last executing test programs: 7.095477118s ago: executing program 1 (id=102): openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, 0x0, 0x4000004) sendmsg$TIPC_NL_BEARER_ENABLE(r3, 0x0, 0x0) dup(r1) r6 = dup(r0) write$UHID_INPUT(r6, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, 0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, 0x0, 0x0, r8, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) 4.817015591s ago: executing program 1 (id=105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@jmp={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xfffffffffffffffb}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf2b}, 0x94) 4.273238305s ago: executing program 0 (id=106): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 4.030462553s ago: executing program 1 (id=107): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000780)={0x18, &(0x7f00000007c0)=ANY=[@ANYBLOB="401305"], 0x0, 0x0, 0x0, 0x0}) 3.118699298s ago: executing program 0 (id=108): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000080)=0x40) 2.861427388s ago: executing program 1 (id=109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000f8ffffff36000000ffffffff95"], &(0x7f0000000100)='syzkaller\x00', 0x1}, 0x94) 2.170536028s ago: executing program 1 (id=110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) 2.011349256s ago: executing program 0 (id=111): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010000000000fedbdf250c0000002d0000000000000010009a800c000300a7"], 0x30}], 0x1, 0x0, 0x0, 0x4044801}, 0x8000) 1.564776928s ago: executing program 1 (id=112): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) chdir(&(0x7f0000000100)='./cgroup\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000000c0)=0xc, 0x4) write(0xffffffffffffffff, &(0x7f00000001c0)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d846ba9769d3cd91cfc183ce736f56a28e5145ba2f94812237d", 0x66) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1685, &(0x7f0000000680)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x3, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f00000005c0)=0xa, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100}, 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x4}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.278876901s ago: executing program 0 (id=113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}}, 0x0) 568.908114ms ago: executing program 0 (id=114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) 0s ago: executing program 0 (id=115): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000003c0)={0x2, &(0x7f0000000400)=[{0x30, 0x4, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x8) socket(0x10, 0x3, 0x0) syz_clone3(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:48799' (ED25519) to the list of known hosts. [ 258.073016][ T29] audit: type=1400 audit(257.670:84): avc: denied { name_bind } for pid=3399 comm="sshd-session" src=30002 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 258.654579][ T29] audit: type=1400 audit(258.260:85): avc: denied { execute } for pid=3400 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 258.667038][ T29] audit: type=1400 audit(258.260:86): avc: denied { execute_no_trans } for pid=3400 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 267.930295][ T29] audit: type=1400 audit(267.530:87): avc: denied { mounton } for pid=3400 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 267.985437][ T29] audit: type=1400 audit(267.580:88): avc: denied { mount } for pid=3400 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 268.037010][ T3400] cgroup: Unknown subsys name 'net' [ 268.101228][ T29] audit: type=1400 audit(267.700:89): avc: denied { unmount } for pid=3400 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 268.343464][ T3400] cgroup: Unknown subsys name 'cpuset' [ 268.386739][ T3400] cgroup: Unknown subsys name 'rlimit' [ 268.573321][ T29] audit: type=1400 audit(268.170:90): avc: denied { setattr } for pid=3400 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 268.577293][ T29] audit: type=1400 audit(268.180:91): avc: denied { mounton } for pid=3400 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 268.579988][ T29] audit: type=1400 audit(268.180:92): avc: denied { mount } for pid=3400 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 269.273932][ T3402] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 269.280247][ T29] audit: type=1400 audit(268.880:93): avc: denied { relabelto } for pid=3402 comm="mkswap" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 269.287943][ T29] audit: type=1400 audit(268.880:94): avc: denied { write } for pid=3402 comm="mkswap" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 269.409885][ T29] audit: type=1400 audit(269.010:95): avc: denied { read } for pid=3400 comm="syz-executor" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 269.417167][ T29] audit: type=1400 audit(269.010:96): avc: denied { open } for pid=3400 comm="syz-executor" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 269.463471][ T3400] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 289.151757][ T29] audit: type=1400 audit(288.750:97): avc: denied { execmem } for pid=3404 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 289.233424][ T29] audit: type=1400 audit(288.830:98): avc: denied { read } for pid=3405 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 289.233934][ T29] audit: type=1400 audit(288.830:99): avc: denied { open } for pid=3405 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 289.239721][ T29] audit: type=1400 audit(288.840:100): avc: denied { mounton } for pid=3405 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 289.291579][ T29] audit: type=1400 audit(288.890:101): avc: denied { module_request } for pid=3405 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 289.500065][ T29] audit: type=1400 audit(289.100:102): avc: denied { sys_module } for pid=3406 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 291.663536][ T29] audit: type=1400 audit(291.250:103): avc: denied { create } for pid=3406 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 291.860475][ T29] audit: type=1400 audit(291.460:104): avc: denied { write } for pid=3406 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 292.049271][ T3406] rxe_eth0 speed is unknown, defaulting to 1000 [ 292.097329][ T3406] rxe_eth0 speed is unknown, defaulting to 1000 [ 292.175044][ T3406] rxe_eth0 speed is unknown, defaulting to 1000 [ 292.406241][ T3405] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 292.416298][ T29] audit: type=1400 audit(292.020:105): avc: denied { read } for pid=3405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 292.547930][ T29] audit: type=1400 audit(292.150:106): avc: denied { read } for pid=3250 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 295.056929][ T3406] infiniband rxe0: set active [ 295.060000][ T54] rxe_eth0 speed is unknown, defaulting to 1000 [ 295.061275][ T3406] infiniband rxe0: added rxe_eth0 [ 295.399383][ T3406] RDS/IB: rxe0: added [ 295.401409][ T3406] smc: adding ib device rxe0 with port count 1 [ 295.415461][ T3406] smc: ib device rxe0 port 1 has no pnetid [ 295.418442][ T11] rxe_eth0 speed is unknown, defaulting to 1000 [ 295.458684][ T3406] rxe_eth0 speed is unknown, defaulting to 1000 [ 297.755508][ T3406] rxe_eth0 speed is unknown, defaulting to 1000 [ 299.373008][ T3405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.449768][ T3405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.994925][ T3405] hsr_slave_0: entered promiscuous mode [ 304.009982][ T3405] hsr_slave_1: entered promiscuous mode [ 304.958661][ T3406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.047416][ T3406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.119941][ T40] rxe_eth0 speed is unknown, defaulting to 1000 [ 307.012851][ T29] audit: type=1400 audit(306.610:107): avc: denied { create } for pid=3405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 307.035323][ T29] audit: type=1400 audit(306.630:108): avc: denied { write } for pid=3405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 307.051599][ T29] audit: type=1400 audit(306.650:109): avc: denied { read } for pid=3405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 307.121462][ T3405] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 307.201835][ T29] audit: type=1400 audit(306.800:110): avc: denied { write } for pid=3470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.240999][ T3405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 307.259145][ T3405] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 307.296689][ T3405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 307.314653][ T3405] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 307.411520][ T3405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 307.429881][ T3405] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 307.483425][ T3405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 308.730115][ T29] audit: type=1400 audit(308.330:111): avc: denied { write } for pid=3481 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.223658][ T3406] hsr_slave_0: entered promiscuous mode [ 311.245841][ T3406] hsr_slave_1: entered promiscuous mode [ 311.266980][ T3406] debugfs: 'hsr0' already exists in 'hsr' [ 311.268538][ T3406] Cannot create hsr debugfs directory [ 313.331500][ T3405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.941015][ T3406] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 313.978134][ T3406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.011498][ T3406] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.051695][ T3406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.079048][ T3406] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 314.164364][ T3406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.186960][ T3406] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.238276][ T3406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 319.145582][ T3406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.290538][ T29] audit: type=1400 audit(321.890:112): avc: denied { write } for pid=3529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.937786][ T29] audit: type=1400 audit(323.540:113): avc: denied { write } for pid=3537 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.119405][ T3405] veth0_vlan: entered promiscuous mode [ 330.267506][ T3405] veth1_vlan: entered promiscuous mode [ 330.720817][ T3405] veth0_macvtap: entered promiscuous mode [ 330.764312][ T3405] veth1_macvtap: entered promiscuous mode [ 331.254465][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.255111][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.255309][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.255453][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.037913][ T29] audit: type=1400 audit(331.640:114): avc: denied { mounton } for pid=3405 comm="syz-executor" path="/syzkaller.YgF3bs/syz-tmp" dev="vda" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 332.057600][ T29] audit: type=1400 audit(331.660:115): avc: denied { mount } for pid=3405 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 332.093384][ T29] audit: type=1400 audit(331.690:116): avc: denied { mounton } for pid=3405 comm="syz-executor" path="/syzkaller.YgF3bs/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 332.134808][ T29] audit: type=1400 audit(331.730:117): avc: denied { mount } for pid=3405 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 332.228495][ T29] audit: type=1400 audit(331.830:118): avc: denied { mounton } for pid=3405 comm="syz-executor" path="/syzkaller.YgF3bs/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 332.301526][ T29] audit: type=1400 audit(331.880:119): avc: denied { mounton } for pid=3405 comm="syz-executor" path="/syzkaller.YgF3bs/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 332.438833][ T29] audit: type=1400 audit(332.040:120): avc: denied { unmount } for pid=3405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 332.605399][ T29] audit: type=1400 audit(332.190:121): avc: denied { mounton } for pid=3405 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 332.664925][ T29] audit: type=1400 audit(332.260:122): avc: denied { mount } for pid=3405 comm="syz-executor" name="/" dev="gadgetfs" ino=3973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 333.713573][ T29] audit: type=1400 audit(333.310:123): avc: denied { mounton } for pid=3405 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 334.217135][ T3405] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 335.809010][ T3406] veth0_vlan: entered promiscuous mode [ 335.979164][ T3406] veth1_vlan: entered promiscuous mode [ 336.559810][ T3406] veth0_macvtap: entered promiscuous mode [ 336.608911][ T3406] veth1_macvtap: entered promiscuous mode [ 337.019950][ T3577] loop7: detected capacity change from 0 to 7 [ 337.138835][ C0] critical medium error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 337.140490][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 337.168093][ C0] critical medium error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 337.168792][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 337.170943][ T3577] loop7: unable to read partition table [ 337.197468][ T3577] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 337.274625][ C0] critical medium error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 337.275110][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 337.302711][ C0] critical medium error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 337.303758][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 337.317735][ T3577] loop7: unable to read partition table [ 337.405081][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.406162][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.406406][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.423998][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.354818][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 338.355039][ T29] audit: type=1400 audit(337.950:129): avc: denied { read write } for pid=3579 comm="syz.1.3" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.355426][ T29] audit: type=1400 audit(337.950:130): avc: denied { open } for pid=3579 comm="syz.1.3" path="/dev/raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.428253][ T29] audit: type=1400 audit(338.000:131): avc: denied { ioctl } for pid=3579 comm="syz.1.3" path="/dev/raw-gadget" dev="devtmpfs" ino=704 ioctlcmd=0x41015500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.467846][ T3580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.481250][ T3580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.830481][ T3580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.854446][ T3580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.828754][ T29] audit: type=1400 audit(339.430:132): avc: denied { map_create } for pid=3585 comm="syz.1.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 339.850581][ T29] audit: type=1400 audit(339.450:133): avc: denied { bpf } for pid=3585 comm="syz.1.4" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 340.371828][ T29] audit: type=1400 audit(339.970:134): avc: denied { create } for pid=3585 comm="syz.1.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 340.386761][ T29] audit: type=1400 audit(339.980:135): avc: denied { setopt } for pid=3585 comm="syz.1.4" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 340.397965][ T29] audit: type=1400 audit(340.000:136): avc: denied { write } for pid=3585 comm="syz.1.4" path="socket:[4005]" dev="sockfs" ino=4005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 340.400559][ T29] audit: type=1400 audit(340.000:137): avc: denied { ioctl } for pid=3585 comm="syz.1.4" path="socket:[4147]" dev="sockfs" ino=4147 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.229272][ T29] audit: type=1400 audit(341.830:138): avc: denied { create } for pid=3585 comm="syz.1.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 343.828122][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 343.828354][ T29] audit: type=1400 audit(343.430:143): avc: denied { read write } for pid=3592 comm="syz.0.1" name="uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 343.830406][ T29] audit: type=1400 audit(343.430:144): avc: denied { open } for pid=3592 comm="syz.0.1" path="/dev/uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 343.877515][ T29] audit: type=1400 audit(343.480:145): avc: denied { ioctl } for pid=3592 comm="syz.0.1" path="/dev/uinput" dev="devtmpfs" ino=709 ioctlcmd=0x40045565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 344.035273][ T3599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=3599 comm=syz.1.5 [ 344.994766][ T3601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.001107][ T3601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.037577][ T3597] input: syz0 as /devices/virtual/input/input1 [ 347.674968][ T29] audit: type=1400 audit(347.270:146): avc: denied { create } for pid=3607 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 351.328126][ T3620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3620 comm=syz.0.10 [ 353.346167][ T29] audit: type=1400 audit(352.910:147): avc: denied { mount } for pid=3625 comm="syz.1.13" name="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 353.363829][ T29] audit: type=1400 audit(352.960:148): avc: denied { search } for pid=3625 comm="syz.1.13" name="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 353.387222][ T29] audit: type=1400 audit(352.990:149): avc: denied { search } for pid=3625 comm="syz.1.13" name="usb_gadget" dev="configfs" ino=2240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 353.444167][ T29] audit: type=1400 audit(353.030:150): avc: denied { write search } for pid=3625 comm="syz.1.13" name="usb_gadget" dev="configfs" ino=2240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 353.444661][ T29] audit: type=1400 audit(353.040:151): avc: denied { add_name } for pid=3625 comm="syz.1.13" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 353.444986][ T29] audit: type=1400 audit(353.040:152): avc: denied { create } for pid=3625 comm="syz.1.13" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 353.608431][ T29] audit: type=1400 audit(353.210:153): avc: denied { search } for pid=3625 comm="syz.1.13" name="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 353.608950][ T29] audit: type=1400 audit(353.210:154): avc: denied { search } for pid=3625 comm="syz.1.13" name="usb_gadget" dev="configfs" ino=2240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 353.609261][ T29] audit: type=1400 audit(353.210:155): avc: denied { search } for pid=3625 comm="syz.1.13" name="g_uac2" dev="configfs" ino=4051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 353.613789][ T29] audit: type=1400 audit(353.210:156): avc: denied { search } for pid=3625 comm="syz.1.13" name="functions" dev="configfs" ino=4052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 354.131210][ T3631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3631 comm=syz.1.15 [ 358.836454][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 358.836699][ T29] audit: type=1400 audit(358.380:193): avc: denied { create } for pid=3655 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 358.837045][ T29] audit: type=1400 audit(358.390:194): avc: denied { write } for pid=3655 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 358.837363][ T29] audit: type=1400 audit(358.390:195): avc: denied { nlmsg_write } for pid=3655 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 360.023913][ T3666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.039759][ T3666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.995153][ T29] audit: type=1400 audit(360.590:196): avc: denied { create } for pid=3670 comm="syz.1.30" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 361.023614][ T29] audit: type=1400 audit(360.620:197): avc: denied { ioctl } for pid=3670 comm="syz.1.30" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5147 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 365.464122][ T29] audit: type=1400 audit(365.070:198): avc: denied { read write } for pid=3698 comm="syz.1.43" name="vhost-net" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 365.465429][ T29] audit: type=1400 audit(365.070:199): avc: denied { open } for pid=3698 comm="syz.1.43" path="/dev/vhost-net" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 365.503212][ T29] audit: type=1400 audit(365.090:200): avc: denied { ioctl } for pid=3698 comm="syz.1.43" path="/dev/vhost-net" dev="devtmpfs" ino=716 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 365.595530][ T3699] syz.1.43 uses obsolete (PF_INET,SOCK_PACKET) [ 366.470977][ T3705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 366.920973][ T29] audit: type=1400 audit(366.520:201): avc: denied { allowed } for pid=3706 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 366.970766][ T29] audit: type=1400 audit(366.570:202): avc: denied { map } for pid=3706 comm="syz.1.46" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 366.971407][ T29] audit: type=1400 audit(366.570:203): avc: denied { read write } for pid=3706 comm="syz.1.46" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 367.105665][ T29] audit: type=1400 audit(366.700:204): avc: denied { map } for pid=3706 comm="syz.1.46" path="socket:[4320]" dev="sockfs" ino=4320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 368.443371][ T29] audit: type=1400 audit(368.040:205): avc: denied { create } for pid=3717 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 368.506687][ T29] audit: type=1400 audit(368.090:206): avc: denied { bind } for pid=3717 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 373.561900][ T29] audit: type=1400 audit(373.160:207): avc: denied { read } for pid=3743 comm="syz.1.59" name="loop-control" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 373.566991][ T29] audit: type=1400 audit(373.170:208): avc: denied { open } for pid=3743 comm="syz.1.59" path="/dev/loop-control" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 373.580483][ T29] audit: type=1400 audit(373.180:209): avc: denied { ioctl } for pid=3743 comm="syz.1.59" path="/dev/loop-control" dev="devtmpfs" ino=637 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 373.695811][ T29] audit: type=1400 audit(373.300:210): avc: denied { bind } for pid=3745 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 373.739341][ T29] audit: type=1400 audit(373.340:211): avc: denied { connect } for pid=3745 comm="syz.0.60" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.648512][ T3751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.678970][ T3751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.310638][ T29] audit: type=1400 audit(376.910:212): avc: denied { name_bind } for pid=3760 comm="syz.1.66" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 377.330458][ T29] audit: type=1400 audit(376.930:213): avc: denied { node_bind } for pid=3760 comm="syz.1.66" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 380.576277][ T29] audit: type=1400 audit(380.170:214): avc: denied { setopt } for pid=3764 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.663393][ T29] audit: type=1400 audit(380.250:215): avc: denied { read } for pid=3764 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 381.836722][ T3767] Zero length message leads to an empty skb [ 382.386630][ T3771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.416939][ T3771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.994924][ T29] audit: type=1400 audit(382.590:216): avc: denied { create } for pid=3773 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 386.494073][ T3796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.500828][ T3796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.970736][ T3804] netlink: 'syz.1.80': attribute type 4 has an invalid length. [ 388.008993][ T54] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 388.304300][ T3804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.310048][ T3804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.339820][ T54] usb 1-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=0.06 [ 388.440619][ T54] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 388.441337][ T54] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 388.441579][ T54] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 388.441759][ T54] usb 1-1: config 0 interface 0 has no altsetting 0 [ 388.468128][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 388.468390][ T54] usb 1-1: SerialNumber: syz [ 388.543374][ T54] usb 1-1: config 0 descriptor?? [ 388.670002][ T3804] netlink: 'syz.1.80': attribute type 4 has an invalid length. [ 400.894124][ T3813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3813 comm=syz.1.83 [ 401.327779][ T29] audit: type=1400 audit(400.930:217): avc: denied { ioctl } for pid=3814 comm="syz.1.84" path="socket:[4489]" dev="sockfs" ino=4489 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 401.949502][ T29] audit: type=1400 audit(401.550:218): avc: denied { create } for pid=3816 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 401.980915][ T29] audit: type=1400 audit(401.580:219): avc: denied { ioctl } for pid=3816 comm="syz.1.85" path="socket:[4494]" dev="sockfs" ino=4494 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 401.999807][ T29] audit: type=1400 audit(401.600:220): avc: denied { bind } for pid=3816 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 402.029516][ T29] audit: type=1400 audit(401.630:221): avc: denied { write } for pid=3816 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 402.358506][ T29] audit: type=1400 audit(401.960:222): avc: denied { bind } for pid=3818 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 402.379218][ T29] audit: type=1400 audit(401.980:223): avc: denied { setopt } for pid=3818 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 402.675706][ T74] usb 1-1: USB disconnect, device number 2 [ 403.515759][ T3826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3826 comm=syz.0.88 [ 404.217977][ T29] audit: type=1400 audit(403.820:224): avc: denied { create } for pid=3830 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 404.508009][ T3831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=3831 comm=syz.0.89 [ 405.572886][ T29] audit: type=1400 audit(405.170:225): avc: denied { mount } for pid=3830 comm="syz.0.89" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 406.900245][ T3843] syzkaller0: entered promiscuous mode [ 406.900912][ T3843] syzkaller0: entered allmulticast mode [ 408.387053][ T29] audit: type=1400 audit(407.990:226): avc: denied { read write } for pid=3846 comm="syz.0.94" name="uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 408.414134][ T29] audit: type=1400 audit(408.010:227): avc: denied { open } for pid=3846 comm="syz.0.94" path="/dev/uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 408.454343][ T29] audit: type=1400 audit(408.050:228): avc: denied { create } for pid=3847 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 409.129584][ T3852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'. [ 415.940135][ T3873] pimreg1: tun_chr_ioctl cmd 2147767520 [ 415.946526][ T3873] pimreg1: tun_chr_ioctl cmd 35111 [ 418.174429][ T3882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.179592][ T3882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.494590][ T3882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.500939][ T3882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.297903][ T3892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 420.298663][ T3892] : renamed from hsr0 (while UP) [ 459.818276][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 24s! [syz.1.112:3897] [ 459.818509][ C0] Modules linked in: [ 459.818921][ C0] irq event stamp: 17652 [ 459.820041][ C0] hardirqs last enabled at (17651): [] _raw_spin_unlock_irqrestore+0x80/0xb4 [ 459.821189][ C0] hardirqs last disabled at (17652): [] el1_interrupt+0x28/0x60 [ 459.821480][ C0] softirqs last enabled at (16624): [] __do_softirq+0x14/0x20 [ 459.821755][ C0] softirqs last disabled at (16079): [] __do_softirq+0x14/0x20 [ 459.822981][ C0] CPU: 0 UID: 0 PID: 3897 Comm: syz.1.112 Not tainted syzkaller #0 PREEMPT [ 459.823119][ C0] Hardware name: linux,dummy-virt (DT) [ 459.823485][ C0] pstate: 10000005 (nzcV daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 459.823599][ C0] pc : lock_acquire+0x2e8/0x3fc [ 459.823678][ C0] lr : lock_acquire+0x2c4/0x3fc [ 459.823743][ C0] sp : ffff8000a31d7740 [ 459.823798][ C0] x29: ffff8000a31d77a0 x28: ffff00001622d7c0 x27: 0000000000000000 [ 459.823997][ C0] x26: 0000000000000000 x25: 0000000000000000 x24: ffff800080a06f74 [ 459.824084][ C0] x23: 0000000000000001 x22: 0000000000000000 x21: 0000000000000001 [ 459.824158][ C0] x20: ffff0000169ee3c0 x19: ffff800088365348 x18: 0000000000000000 [ 459.824232][ C0] x17: ffff0000196931d0 x16: 1fffe000032d270e x15: 000000002006b900 [ 459.824306][ C0] x14: 1ffff00011079523 x13: 0000000000010000 x12: 0000000000000000 [ 459.824382][ C0] x11: ffff800088364ed4 x10: 0000000000000000 x9 : 000000000000019f [ 459.824569][ C0] x8 : ffff8000a31d7740 x7 : 00000000c8000000 x6 : 8f5c28f5c28f5c29 [ 459.824648][ C0] x5 : 0000000000000004 x4 : af0e42aa79a570cf x3 : 1fffe00002c45af9 [ 459.824722][ C0] x2 : 0000000000000000 x1 : ffff7fffe1a53000 x0 : 00000000000000c0 [ 459.824912][ C0] Call trace: [ 459.825158][ C0] lock_acquire+0x2e8/0x3fc (P) [ 459.825340][ C0] __might_fault+0xc8/0x130 [ 459.825408][ C0] ____sys_recvmsg+0x2a8/0x690 [ 459.825469][ C0] ___sys_recvmsg+0x13c/0x15c [ 459.825579][ C0] do_recvmmsg+0x200/0x644 [ 459.825630][ C0] __arm64_sys_recvmmsg+0x1b0/0x1f8 [ 459.825683][ C0] invoke_syscall+0x74/0x240 [ 459.825739][ C0] el0_svc_common.constprop.0+0xac/0x230 [ 459.825792][ C0] do_el0_svc+0x40/0x58 [ 459.825843][ C0] el0_svc+0x58/0x21c [ 459.825897][ C0] el0t_64_sync_handler+0xa0/0xe4 [ 459.825951][ C0] el0t_64_sync+0x198/0x19c [ 459.826433][ C0] Sending NMI from CPU 0 to CPUs 1: [ 459.827352][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle_call+0x98/0xd8 [ 459.829758][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 459.835913][ C0] CPU: 0 UID: 0 PID: 3897 Comm: syz.1.112 Tainted: G L syzkaller #0 PREEMPT [ 459.836431][ C0] Tainted: [L]=SOFTLOCKUP [ 459.836652][ C0] Hardware name: linux,dummy-virt (DT) [ 459.836873][ C0] Call trace: [ 459.837085][ C0] show_stack+0x18/0x24 (C) [ 459.837310][ C0] dump_stack_lvl+0x7c/0xb0 [ 459.837589][ C0] dump_stack+0x1c/0x28 [ 459.837793][ C0] vpanic+0x460/0x760 [ 459.837999][ C0] do_panic_on_target_cpu+0x0/0x40 [ 459.838225][ C0] watchdog_timer_fn+0x570/0x5fc [ 459.838452][ C0] __hrtimer_run_queues+0x278/0x89c [ 459.838691][ C0] hrtimer_interrupt+0x340/0xc20 [ 459.838949][ C0] arch_timer_handler_phys+0x48/0x74 [ 459.839234][ C0] handle_percpu_devid_irq+0x218/0x3e0 [ 459.839459][ C0] handle_irq_desc+0xb8/0x104 [ 459.839707][ C0] generic_handle_domain_irq+0x18/0x24 [ 459.839924][ C0] gic_handle_irq+0x44/0xc0 [ 459.840167][ C0] call_on_irq_stack+0x30/0x48 [ 459.840366][ C0] do_interrupt_handler+0x12c/0x150 [ 459.840572][ C0] el1_interrupt+0x3c/0x60 [ 459.840768][ C0] el1h_64_irq_handler+0x18/0x24 [ 459.840980][ C0] el1h_64_irq+0x78/0x7c [ 459.841259][ C0] lock_acquire+0x2e8/0x3fc (P) [ 459.841460][ C0] __might_fault+0xc8/0x130 [ 459.841681][ C0] ____sys_recvmsg+0x2a8/0x690 [ 459.841889][ C0] ___sys_recvmsg+0x13c/0x15c [ 459.842179][ C0] do_recvmmsg+0x200/0x644 [ 459.842410][ C0] __arm64_sys_recvmmsg+0x1b0/0x1f8 [ 459.842638][ C0] invoke_syscall+0x74/0x240 [ 459.842842][ C0] el0_svc_common.constprop.0+0xac/0x230 [ 459.843084][ C0] do_el0_svc+0x40/0x58 [ 459.843356][ C0] el0_svc+0x58/0x21c [ 459.843572][ C0] el0t_64_sync_handler+0xa0/0xe4 [ 459.843788][ C0] el0t_64_sync+0x198/0x19c [ 459.844452][ C0] SMP: stopping secondary CPUs [ 459.848343][ C0] Kernel Offset: disabled [ 459.848702][ C0] CPU features: 0x0,40200002,00340020,00100000,0800821b [ 459.849081][ C0] Memory Limit: none [ 459.849554][ C0] [ 459.849689][ C0] ============================= [ 459.849889][ C0] [ BUG: Invalid wait context ] [ 459.850123][ C0] syzkaller #0 Tainted: G L [ 459.850328][ C0] ----------------------------- [ 459.850513][ C0] syz.1.112/3897 is trying to lock: [ 459.850760][ C0] ffff00000f8b6228 (&k->list_lock){+.+.}-{3:3}, at: bus_to_subsys+0x34/0x13c [ 459.851584][ C0] other info that might help us debug this: [ 459.851843][ C0] context-{2:2} [ 459.852173][ C0] locks held by syz.1.112/3897: 2, last CPU#0: [ 459.852495][ C0] #0: ffff0000169ee3c0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xa4/0x130 [ 459.853030][ C0] #1: ffff8000885d7720 (rcu_read_lock){....}-{1:3}, at: atomic_notifier_call_chain+0x24/0x124 [ 459.853608][ C0] stack backtrace: [ 459.853801][ C0] CPU: 0 UID: 0 PID: 3897 Comm: syz.1.112 Tainted: G L syzkaller #0 PREEMPT [ 459.854148][ C0] Tainted: [L]=SOFTLOCKUP [ 459.854309][ C0] Hardware name: linux,dummy-virt (DT) [ 459.854519][ C0] Call trace: [ 459.854665][ C0] show_stack+0x18/0x24 (C) [ 459.855060][ C0] dump_stack_lvl+0x7c/0xb0 [ 459.855785][ C0] dump_stack+0x1c/0x28 [ 459.856310][ C0] __lock_acquire+0xe60/0x1af0 [ 459.856778][ C0] lock_acquire+0x2b8/0x3fc [ 459.857219][ C0] _raw_spin_lock+0x48/0x60 [ 459.857742][ C0] bus_to_subsys+0x34/0x13c [ 459.858173][ C0] bus_for_each_dev+0x80/0x184 [ 459.858624][ C0] coresight_panic_cb+0x28/0x40 [ 459.859072][ C0] notifier_call_chain+0x10c/0x404 [ 459.859709][ C0] atomic_notifier_call_chain+0x6c/0x124 [ 459.860237][ C0] vpanic+0x50c/0x760 [ 459.860759][ C0] do_panic_on_target_cpu+0x0/0x40 [ 459.861209][ C0] watchdog_timer_fn+0x570/0x5fc [ 459.861690][ C0] __hrtimer_run_queues+0x278/0x89c [ 459.862167][ C0] hrtimer_interrupt+0x340/0xc20 [ 459.862601][ C0] arch_timer_handler_phys+0x48/0x74 [ 459.863081][ C0] handle_percpu_devid_irq+0x218/0x3e0 [ 459.863694][ C0] handle_irq_desc+0xb8/0x104 [ 459.864136][ C0] generic_handle_domain_irq+0x18/0x24 [ 459.864671][ C0] gic_handle_irq+0x44/0xc0 [ 459.865125][ C0] call_on_irq_stack+0x30/0x48 [ 459.865652][ C0] do_interrupt_handler+0x12c/0x150 [ 459.866118][ C0] el1_interrupt+0x3c/0x60 [ 459.866583][ C0] el1h_64_irq_handler+0x18/0x24 [ 459.867027][ C0] el1h_64_irq+0x78/0x7c [ 459.867421][ C0] lock_acquire+0x2e8/0x3fc (P) [ 459.867832][ C0] __might_fault+0xc8/0x130 [ 459.868360][ C0] ____sys_recvmsg+0x2a8/0x690 [ 459.868794][ C0] ___sys_recvmsg+0x13c/0x15c [ 459.869262][ C0] do_recvmmsg+0x200/0x644 [ 459.869696][ C0] __arm64_sys_recvmmsg+0x1b0/0x1f8 [ 459.870188][ C0] invoke_syscall+0x74/0x240 [ 459.870634][ C0] el0_svc_common.constprop.0+0xac/0x230 [ 459.871150][ C0] do_el0_svc+0x40/0x58 [ 459.871604][ C0] el0_svc+0x58/0x21c [ 459.872054][ C0] el0t_64_sync_handler+0xa0/0xe4 [ 459.872524][ C0] el0t_64_sync+0x198/0x19c [ 459.874524][ C0] Rebooting in 86400 seconds..