last executing test programs: 4.305645081s ago: executing program 1 (id=14): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) 4.259119817s ago: executing program 0 (id=18): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$EXT4_IOC_SETFSUUID(r0, 0x5451, 0x0) 3.918350306s ago: executing program 1 (id=15): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) 3.156609385s ago: executing program 1 (id=16): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) ioctl$TIOCGLCKTRMIOS(r0, 0x5452, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "081a23ff40ffff00"}) 3.116217879s ago: executing program 0 (id=21): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x80044df9, 0x0) 2.24623101s ago: executing program 1 (id=17): mknod(&(0x7f00000052c0)='./file1\x00', 0x0, 0x0) lsetxattr(&(0x7f0000005300)='./file1\x00', &(0x7f0000005340)=@random={'security.', '{^\x00'}, &(0x7f0000005380)='mask', 0x7ffffffff000, 0x0) 2.175701228s ago: executing program 0 (id=23): r0 = socket(0x10, 0x3, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) 1.201179791s ago: executing program 0 (id=19): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x40040, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x5450, 0x0) 887.262058ms ago: executing program 1 (id=20): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$watch_queue(r0, 0x0, 0x0) 819.341496ms ago: executing program 0 (id=22): r0 = syz_io_uring_setup(0x3765, &(0x7f0000000000)={0x0, 0xfbb, 0x2, 0x1, 0xfc}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000140), 0x0) 49.752035ms ago: executing program 1 (id=24): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000001c0)=""/102393) 0s ago: executing program 0 (id=25): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x5421, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): [ 236.093176][ T29] audit: type=1400 audit(235.610:80): avc: denied { write } for pid=3376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.597561][ T29] audit: type=1400 audit(237.110:81): avc: denied { write } for pid=3382 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.679682][ T29] audit: type=1400 audit(239.200:82): avc: denied { write } for pid=3385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.489757][ T29] audit: type=1400 audit(240.010:83): avc: denied { write } for pid=3388 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.979981][ T29] audit: type=1400 audit(241.490:84): avc: denied { write } for pid=3391 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.019007][ T29] audit: type=1400 audit(242.540:85): avc: denied { write } for pid=3394 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:24325' (ED25519) to the list of known hosts. [ 276.901719][ T29] audit: type=1400 audit(276.420:86): avc: denied { name_bind } for pid=3399 comm="sshd-session" src=30004 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 277.451096][ T29] audit: type=1400 audit(276.970:87): avc: denied { execute } for pid=3400 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 277.462389][ T29] audit: type=1400 audit(276.970:88): avc: denied { execute_no_trans } for pid=3400 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 287.572587][ T29] audit: type=1400 audit(287.090:89): avc: denied { mounton } for pid=3400 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 287.625848][ T29] audit: type=1400 audit(287.140:90): avc: denied { mount } for pid=3400 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 287.683914][ T3400] cgroup: Unknown subsys name 'net' [ 287.751425][ T29] audit: type=1400 audit(287.270:91): avc: denied { unmount } for pid=3400 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 288.059491][ T3400] cgroup: Unknown subsys name 'cpuset' [ 288.123826][ T3400] cgroup: Unknown subsys name 'rlimit' [ 288.475035][ T29] audit: type=1400 audit(287.990:92): avc: denied { setattr } for pid=3400 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.477713][ T29] audit: type=1400 audit(288.000:93): avc: denied { mounton } for pid=3400 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 288.479826][ T29] audit: type=1400 audit(288.000:94): avc: denied { mount } for pid=3400 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 289.061000][ T3402] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 289.069770][ T29] audit: type=1400 audit(288.590:95): avc: denied { relabelto } for pid=3402 comm="mkswap" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 289.080745][ T29] audit: type=1400 audit(288.600:96): avc: denied { write } for pid=3402 comm="mkswap" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 289.210050][ T29] audit: type=1400 audit(288.730:97): avc: denied { read } for pid=3400 comm="syz-executor" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 289.218350][ T29] audit: type=1400 audit(288.730:98): avc: denied { open } for pid=3400 comm="syz-executor" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 289.265094][ T3400] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 304.926074][ T29] audit: type=1400 audit(304.440:99): avc: denied { execmem } for pid=3403 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 305.063017][ T29] audit: type=1400 audit(304.580:100): avc: denied { read } for pid=3405 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 305.069567][ T29] audit: type=1400 audit(304.580:101): avc: denied { open } for pid=3405 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 305.091395][ T29] audit: type=1400 audit(304.610:102): avc: denied { mounton } for pid=3405 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 305.152731][ T29] audit: type=1400 audit(304.670:103): avc: denied { module_request } for pid=3405 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 305.483527][ T29] audit: type=1400 audit(305.000:104): avc: denied { sys_module } for pid=3406 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 307.986554][ T29] audit: type=1400 audit(307.500:105): avc: denied { create } for pid=3405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 308.436111][ T29] audit: type=1400 audit(307.950:106): avc: denied { write } for pid=3405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 308.561160][ T3406] rxe_eth0 speed is unknown, defaulting to 1000 [ 308.588728][ T3406] rxe_eth0 speed is unknown, defaulting to 1000 [ 308.600376][ T3405] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 308.638443][ T29] audit: type=1400 audit(308.130:107): avc: denied { read } for pid=3405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 308.657559][ T3406] rxe_eth0 speed is unknown, defaulting to 1000 [ 309.241826][ T29] audit: type=1400 audit(308.760:108): avc: denied { read } for pid=3245 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 311.377435][ T3406] infiniband rxe0: set active [ 311.377868][ T3406] infiniband rxe0: added rxe_eth0 [ 311.459442][ T812] rxe_eth0 speed is unknown, defaulting to 1000 [ 311.866593][ T3406] RDS/IB: rxe0: added [ 311.869846][ T3406] smc: adding ib device rxe0 with port count 1 [ 311.870716][ T3406] smc: ib device rxe0 port 1 has no pnetid [ 311.873650][ T812] rxe_eth0 speed is unknown, defaulting to 1000 [ 311.946241][ T3406] rxe_eth0 speed is unknown, defaulting to 1000 [ 314.389118][ T3406] rxe_eth0 speed is unknown, defaulting to 1000 [ 316.306105][ T3405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.462736][ T3405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.002501][ T3405] hsr_slave_0: entered promiscuous mode [ 321.029720][ T3405] hsr_slave_1: entered promiscuous mode [ 321.629679][ T3445] rxe_eth0 speed is unknown, defaulting to 1000 [ 322.605401][ T29] audit: type=1400 audit(322.100:109): avc: denied { write } for pid=3468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.742682][ T3406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.879532][ T3406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.712620][ T29] audit: type=1400 audit(323.230:110): avc: denied { write } for pid=3472 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.455357][ T29] audit: type=1400 audit(324.970:111): avc: denied { create } for pid=3405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.468355][ T29] audit: type=1400 audit(324.980:112): avc: denied { write } for pid=3405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.507626][ T29] audit: type=1400 audit(325.010:113): avc: denied { read } for pid=3405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.511690][ T3405] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 325.600348][ T3405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.870676][ T3405] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 325.912086][ T3405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.935617][ T3405] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 325.980636][ T3405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.992908][ T3405] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.032226][ T3405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.382304][ T3406] hsr_slave_0: entered promiscuous mode [ 328.401043][ T3406] hsr_slave_1: entered promiscuous mode [ 328.417028][ T3406] debugfs: 'hsr0' already exists in 'hsr' [ 328.418214][ T3406] Cannot create hsr debugfs directory [ 331.261080][ T3405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.307391][ T3406] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 331.341922][ T3406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.384041][ T3406] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 331.436763][ T3406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.486684][ T3406] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 331.539237][ T3406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.568077][ T3406] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 331.601340][ T3406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.753019][ T3406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.312133][ T3405] veth0_vlan: entered promiscuous mode [ 347.491074][ T3405] veth1_vlan: entered promiscuous mode [ 348.157387][ T3405] veth0_macvtap: entered promiscuous mode [ 348.251903][ T3405] veth1_macvtap: entered promiscuous mode [ 348.830659][ T3530] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.039385][ T1025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.079756][ T1025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.080285][ T1025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.696085][ T29] audit: type=1400 audit(349.200:114): avc: denied { mounton } for pid=3405 comm="syz-executor" path="/syzkaller.LxMLnP/syz-tmp" dev="vda" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 349.696578][ T29] audit: type=1400 audit(349.210:115): avc: denied { mount } for pid=3405 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 349.719688][ T29] audit: type=1400 audit(349.240:116): avc: denied { mounton } for pid=3405 comm="syz-executor" path="/syzkaller.LxMLnP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 349.768058][ T29] audit: type=1400 audit(349.260:117): avc: denied { mount } for pid=3405 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 349.831412][ T29] audit: type=1400 audit(349.350:118): avc: denied { mounton } for pid=3405 comm="syz-executor" path="/syzkaller.LxMLnP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 349.876721][ T29] audit: type=1400 audit(349.370:119): avc: denied { mounton } for pid=3405 comm="syz-executor" path="/syzkaller.LxMLnP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 349.937194][ T29] audit: type=1400 audit(349.430:120): avc: denied { unmount } for pid=3405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 349.979266][ T29] audit: type=1400 audit(349.500:121): avc: denied { mounton } for pid=3405 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 350.010465][ T29] audit: type=1400 audit(349.530:122): avc: denied { mount } for pid=3405 comm="syz-executor" name="/" dev="gadgetfs" ino=4465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 350.273854][ T3406] veth0_vlan: entered promiscuous mode [ 350.401480][ T3406] veth1_vlan: entered promiscuous mode [ 351.016323][ T3406] veth0_macvtap: entered promiscuous mode [ 351.032174][ T29] audit: type=1400 audit(350.550:123): avc: denied { mounton } for pid=3405 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 351.078290][ T3406] veth1_macvtap: entered promiscuous mode [ 351.386572][ T3405] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 351.534124][ T1025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.539498][ T1025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.539936][ T1025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.540300][ T1025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.647942][ T3405] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 351.759806][ T3405] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 352.200512][ T3405] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 363.807428][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 363.807659][ T29] audit: type=1400 audit(363.320:128): avc: denied { accept } for pid=3615 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 364.741484][ T29] audit: type=1400 audit(364.260:129): avc: denied { allowed } for pid=3621 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 364.790575][ T29] audit: type=1400 audit(364.310:130): avc: denied { sqpoll } for pid=3621 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 364.836407][ T29] audit: type=1400 audit(364.350:131): avc: denied { create } for pid=3621 comm="syz.0.22" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 364.847419][ T29] audit: type=1400 audit(364.360:132): avc: denied { map } for pid=3621 comm="syz.0.22" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 364.862387][ T29] audit: type=1400 audit(364.380:133): avc: denied { read write } for pid=3621 comm="syz.0.22" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 365.162190][ T1025] ------------[ cut here ]------------ [ 365.162683][ T1025] WARNING: io_uring/sqpoll.c:88 at io_sq_thread_stop+0x130/0x15c, CPU#0: kworker/u8:5/1025 [ 365.165250][ T1025] Modules linked in: [ 365.167327][ T1025] CPU: 0 UID: 0 PID: 1025 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT [ 365.167920][ T1025] Hardware name: linux,dummy-virt (DT) [ 365.168669][ T1025] Workqueue: iou_exit io_ring_exit_work [ 365.169632][ T1025] pstate: 10000005 (nzcV daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 365.170148][ T1025] pc : io_sq_thread_stop+0x130/0x15c [ 365.170539][ T1025] lr : io_put_sq_data+0xb4/0x160 [ 365.170889][ T1025] sp : ffff80008ffa78d0 [ 365.171171][ T1025] x29: ffff80008ffa78d0 x28: 1ffff00011ff4f34 x27: 0000000002000000 [ 365.171796][ T1025] x26: ffff000017f44098 x25: ffff000017f44098 x24: 0000000000000000 [ 365.172367][ T1025] x23: ffff000017f43bc0 x22: 1fffe000046f2090 x21: ffff000023790480 [ 365.172926][ T1025] x20: ffff000017f44004 x19: ffff000017f44000 x18: 0000000000000000 [ 365.173506][ T1025] x17: ffff7fffe1a23000 x16: ffff80008e800000 x15: ffff8000883fa918 [ 365.174118][ T1025] x14: 1ffff0001107f523 x13: ffff80008ab2c8e0 x12: ffff600002fe8802 [ 365.174721][ T1025] x11: 1fffe00002fe8801 x10: ffff600002fe8801 x9 : dfff800000000000 [ 365.175556][ T1025] x8 : ffff000017f4400b x7 : 0000000000000001 x6 : ffff600002fe8801 [ 365.176183][ T1025] x5 : ffff000017f44008 x4 : ffff600002fe8802 x3 : ffff8000816ce01c [ 365.176736][ T1025] x2 : 1fffe00002fe8823 x1 : 0000000000000001 x0 : ffff000017f44118 [ 365.177264][ T1025] Call trace: [ 365.177624][ T1025] io_sq_thread_stop+0x130/0x15c (P) [ 365.177982][ T1025] io_put_sq_data+0xb4/0x160 [ 365.178170][ T1025] io_sq_thread_finish+0x1d0/0x270 [ 365.178392][ T1025] io_ring_exit_work+0x308/0x7ac [ 365.178606][ T1025] process_one_work+0x820/0x1940 [ 365.178977][ T1025] worker_thread+0x42c/0xc90 [ 365.179339][ T1025] kthread+0x2ec/0x384 [ 365.179675][ T1025] ret_from_fork+0x10/0x20 [ 365.180079][ T1025] irq event stamp: 313110 [ 365.180386][ T1025] hardirqs last enabled at (313109): [] _raw_spin_unlock_irqrestore+0x80/0xb4 [ 365.180818][ T1025] hardirqs last disabled at (313110): [] el1_brk64+0x20/0x60 [ 365.181229][ T1025] softirqs last enabled at (313080): [] __do_softirq+0x14/0x20 [ 365.181619][ T1025] softirqs last disabled at (312881): [] __do_softirq+0x14/0x20 [ 365.182208][ T1025] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 367.178794][ T1773] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.917056][ T1773] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.271238][ T1773] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.556737][ T1773] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.777971][ T1773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.861433][ T1773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.923262][ T1773] bond0 (unregistering): Released all slaves [ 372.174724][ T29] audit: type=1400 audit(371.680:134): avc: denied { read } for pid=3245 comm="dhcpcd" name="n19" dev="tmpfs" ino=968 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 372.175273][ T29] audit: type=1400 audit(371.680:135): avc: denied { open } for pid=3245 comm="dhcpcd" path="/run/udev/data/n19" dev="tmpfs" ino=968 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 372.180250][ T29] audit: type=1400 audit(371.680:136): avc: denied { getattr } for pid=3245 comm="dhcpcd" path="/run/udev/data/n19" dev="tmpfs" ino=968 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 374.522074][ T29] audit: type=1400 audit(374.040:137): avc: denied { write } for pid=3634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.522669][ T29] audit: type=1400 audit(374.040:138): avc: denied { create } for pid=3634 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 374.532577][ T29] audit: type=1400 audit(374.050:139): avc: denied { write } for pid=3634 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 374.533096][ T29] audit: type=1400 audit(374.050:140): avc: denied { append } for pid=3634 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.511749][ T29] audit: type=1400 audit(375.030:141): avc: denied { write } for pid=3637 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.522992][ T29] audit: type=1400 audit(375.040:142): avc: denied { unlink } for pid=3637 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.872039][ T1773] hsr_slave_0: left promiscuous mode [ 375.890804][ T1773] hsr_slave_1: left promiscuous mode [ 376.001026][ T1773] veth1_macvtap: left promiscuous mode [ 376.001930][ T1773] veth0_macvtap: left promiscuous mode [ 376.003458][ T1773] veth1_vlan: left promiscuous mode [ 376.017332][ T1773] veth0_vlan: left promiscuous mode [ 381.770328][ T3245] 8021q: adding VLAN 0 to HW filter on device eth1 [ 382.862201][ T1773] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.219863][ T1773] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.533123][ T1773] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.865472][ T1773] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.576930][ T29] audit: type=1400 audit(384.060:143): avc: denied { write } for pid=3642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.192639][ T29] audit: type=1400 audit(385.710:144): avc: denied { write } for pid=3648 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.824014][ T1773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.890213][ T1773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.951093][ T1773] bond0 (unregistering): Released all slaves [ 388.065370][ T3245] 8021q: adding VLAN 0 to HW filter on device eth2 [ 390.491420][ T29] audit: type=1400 audit(390.010:145): avc: denied { write } for pid=3654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.328834][ T29] audit: type=1400 audit(390.850:146): avc: denied { write } for pid=3657 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.067640][ T1773] hsr_slave_0: left promiscuous mode [ 392.090648][ T1773] hsr_slave_1: left promiscuous mode [ 392.184857][ T1773] veth1_macvtap: left promiscuous mode [ 392.186720][ T1773] veth0_macvtap: left promiscuous mode [ 392.188855][ T1773] veth1_vlan: left promiscuous mode [ 392.189756][ T1773] veth0_vlan: left promiscuous mode