last executing test programs: 16.586934848s ago: executing program 1 (id=39): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x409, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x40424}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5, 0x4, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) 14.85072013s ago: executing program 0 (id=41): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f0000000140)="03be00fbb46ecedbe0090a43", 0xc}, {&(0x7f00000003c0)="5c7e62dab359f010", 0x8}], 0x4) 13.340286216s ago: executing program 1 (id=42): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 6.25090662s ago: executing program 0 (id=43): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) 5.190572907s ago: executing program 1 (id=44): socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) shutdown(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}}, 0x0) 5.119973015s ago: executing program 0 (id=45): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'hsr0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x4044004, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3.961604003s ago: executing program 0 (id=46): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0x34000000}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) 3.559816587s ago: executing program 1 (id=47): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x4) 3.104113317s ago: executing program 0 (id=48): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 2.472019967s ago: executing program 1 (id=49): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000080) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 390.56µs ago: executing program 0 (id=50): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'hsr0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f0000000240), 0x0, 0x4044004, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 0s ago: executing program 1 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010103, @dev={0xac, 0x14, 0x14, 0x13}}, {0x4e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0xe, 0x100, @void}}}}}, 0x2e) kernel console output (not intermixed with test programs): [ 224.725749][ T29] audit: type=1400 audit(224.100:80): avc: denied { write } for pid=3316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=599 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.183958][ T29] audit: type=1400 audit(225.560:81): avc: denied { write } for pid=3321 comm="rm" name="hook-state" dev="tmpfs" ino=599 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.960075][ T29] audit: type=1400 audit(228.340:82): avc: denied { write } for pid=3328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=599 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.225139][ T29] audit: type=1400 audit(230.580:83): avc: denied { write } for pid=3333 comm="rm" name="hook-state" dev="tmpfs" ino=599 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:2659' (ED25519) to the list of known hosts. [ 269.326808][ T29] audit: type=1400 audit(268.700:84): avc: denied { name_bind } for pid=3338 comm="sshd-session" src=30004 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 269.832428][ T29] audit: type=1400 audit(269.210:85): avc: denied { execute } for pid=3339 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 269.840846][ T29] audit: type=1400 audit(269.220:86): avc: denied { execute_no_trans } for pid=3339 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 279.474921][ T29] audit: type=1400 audit(278.850:87): avc: denied { mounton } for pid=3339 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 279.529898][ T29] audit: type=1400 audit(278.910:88): avc: denied { mount } for pid=3339 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 279.565873][ T3339] cgroup: Unknown subsys name 'net' [ 279.647179][ T29] audit: type=1400 audit(279.030:89): avc: denied { unmount } for pid=3339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 279.970492][ T3339] cgroup: Unknown subsys name 'cpuset' [ 280.038348][ T3339] cgroup: Unknown subsys name 'rlimit' [ 280.397607][ T29] audit: type=1400 audit(279.780:90): avc: denied { setattr } for pid=3339 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 280.418066][ T29] audit: type=1400 audit(279.800:91): avc: denied { mounton } for pid=3339 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 280.429860][ T29] audit: type=1400 audit(279.810:92): avc: denied { mount } for pid=3339 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 281.235011][ T3341] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 281.244221][ T29] audit: type=1400 audit(280.620:93): avc: denied { relabelto } for pid=3341 comm="mkswap" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 281.254140][ T29] audit: type=1400 audit(280.630:94): avc: denied { write } for pid=3341 comm="mkswap" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 281.400882][ T29] audit: type=1400 audit(280.780:95): avc: denied { read } for pid=3339 comm="syz-executor" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 281.419521][ T29] audit: type=1400 audit(280.780:96): avc: denied { open } for pid=3339 comm="syz-executor" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 281.435814][ T3339] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 311.178253][ T29] audit: type=1400 audit(310.560:97): avc: denied { execmem } for pid=3342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 311.329671][ T29] audit: type=1400 audit(310.710:98): avc: denied { read } for pid=3345 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 311.335910][ T29] audit: type=1400 audit(310.720:99): avc: denied { open } for pid=3345 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 311.349225][ T29] audit: type=1400 audit(310.730:100): avc: denied { mounton } for pid=3345 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 311.425690][ T29] audit: type=1400 audit(310.800:101): avc: denied { module_request } for pid=3345 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 311.683966][ T29] audit: type=1400 audit(311.060:102): avc: denied { sys_module } for pid=3344 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 319.865386][ T3344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.935097][ T3344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.708459][ T3345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.743849][ T3345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.638931][ T3344] hsr_slave_0: entered promiscuous mode [ 323.651390][ T3344] hsr_slave_1: entered promiscuous mode [ 324.579110][ T3345] hsr_slave_0: entered promiscuous mode [ 324.587649][ T3345] hsr_slave_1: entered promiscuous mode [ 324.596471][ T3345] debugfs: 'hsr0' already exists in 'hsr' [ 324.598460][ T3345] Cannot create hsr debugfs directory [ 326.931445][ T29] audit: type=1400 audit(326.310:103): avc: denied { create } for pid=3344 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.965887][ T29] audit: type=1400 audit(326.340:104): avc: denied { write } for pid=3344 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.972543][ T29] audit: type=1400 audit(326.350:105): avc: denied { read } for pid=3344 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 327.011129][ T3344] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 327.090590][ T3344] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 327.117131][ T3344] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 327.170904][ T3344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.179119][ T3344] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 327.211649][ T3344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 327.229764][ T3344] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 327.275572][ T3344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.025581][ T3345] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 328.116412][ T3345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.158530][ T3345] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 328.217455][ T3345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.227782][ T3345] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 328.287380][ T3345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.301402][ T3345] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 328.335466][ T3345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 331.627055][ T3344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.716343][ T3345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.573371][ T3344] veth0_vlan: entered promiscuous mode [ 345.671284][ T3344] veth1_vlan: entered promiscuous mode [ 345.959881][ T3344] veth0_macvtap: entered promiscuous mode [ 346.059942][ T3344] veth1_macvtap: entered promiscuous mode [ 346.539794][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.569288][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.571153][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.620017][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.146770][ T3345] veth0_vlan: entered promiscuous mode [ 347.438418][ T29] audit: type=1400 audit(346.820:106): avc: denied { mounton } for pid=3344 comm="syz-executor" path="/syzkaller.pkVgiC/syz-tmp" dev="vda" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 347.465053][ T29] audit: type=1400 audit(346.830:107): avc: denied { mount } for pid=3344 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 347.561220][ T29] audit: type=1400 audit(346.940:108): avc: denied { mounton } for pid=3344 comm="syz-executor" path="/syzkaller.pkVgiC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 347.699580][ T29] audit: type=1400 audit(347.080:109): avc: denied { mount } for pid=3344 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 347.722158][ T3345] veth1_vlan: entered promiscuous mode [ 347.838048][ T29] audit: type=1400 audit(347.200:110): avc: denied { mounton } for pid=3344 comm="syz-executor" path="/syzkaller.pkVgiC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 347.860415][ T29] audit: type=1400 audit(347.230:111): avc: denied { mounton } for pid=3344 comm="syz-executor" path="/syzkaller.pkVgiC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 347.951073][ T29] audit: type=1400 audit(347.330:112): avc: denied { unmount } for pid=3344 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 348.002363][ T29] audit: type=1400 audit(347.380:113): avc: denied { mounton } for pid=3344 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 348.018079][ T29] audit: type=1400 audit(347.390:114): avc: denied { mount } for pid=3344 comm="syz-executor" name="/" dev="gadgetfs" ino=2996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 348.072287][ T29] audit: type=1400 audit(347.450:115): avc: denied { mount } for pid=3344 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 348.270343][ T3345] veth0_macvtap: entered promiscuous mode [ 348.419345][ T3344] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 348.484025][ T3345] veth1_macvtap: entered promiscuous mode [ 349.332480][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.340963][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.347655][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.348210][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.477662][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 352.478517][ T29] audit: type=1400 audit(351.860:121): avc: denied { create } for pid=3493 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 352.593928][ T29] audit: type=1400 audit(351.960:122): avc: denied { setopt } for pid=3493 comm="syz.1.2" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 352.641867][ T29] audit: type=1400 audit(352.020:123): avc: denied { connect } for pid=3493 comm="syz.1.2" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 352.726327][ T29] audit: type=1400 audit(352.090:124): avc: denied { write } for pid=3493 comm="syz.1.2" laddr=fe80::13 lport=60 faddr=ff01::1 fport=20132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 354.479211][ T3497] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 354.515399][ T29] audit: type=1400 audit(353.890:125): avc: denied { firmware_load } for pid=3496 comm="syz.1.3" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 354.527244][ T3497] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 355.313808][ T29] audit: type=1400 audit(354.690:126): avc: denied { map_create } for pid=3495 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 355.347366][ T29] audit: type=1400 audit(354.720:127): avc: denied { bpf } for pid=3495 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 355.384654][ T29] audit: type=1400 audit(354.760:128): avc: denied { map_read map_write } for pid=3495 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 355.592407][ T29] audit: type=1400 audit(354.970:129): avc: denied { prog_load } for pid=3495 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 355.641638][ T29] audit: type=1400 audit(355.010:130): avc: denied { perfmon } for pid=3495 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.664539][ T29] audit: type=1400 audit(357.040:131): avc: denied { read write } for pid=3502 comm="syz.1.5" name="raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 357.690564][ T29] audit: type=1400 audit(357.040:132): avc: denied { open } for pid=3502 comm="syz.1.5" path="/dev/raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 357.734330][ T29] audit: type=1400 audit(357.110:133): avc: denied { ioctl } for pid=3502 comm="syz.1.5" path="/dev/raw-gadget" dev="devtmpfs" ino=703 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 357.781305][ T3503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.901519][ T3503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.067046][ T29] audit: type=1400 audit(358.440:134): avc: denied { read write } for pid=3507 comm="syz.1.6" name="fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 359.102358][ T29] audit: type=1400 audit(358.470:135): avc: denied { open } for pid=3507 comm="syz.1.6" path="/dev/fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 360.332168][ T29] audit: type=1400 audit(359.690:136): avc: denied { write } for pid=3507 comm="syz.1.6" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 360.337625][ T29] audit: type=1400 audit(359.690:137): avc: denied { open } for pid=3507 comm="syz.1.6" path="/3/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 361.845078][ T29] audit: type=1400 audit(361.220:138): avc: denied { unmount } for pid=3344 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 362.672441][ T29] audit: type=1400 audit(362.050:139): avc: denied { ioctl } for pid=3515 comm="syz.1.8" path="/dev/fuse" dev="devtmpfs" ino=92 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 363.650351][ T29] audit: type=1400 audit(363.020:140): avc: denied { validate_trans } for pid=3517 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 364.304186][ T29] audit: type=1400 audit(363.680:141): avc: denied { create } for pid=3519 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 366.250461][ T29] audit: type=1400 audit(365.630:142): avc: denied { prog_run } for pid=3523 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 369.195860][ T29] audit: type=1400 audit(368.570:143): avc: denied { mounton } for pid=3528 comm="syz.1.14" path="/10/file0" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 369.239630][ T29] audit: type=1400 audit(368.620:144): avc: denied { execute } for pid=3528 comm="syz.1.14" name="file0" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 372.717833][ T29] audit: type=1400 audit(372.080:145): avc: denied { create } for pid=3537 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 372.758309][ T29] audit: type=1400 audit(372.120:146): avc: denied { write } for pid=3537 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 374.150284][ T29] audit: type=1400 audit(373.490:147): avc: denied { read } for pid=3540 comm="syz.1.20" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 381.005782][ T29] audit: type=1400 audit(380.380:148): avc: denied { write } for pid=3543 comm="syz.1.21" name="fib_trie" dev="proc" ino=4026532639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 381.055718][ T3546] capability: warning: `syz.1.21' uses deprecated v2 capabilities in a way that may be insecure [ 381.604108][ T29] audit: type=1400 audit(380.980:149): avc: denied { ioctl } for pid=3536 comm="syz.0.19" path="socket:[4078]" dev="sockfs" ino=4078 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 382.365946][ T3547] Zero length message leads to an empty skb [ 396.051823][ T29] audit: type=1400 audit(395.430:150): avc: denied { read write } for pid=3344 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.084313][ T29] audit: type=1400 audit(395.430:151): avc: denied { open } for pid=3344 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.086530][ T29] audit: type=1400 audit(395.460:152): avc: denied { ioctl } for pid=3344 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.796799][ T29] audit: type=1400 audit(396.180:153): avc: denied { create } for pid=3557 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 396.839692][ T29] audit: type=1400 audit(396.220:154): avc: denied { write } for pid=3557 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 396.879882][ T29] audit: type=1400 audit(396.260:155): avc: denied { nlmsg_write } for pid=3557 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 396.979947][ T29] audit: type=1400 audit(396.340:156): avc: denied { setattr } for pid=3558 comm="syz.0.23" name="controlC1" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 398.235967][ T3563] wireguard: wg0: Could not create IPv4 socket [ 406.051923][ T29] audit: type=1326 audit(405.420:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3581 comm="syz.0.33" exe="/syz-executor" sig=31 arch=40000028 syscall=403 compat=1 ip=0x128448 code=0x0 [ 419.235521][ T3606] syz.1.42 uses obsolete (PF_INET,SOCK_PACKET) [ 419.259565][ T29] audit: type=1400 audit(418.640:158): avc: denied { ioctl } for pid=3604 comm="syz.1.42" path="socket:[4256]" dev="sockfs" ino=4256 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 419.785391][ T29] audit: type=1400 audit(419.160:159): avc: denied { ioctl } for pid=3604 comm="syz.1.42" path="socket:[4255]" dev="sockfs" ino=4255 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 420.232462][ T3607] syzkaller0: entered promiscuous mode [ 420.240800][ T3607] syzkaller0: entered allmulticast mode [ 425.812365][ T29] audit: type=1400 audit(425.190:160): avc: denied { write } for pid=3610 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 427.075587][ T29] audit: type=1400 audit(426.450:161): avc: denied { name_bind } for pid=3613 comm="syz.1.44" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 427.090505][ T29] audit: type=1400 audit(426.470:162): avc: denied { node_bind } for pid=3613 comm="syz.1.44" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 433.521315][ T3629] netlink: 64 bytes leftover after parsing attributes in process `syz.1.51'. [ 434.063940][ T29] audit: type=1400 audit(433.440:163): avc: denied { name_bind } for pid=3626 comm="syz.1.51" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 434.155703][ T3629] syzkaller1: entered promiscuous mode [ 434.159648][ T3629] syzkaller1: entered allmulticast mode [ 465.463284][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [kworker/1:0:3435] [ 465.463727][ C1] Modules linked in: [ 465.464333][ C1] irq event stamp: 23168 [ 465.467462][ C1] hardirqs last enabled at (23167): [] arm64_exit_to_kernel_mode+0x4c/0xc0 [ 465.468839][ C1] hardirqs last disabled at (23168): [] el1_interrupt+0x28/0x60 [ 465.469226][ C1] softirqs last enabled at (23166): [] handle_softirqs+0xa9c/0x1050 [ 465.469584][ C1] softirqs last disabled at (23161): [] __do_softirq+0x14/0x20 [ 465.470887][ C1] CPU: 1 UID: 0 PID: 3435 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT [ 465.471006][ C1] Hardware name: linux,dummy-virt (DT) [ 465.471258][ C1] Workqueue: events netstamp_clear [ 465.471656][ C1] pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 465.471764][ C1] pc : kasan_check_range+0x38/0x1b4 [ 465.471837][ C1] lr : __kasan_check_read+0x20/0x2c [ 465.471897][ C1] sp : ffff8000a18b7820 [ 465.471951][ C1] x29: ffff8000a18b7820 x28: ffffffffffffffff x27: 0000000000000000 [ 465.472143][ C1] x26: ffff000069fce4c0 x25: ffff80008768f6e0 x24: 0000000000000000 [ 465.472247][ C1] x23: dfff800000000000 x22: ffff000069ff3500 x21: ffff80008768f6e0 [ 465.472330][ C1] x20: 1ffff00014316f1c x19: ffff000069fd4508 x18: 0000000000000000 [ 465.472411][ C1] x17: ffff000069fe0d50 x16: ffff80008db80000 x15: ffff80008768f6e8 [ 465.472494][ C1] x14: 1ffff00010ed1edd x13: ffff800089e52608 x12: ffff60000d3fa8a2 [ 465.472578][ C1] x11: 1fffe0000d3fa8a1 x10: ffff60000d3fa8a1 x9 : dfff800000000000 [ 465.472769][ C1] x8 : ffff000069fd450b x7 : 0000000000000001 x6 : ffff60000d3fa8a1 [ 465.472854][ C1] x5 : ffff000069fd4508 x4 : ffff000000000000 x3 : ffff8000805008d0 [ 465.472935][ C1] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 465.473135][ C1] Call trace: [ 465.473352][ C1] kasan_check_range+0x38/0x1b4 (P) [ 465.473539][ C1] smp_call_function_many_cond+0x428/0x1998 [ 465.473606][ C1] kick_all_cpus_sync+0x3c/0xa0 [ 465.473661][ C1] arch_jump_label_transform_apply+0x10/0x38 [ 465.473733][ C1] __jump_label_update+0x1f4/0x274 [ 465.473795][ C1] jump_label_update+0x270/0x3e4 [ 465.473851][ C1] static_key_enable_cpuslocked+0x15c/0x1e0 [ 465.473908][ C1] static_key_enable+0x20/0x40 [ 465.473963][ C1] netstamp_clear+0x6c/0xc0 [ 465.474021][ C1] process_one_work+0x810/0x1b1c [ 465.474080][ C1] worker_thread+0x42c/0xc90 [ 465.474133][ C1] kthread+0x2f0/0x388 [ 465.474186][ C1] ret_from_fork+0x10/0x20 [ 465.474626][ C1] Sending NMI from CPU 1 to CPUs 0: [ 495.161129][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 49s! [kworker/u8:1:25] [ 495.161437][ C0] Modules linked in: [ 495.161611][ C0] irq event stamp: 120622 [ 495.172018][ C0] hardirqs last enabled at (120621): [] finish_task_switch.isra.0+0x1e8/0x91c [ 495.172890][ C0] hardirqs last disabled at (120622): [] el1_interrupt+0x28/0x60 [ 495.173599][ C0] softirqs last enabled at (120614): [] handle_softirqs+0xa9c/0x1050 [ 495.174212][ C0] softirqs last disabled at (120087): [] __do_softirq+0x14/0x20