1400 audit(113.980:169): avc: denied { search } for pid=3941 comm="syz.0.73" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 114.084564][ T28] audit: type=1400 audit(113.980:170): avc: denied { search } for pid=3941 comm="syz.0.73" name="per_cpu" dev="tracefs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 114.103092][ T28] audit: type=1400 audit(114.000:171): avc: denied { search } for pid=3941 comm="syz.0.73" name="cpu0" dev="tracefs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 114.110079][ T28] audit: type=1400 audit(114.010:172): avc: denied { read } for pid=3941 comm="syz.0.73" name="trace_pipe_raw" dev="tracefs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 114.122303][ T28] audit: type=1400 audit(114.020:173): avc: denied { open } for pid=3941 comm="syz.0.73" path="/28/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 116.563735][ T28] audit: type=1400 audit(116.460:174): avc: denied { unmount } for pid=3120 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 116.990832][ T28] audit: type=1400 audit(116.890:175): avc: denied { connect } for pid=3948 comm="syz.0.76" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.785611][ T3961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.82'. [ 117.785869][ T3961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.82'. [ 119.178432][ T3969] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 119.178432][ T3969] The task syz.0.85 (3969) triggered the difference, watch for misbehavior. [ 120.651622][ T28] audit: type=1400 audit(120.550:176): avc: denied { bind } for pid=3977 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.658389][ T28] audit: type=1400 audit(120.550:177): avc: denied { write } for pid=3977 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.688522][ T28] audit: type=1400 audit(120.590:178): avc: denied { read } for pid=3977 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.714867][ T28] audit: type=1400 audit(120.610:179): avc: denied { create } for pid=3979 comm="syz.0.90" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.774650][ T3978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 123.520655][ T4005] netlink: 'syz.1.97': attribute type 29 has an invalid length. [ 124.542867][ T28] audit: type=1400 audit(124.440:180): avc: denied { watch } for pid=4011 comm="syz.0.101" path="/49/file0" dev="tmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.866643][ T4026] netlink: 'syz.0.107': attribute type 1 has an invalid length. [ 126.579643][ T28] audit: type=1400 audit(126.480:181): avc: denied { create } for pid=4033 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.625961][ T28] audit: type=1400 audit(126.520:182): avc: denied { write } for pid=4033 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.492310][ T4044] netlink: 324 bytes leftover after parsing attributes in process `syz.0.116'. [ 127.730190][ T4046] capability: warning: `syz.0.117' uses 32-bit capabilities (legacy support in use) [ 127.933492][ T28] audit: type=1400 audit(127.830:183): avc: denied { bind } for pid=4047 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.038397][ T28] audit: type=1400 audit(127.940:184): avc: denied { write } for pid=4047 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.362693][ T28] audit: type=1400 audit(129.260:185): avc: denied { mount } for pid=4053 comm="syz.0.121" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 129.641880][ T28] audit: type=1400 audit(129.540:186): avc: denied { unmount } for pid=3120 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 129.870262][ T4056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=4056 comm=syz.0.122 [ 131.160325][ T28] audit: type=1400 audit(131.060:187): avc: denied { create } for pid=4061 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 131.172847][ T28] audit: type=1400 audit(131.070:188): avc: denied { write } for pid=4061 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 131.192426][ T4063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.125'. [ 131.666829][ T4063] veth3: entered allmulticast mode [ 131.684151][ T4063] bond1: (slave veth3): Enslaving as an active interface with an up link [ 131.881014][ T28] audit: type=1400 audit(131.780:189): avc: denied { sqpoll } for pid=4111 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 131.901725][ T28] audit: type=1400 audit(131.790:190): avc: denied { map } for pid=4111 comm="syz.0.127" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.901879][ T28] audit: type=1400 audit(131.790:191): avc: denied { read write } for pid=4111 comm="syz.0.127" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.187399][ T30] ------------[ cut here ]------------ [ 132.187767][ T30] WARNING: io_uring/sqpoll.c:88 at io_sq_thread_stop+0x94/0xcc, CPU#0: kworker/u8:1/30 [ 132.190145][ T30] Modules linked in: [ 132.192142][ T30] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 132.193245][ T30] CPU: 0 UID: 0 PID: 30 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT [ 132.193772][ T30] Hardware name: ARM-Versatile Express [ 132.194243][ T30] Workqueue: iou_exit io_ring_exit_work [ 132.194760][ T30] Call trace: [ 132.195535][ T30] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 132.196181][ T30] r7:8341c57c r6:00000000 r5:82542a90 r4:00000001 [ 132.196500][ T30] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 132.198167][ T30] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 132.200097][ T30] r7:8341c57c r6:00000000 r5:83fb8000 r4:83688d7c [ 132.200498][ T30] [<8021f750>] (dump_stack) from [<80202610>] (vpanic+0x114/0x324) [ 132.200849][ T30] [<802024fc>] (vpanic) from [<80202854>] (trace_suspend_resume+0x0/0x100) [ 132.201221][ T30] r7:80971a24 [ 132.201590][ T30] [<80202820>] (panic) from [<80252ce4>] (proc_taint+0x0/0x18c) [ 132.201981][ T30] r3:8340b188 r2:00000001 r1:825282a4 r0:8252fc74 [ 132.202261][ T30] [<80252c6c>] (check_panic_on_warn) from [<802530a8>] (__warn+0x98/0x1a4) [ 132.204089][ T30] [<80253010>] (__warn) from [<8025332c>] (warn_slowpath_fmt+0x178/0x1f4) [ 132.204506][ T30] r8:00000009 r7:825a73f4 r6:df8d9df4 r5:83fb8000 r4:00000000 [ 132.204819][ T30] [<802531b8>] (warn_slowpath_fmt) from [<80971a24>] (io_sq_thread_stop+0x94/0xcc) [ 132.205251][ T30] r10:83613fb0 r9:867f96f4 r8:83403d80 r7:867f9640 r6:867f967c r5:871a9d50 [ 132.205648][ T30] r4:871a9d00 [ 132.205831][ T30] [<80971990>] (io_sq_thread_stop) from [<80971abc>] (io_put_sq_data+0x60/0x9c) [ 132.206250][ T30] r5:871a9d00 r4:871a9d00 [ 132.206417][ T30] [<80971a5c>] (io_put_sq_data) from [<80971b8c>] (io_sq_thread_finish+0x94/0xa0) [ 132.206859][ T30] r5:871a9d00 r4:867f9400 [ 132.207073][ T30] [<80971af8>] (io_sq_thread_finish) from [<80209108>] (io_ring_exit_work+0x268/0x55c) [ 132.207473][ T30] r7:867f9640 r6:867f9440 r5:867f9400 r4:867f9704 [ 132.207975][ T30] [<80208ea0>] (io_ring_exit_work) from [<80279ba4>] (process_one_work+0x1f8/0x5cc) [ 132.209998][ T30] r10:84617005 r9:02000000 r8:83fb8000 r7:83c12a00 r6:84617000 r5:867f9704 [ 132.211413][ T30] r4:83de8800 [ 132.212056][ T30] [<802799ac>] (process_one_work) from [<8027ab50>] (worker_thread+0x16c/0x318) [ 132.214352][ T30] r10:83c12a00 r9:83de8830 r8:83fb8000 r7:83403d80 r6:83c12a20 r5:83c12a00 [ 132.215578][ T30] r4:83de8800 [ 132.215739][ T30] [<8027a9e4>] (worker_thread) from [<80285798>] (kthread+0x11c/0x154) [ 132.216022][ T30] r10:00000000 r9:df849e88 r8:83f66500 r7:83de8800 r6:8027a9e4 r5:83fb8000 [ 132.216455][ T30] r4:83f18d00 [ 132.216584][ T30] [<8028567c>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 132.217038][ T30] Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) [ 132.217480][ T30] 9fa0: 00000000 00000000 00000000 00000000 [ 132.217785][ T30] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 132.218058][ T30] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 132.218380][ T30] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8028567c r4:83f18d00 [ 132.220259][ T30] Rebooting in 86400 seconds..