last executing test programs: 4.76963039s ago: executing program 1 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff3, 0xf}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20000000) 4.343806827s ago: executing program 1 (id=31): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000003f00)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x840) 3.201414173s ago: executing program 0 (id=33): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="8b5a9c7390", 0x5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x48800) shutdown(r0, 0x2) 2.76709702s ago: executing program 1 (id=34): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001400b59527bd7000ffdbdf250a1700fe", @ANYRES32=r1, @ANYBLOB="1400020000000000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 2.76685103s ago: executing program 0 (id=35): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x102, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="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", 0x285}], 0x1}}], 0x1, 0x4) shutdown(r0, 0x1) 2.094786047s ago: executing program 0 (id=36): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 1.979085101s ago: executing program 1 (id=37): r0 = socket$inet_smc(0x2b, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1.590235047s ago: executing program 1 (id=38): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r0, &(0x7f0000008ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/81, 0x51}, 0xc6}], 0x1, 0x40002142, 0x0) 1.472919601s ago: executing program 0 (id=39): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a00)=""/4121, 0x1019}], 0x1}, 0x100004dd}], 0x1, 0x102, 0x0) 980.964491ms ago: executing program 1 (id=40): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) 660.892454ms ago: executing program 0 (id=41): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010a00000000000000000a0000ff"], 0x24}}, 0x0) 0s ago: executing program 0 (id=42): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000a80)="28deeb01d387dbe9abc89b6f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:17389' (ED25519) to the list of known hosts. [ 235.215505][ T30] audit: type=1400 audit(234.670:46): avc: denied { name_bind } for pid=3312 comm="sshd-session" src=30002 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 235.794679][ T30] audit: type=1400 audit(235.250:47): avc: denied { execute } for pid=3313 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 235.808882][ T30] audit: type=1400 audit(235.260:48): avc: denied { execute_no_trans } for pid=3313 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 242.556284][ T30] audit: type=1400 audit(242.010:49): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 242.571212][ T30] audit: type=1400 audit(242.030:50): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 242.617642][ T3313] cgroup: Unknown subsys name 'net' [ 242.651666][ T30] audit: type=1400 audit(242.110:51): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 242.974657][ T3313] cgroup: Unknown subsys name 'cpuset' [ 243.047388][ T3313] cgroup: Unknown subsys name 'rlimit' [ 243.387119][ T30] audit: type=1400 audit(242.840:52): avc: denied { setattr } for pid=3313 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.400045][ T30] audit: type=1400 audit(242.860:53): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 243.407268][ T30] audit: type=1400 audit(242.860:54): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 243.882245][ T3315] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 243.890103][ T30] audit: type=1400 audit(243.350:55): avc: denied { relabelto } for pid=3315 comm="mkswap" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 243.894198][ T30] audit: type=1400 audit(243.350:56): avc: denied { write } for pid=3315 comm="mkswap" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 243.992307][ T30] audit: type=1400 audit(243.450:57): avc: denied { read } for pid=3313 comm="syz-executor" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 243.994823][ T30] audit: type=1400 audit(243.450:58): avc: denied { open } for pid=3313 comm="syz-executor" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 244.020947][ T3313] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 265.228055][ T30] audit: type=1400 audit(264.670:59): avc: denied { execmem } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 265.359274][ T30] audit: type=1400 audit(264.820:60): avc: denied { read } for pid=3318 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 265.363654][ T30] audit: type=1400 audit(264.820:61): avc: denied { open } for pid=3318 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 265.392490][ T30] audit: type=1400 audit(264.850:62): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 265.502270][ T30] audit: type=1400 audit(264.960:63): avc: denied { module_request } for pid=3318 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 265.920186][ T30] audit: type=1400 audit(265.370:64): avc: denied { sys_module } for pid=3318 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 275.221165][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.310867][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.021250][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.046406][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.620406][ T3318] hsr_slave_0: entered promiscuous mode [ 279.633511][ T3318] hsr_slave_1: entered promiscuous mode [ 280.278688][ T3320] hsr_slave_0: entered promiscuous mode [ 280.293211][ T3320] hsr_slave_1: entered promiscuous mode [ 280.303624][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 280.308319][ T3320] Cannot create hsr debugfs directory [ 282.991203][ T30] audit: type=1400 audit(282.450:65): avc: denied { create } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 282.998673][ T30] audit: type=1400 audit(282.460:66): avc: denied { write } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.009223][ T30] audit: type=1400 audit(282.460:67): avc: denied { read } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.053558][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 283.139634][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 283.189222][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 283.302020][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 283.732753][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 283.791187][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 283.877807][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 283.942273][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 288.563946][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.516714][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.134406][ T3318] veth0_vlan: entered promiscuous mode [ 303.288888][ T3318] veth1_vlan: entered promiscuous mode [ 303.924054][ T3320] veth0_vlan: entered promiscuous mode [ 304.119914][ T3318] veth0_macvtap: entered promiscuous mode [ 304.163758][ T3320] veth1_vlan: entered promiscuous mode [ 304.274485][ T3318] veth1_macvtap: entered promiscuous mode [ 305.032464][ T101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.072555][ T101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.073117][ T101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.073478][ T101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.153927][ T3320] veth0_macvtap: entered promiscuous mode [ 305.317918][ T3320] veth1_macvtap: entered promiscuous mode [ 305.591634][ T30] audit: type=1400 audit(305.050:68): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 305.621294][ T30] audit: type=1400 audit(305.080:69): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/syzkaller.HA1mH0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 305.657122][ T30] audit: type=1400 audit(305.120:70): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 305.707314][ T30] audit: type=1400 audit(305.160:71): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/syzkaller.HA1mH0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 305.749875][ T30] audit: type=1400 audit(305.210:72): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/syzkaller.HA1mH0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 305.851089][ T30] audit: type=1400 audit(305.310:73): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 305.909934][ T30] audit: type=1400 audit(305.370:74): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 305.953029][ T30] audit: type=1400 audit(305.410:75): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="gadgetfs" ino=3072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 306.003471][ T30] audit: type=1400 audit(305.460:76): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 306.020551][ T30] audit: type=1400 audit(305.480:77): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 306.443791][ T1711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.449651][ T1711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.517602][ T1711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.518727][ T1711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.539077][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 311.888083][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 311.888989][ T30] audit: type=1400 audit(311.340:86): avc: denied { create } for pid=3475 comm="syz.0.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 312.094270][ T30] audit: type=1400 audit(311.550:87): avc: denied { ioctl } for pid=3475 comm="syz.0.4" path="socket:[4148]" dev="sockfs" ino=4148 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 312.586985][ T30] audit: type=1400 audit(312.050:88): avc: denied { name_bind } for pid=3482 comm="syz.1.6" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 312.603944][ T30] audit: type=1400 audit(312.050:89): avc: denied { node_bind } for pid=3482 comm="syz.1.6" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 313.428053][ T30] audit: type=1400 audit(312.860:90): avc: denied { prog_run } for pid=3485 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 313.474819][ T30] audit: type=1400 audit(312.930:91): avc: denied { map_create } for pid=3485 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 313.511897][ T30] audit: type=1400 audit(312.970:92): avc: denied { map_read map_write } for pid=3485 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 313.537582][ T30] audit: type=1400 audit(312.990:93): avc: denied { bind } for pid=3485 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 313.598980][ T30] audit: type=1400 audit(313.020:94): avc: denied { accept } for pid=3485 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 313.641734][ T30] audit: type=1400 audit(313.090:95): avc: denied { read } for pid=3485 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 317.367049][ T3501] Zero length message leads to an empty skb [ 319.259986][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 319.261552][ T30] audit: type=1400 audit(318.720:106): avc: denied { ioctl } for pid=3511 comm="syz.1.19" path="socket:[4010]" dev="sockfs" ino=4010 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 319.361200][ T3512] bond0: option use_carrier: invalid value (4) [ 319.939188][ T3515] syzkaller0: entered promiscuous mode [ 319.959180][ T3515] syzkaller0: entered allmulticast mode [ 321.829773][ T30] audit: type=1400 audit(321.290:107): avc: denied { create } for pid=3523 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 321.863953][ T30] audit: type=1400 audit(321.320:108): avc: denied { write } for pid=3523 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 322.919000][ T30] audit: type=1400 audit(322.370:109): avc: denied { read } for pid=3528 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 323.882471][ T3534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 325.756818][ T3534] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.883531][ T30] audit: type=1400 audit(325.340:110): avc: denied { bind } for pid=3533 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.918653][ T30] audit: type=1400 audit(325.380:111): avc: denied { setopt } for pid=3533 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.661104][ T3534] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.044353][ T3549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 327.073244][ T3534] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.550306][ T3534] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.070178][ T26] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.136932][ T26] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.198175][ T26] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.256696][ T26] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.713330][ T30] audit: type=1400 audit(328.170:112): avc: denied { create } for pid=3556 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 328.773423][ T30] audit: type=1400 audit(328.230:113): avc: denied { write } for pid=3556 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 329.089408][ T30] audit: type=1400 audit(328.550:114): avc: denied { name_bind } for pid=3560 comm="syz.0.33" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 329.969537][ T3565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.34'. [ 330.270386][ T30] audit: type=1400 audit(329.730:115): avc: denied { create } for pid=3566 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 330.306749][ T30] audit: type=1400 audit(329.760:116): avc: denied { setopt } for pid=3566 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 331.761694][ T3575] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET) [ 332.808156][ T3581] ------------[ cut here ]------------ [ 332.809021][ T3581] verifier bug: not inlined functions bpf_probe_read_kernel_str#115 is missing func(1) [ 332.816058][ T3581] WARNING: CPU: 1 PID: 3581 at kernel/bpf/verifier.c:22838 do_misc_fixups+0xa938/0xcf04 [ 332.820428][ T3581] Modules linked in: [ 332.823429][ T3581] CPU: 1 UID: 0 PID: 3581 Comm: syz.0.42 Not tainted syzkaller #0 PREEMPT [ 332.825241][ T3581] Hardware name: linux,dummy-virt (DT) [ 332.826133][ T3581] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 332.826694][ T3581] pc : do_misc_fixups+0xa938/0xcf04 [ 332.827199][ T3581] lr : do_misc_fixups+0xa938/0xcf04 [ 332.827583][ T3581] sp : ffff8000a1907450 [ 332.827974][ T3581] x29: ffff8000a1907450 x28: ffff000012c08000 x27: ffff000012c0e130 [ 332.828840][ T3581] x26: ffff000012c0e148 x25: ffff000012c08000 x24: 0000000000000000 [ 332.829521][ T3581] x23: ffff000012c0e128 x22: 1ffff00011adda12 x21: ffff80008d6ed090 [ 332.830267][ T3581] x20: ffff800085585740 x19: ffff80008556d6a0 x18: 0000000000000000 [ 332.830913][ T3581] x17: 0000000000000000 x16: ffff00006a0ad4c4 x15: 0000ffffefa6d6f8 [ 332.831598][ T3581] x14: 0000000000000000 x13: 0000000000000000 x12: ffff700014320df3 [ 332.832320][ T3581] x11: 1ffff00014320df2 x10: ffff700014320df2 x9 : dfff800000000000 [ 332.833115][ T3581] x8 : ffff8000a1906f98 x7 : ffff8000a19070c0 x6 : ffff8000a1907010 [ 332.833892][ T3581] x5 : ffff8000a1906ff8 x4 : 0000000000000000 x3 : 1fffe0000d41773e [ 332.834619][ T3581] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000017300000 [ 332.836614][ T3581] Call trace: [ 332.837378][ T3581] do_misc_fixups+0xa938/0xcf04 (P) [ 332.838215][ T3581] bpf_check+0x3c84/0x9508 [ 332.838662][ T3581] bpf_prog_load+0xe2c/0x1b74 [ 332.839112][ T3581] __sys_bpf+0x9c4/0x29c8 [ 332.839514][ T3581] __arm64_sys_bpf+0x70/0xa4 [ 332.839875][ T3581] invoke_syscall+0x6c/0x258 [ 332.840303][ T3581] el0_svc_common.constprop.0+0xac/0x230 [ 332.840713][ T3581] do_el0_svc+0x40/0x58 [ 332.841094][ T3581] el0_svc+0x50/0x1a0 [ 332.841439][ T3581] el0t_64_sync_handler+0xa0/0xe4 [ 332.841845][ T3581] el0t_64_sync+0x198/0x19c [ 332.842556][ T3581] irq event stamp: 234 [ 332.842939][ T3581] hardirqs last enabled at (233): [] finish_task_switch.isra.0+0x1a8/0x854 [ 332.843663][ T3581] hardirqs last disabled at (234): [] el1_brk64+0x1c/0x48 [ 332.844269][ T3581] softirqs last enabled at (190): [] handle_softirqs+0x88c/0xdb4 [ 332.845001][ T3581] softirqs last disabled at (145): [] __do_softirq+0x14/0x20 [ 332.845955][ T3581] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 334.838081][ T1142] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.042038][ T1142] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.183317][ T1142] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.423199][ T1142] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.110044][ T30] audit: type=1400 audit(335.570:117): avc: denied { read } for pid=3163 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 338.790851][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.852630][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.970436][ T1142] bond0 (unregistering): Released all slaves [ 339.414459][ T1142] hsr_slave_0: left promiscuous mode [ 339.437130][ T1142] hsr_slave_1: left promiscuous mode [ 339.573087][ T1142] veth1_macvtap: left promiscuous mode [ 339.579511][ T1142] veth0_macvtap: left promiscuous mode [ 339.582263][ T1142] veth1_vlan: left promiscuous mode [ 339.584166][ T1142] veth0_vlan: left promiscuous mode [ 346.513422][ T1142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.892320][ T1142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.371314][ T1142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.771129][ T1142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.241270][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.323881][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.402209][ T1142] bond0 (unregistering): Released all slaves [ 352.871980][ T1142] hsr_slave_0: left promiscuous mode [ 352.882307][ T1142] hsr_slave_1: left promiscuous mode [ 352.942614][ T1142] veth1_macvtap: left promiscuous mode [ 352.944298][ T1142] veth0_macvtap: left promiscuous mode [ 352.947183][ T1142] veth1_vlan: left promiscuous mode [ 352.948710][ T1142] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 18:31:30 Registers: info registers vcpu 0 CPU#0 PC=ffff80008031aae4 X00=ffff80008d1a1000 X01=ffff0000158ebc80 X02=0000000000000000 X03=0000000000000000 X04=0000000000000000 X05=00000000000000c8 X06=ffff0000158ec7d8 X07=ffff80008d1a1180 X08=0000000000000000 X09=ffff8000897e6000 X10=ffff0000158ec710 X11=0000000000000002 X12=0000000000000006 X13=0000000000000000 X14=1fffe00003d08c65 X15=ffff00001f091000 X16=0000000000000000 X17=1fffe00003d08b78 X18=ffff00001f091010 X19=ffff8000873101e0 X20=ffff000014afa600 X21=ffff00001e990a00 X22=ffff000012a51bd8 X23=dfff800000000000 X24=ffff00001e990ac8 X25=ffff00001e9e51e0 X26=ffff00001e990ad0 X27=0000000000000000 X28=ffff00001e9e5000 X29=ffff8000800066d0 X30=ffff8000805535cc SP=ffff800080006700 PSTATE=000000c5 ---- EL1h FPCR=00000000 FPSR=00000000 Q00=2525252525252525:2525252525252525 Q01=65642f000a732520:7325207334362e25 Q02=656820747563205b:2d2d2d2d2d2d2d2d Q03=000000ff0000ff00:00ff0000000000ff Q04=0000000000000000:000f00f00f00000f Q05=2d2d2d2d2d2d2d2d:2d5d206572656820 Q06=7265766f7466656c:2073657479622038 Q07=6120676e69737261:7020726574666120 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000fffff2f83830:0000fffff2f83830 Q17=ffffff80ffffffd0:0000fffff2f83800 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff80008031daf4 X00=00000000000003c0 X01=ffff7fffe3003000 X02=0000000000000000 X03=1fffe00002e60001 X04=0000000000004160 X05=0000000000008000 X06=ffff000017300a90 X07=d75b34a72fa97c66 X08=0000000000000001 X09=ffff8000897e6000 X10=ffff000017300a90 X11=0000000000000002 X12=000000000000015f X13=0000000000008000 X14=0000000000000000 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=ffff8000870aa548 X20=ffff800087220c90 X21=0000000000000002 X22=0000000000000001 X23=0000000000000000 X24=0000000000000000 X25=ffff8000803429f4 X26=0000000000000000 X27=00000000000003c0 X28=ffff8000a1906c10 X29=ffff8000a1906c30 X30=ffff80008031dad4 SP=ffff8000a1906c10 PSTATE=100003c5 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=2525252525252525:2525252525252525 Q01=000000756c6c2570:6f6f6c2f7665642f Q02=0000000000000000:ffffffff00000000 Q03=ffffff000000ff00:0000000000000000 Q04=0000000000000000:fff000f000000000 Q05=bb448243222c92da:e3914ed4e87380b0 Q06=6edc4d3a2914b135:d8e9c869e2695c88 Q07=b20fae707afde253:388e9c6c4fa85ca0 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffefa6d710:0000ffffefa6d710 Q17=ffffff80ffffffd0:0000ffffefa6d6e0 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000