last executing test programs: 1.201906969s ago: executing program 0 (id=1095): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b0000080039503230"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0xb, 0x0, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000340)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400), 0x4, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./dev/sda\x00', 0x185042, 0xc2) write$P9_RUNLINKAT(r3, &(0x7f0000001180)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000b00)='.\x00', 0x2) 1.17771273s ago: executing program 1 (id=1097): syz_emit_ethernet(0x36, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast, {[@generic={0x7, 0x2}]}}, {0x4000, 0x883e, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x7, 0x100}}}}}}}, 0x0) 1.17679374s ago: executing program 0 (id=1099): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140), 0x14) 1.142491101s ago: executing program 1 (id=1100): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x10, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000003000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000000000000bf090000000000005509010000000000950000000000000085000000b5000000bf91000000000000b7ccb800000084"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000cc0)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d00)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000d40)="0b0312212e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000d80)={0x11, 0x86dd, r2}, 0x14) 1.069517613s ago: executing program 0 (id=1104): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000300), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x1) 1.049974624s ago: executing program 1 (id=1108): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd86", 0xc5}, {&(0x7f0000000f00)="6d64a646aa4478c1e8a851dec8692ba396db577c6e0e46500fad96a2126c6bba92438c939b07bbc91cf6813b88114dc09d80d9933eabd81d56b754cafecd38bb1286f6e403b42a95f2a2d6fb9b245f149b5925aef85b025a34f647c4bb1ab958f70d551d6bbf9f855f491355ad8407910c8e6f2ac27b8e32f6982b6b8581f7807c254b02bad75d7f39d18a1f4d13bf65ff771c3713ece67d8b5a31a87b79042653014058d8bc156784a9ffab23babe007502", 0xb2}], 0x2}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000003c0)="3db2c5df06000000e1df44248424f7d7c157be36797b8dc68dcad3a1be90c10f7b36b3c5f8616fed7c240fa05ef1cbe839855bd165fd0264f104b776a9594760fb45c32805efeab2ab78ebc8afb9030830b6452cd9184f05a3a8857f3c6f1e0cf96a5884c5c1867c29be406c3230f39d0aeec83d09", 0x75}, {&(0x7f0000001700)="a6a7d88b9e8991bbf4ce36dbb6b207cc8966cad0e944869ec041978d76fb6d3fd0cbb308d0c5ead635a622103d7079b4621869deb42dfeb05ec147b40070e5fda4a702ad5b265274d48ba4db048a69765d2df297c9ecdd67572167c5115eb0f357f1e0cd06c821e94621cec7f0b12dde039e2908868caf43a8030fe8ab8f7f17e8ceb59ba4eff640edd42dab496d4117b734187e6080ae7da0de94955c805a67b099c8123f472eb9a9729e67e004c1304a24fe954c8a5929301e074f8491e5baace6d2bd6b86f9ea3aabac2e52b07d433d8203b01d5852fcbaf8312045015a7b0eeb88b7b656ed0655cd899ad88b09c026f958ba25dd66fe2fad3e0efcf557a27d5908cc78d6345ec5994ddcdbd79b25b934b43cea47bd55014fed37a991b911b73886da7d526686a22b0f8b03694a6648d0b755118e9620aa5fe5f5e0256c162347ee38bea53f1b42d883a72f0fed49d8bd65dfa090ca1989839e66b5c7cc9927663e790f6b7700719969e7a51dd5314448a11ce5f477902829ee5cd86451651c864b8fd44a00fb5dd75e358f8512aec275e4be412ffa3bee5669874d6c5845bad1db96f4e4731cd12812b845a473d7e0045252d4313ac563484998ae21f302987e69ba12ee9b7985c6698e77370794fc9f722ee7c3761a854d7c6ae94fddb827cb8fd6611916d35a73a129af402e6b643311f1f4681bcd5535e1255c6ecf2d444af10dbc7c9b9c77ab3a059bc7c9f8610d1a1848ae8af95726083b5800e63b84aaff9d7570a28ebbff525229ae4830fc80e740de86821cccce0528db090df3ecbf0d27741d8801792e24a67b5d4e2b5790791e2c5cb02ee37fe26caaeb8c94f0b1480469324bbfe8bf5e5419bd935600f2", 0x272}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 882.871468ms ago: executing program 2 (id=1118): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 825.469379ms ago: executing program 2 (id=1120): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x12, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000040), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/1, 0x1f80}], 0x310, &(0x7f0000000240)=[{&(0x7f0000000280)=""/1, 0x2034afa5}], 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {}, {0xa, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c040}, 0x4040050) 361.90029ms ago: executing program 2 (id=1139): socket$netlink(0x10, 0x3, 0x0) r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_make_request/interval\x00', 0x1, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000400)) preadv(r2, &(0x7f0000001ac0)=[{&(0x7f0000000140)=""/245, 0xf5}, {&(0x7f0000000a00)=""/4096, 0x1000}, {0x0}], 0x3, 0x40000004, 0x5) syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x862b01) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000001cc0)={0x1, 'ip6erspan0\x00', {}, 0x4}) syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x862b01) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000001b40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b00)={&(0x7f00000008c0)=@newlinkprop={0x44, 0x6c, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x400, 0x40000}, [@IFLA_MAP={0x24, 0xe, {0x81, 0x3, 0x7, 0x6, 0xe8, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x0, 0x0}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000080000005a000000000000219500000000000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x19, 0x4, &(0x7f0000001c40)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='atkbd', 0x5) flock(r0, 0xd) 318.002082ms ago: executing program 4 (id=1134): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x20, 0x0, 0x129, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) 317.666091ms ago: executing program 2 (id=1135): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffd, '\x00', r1, 0x0}, 0x50) 289.154023ms ago: executing program 2 (id=1137): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 288.906103ms ago: executing program 4 (id=1138): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0xb, 0x0, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000340)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400), 0x4, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./dev/sda\x00', 0x185042, 0xc2) write$P9_RUNLINKAT(r3, &(0x7f0000001180)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000b00)='.\x00', 0x2) 288.633412ms ago: executing program 2 (id=1140): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x8, &(0x7f0000006680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) syz_usb_connect(0x2, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004803ac20c2154600786c010203010902"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0xfffffffffffffe86, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x2c000680) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 286.874243ms ago: executing program 3 (id=1148): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4000) 286.621103ms ago: executing program 4 (id=1149): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1f, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d00)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 205.947374ms ago: executing program 1 (id=1141): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x12, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000040), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/1, 0x1f80}], 0x310, &(0x7f0000000240)=[{&(0x7f0000000280)=""/1, 0x2034afa5}], 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {}, {0xa, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c040}, 0x4040050) 205.868225ms ago: executing program 3 (id=1142): madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x65) 205.735414ms ago: executing program 4 (id=1143): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 204.921285ms ago: executing program 0 (id=1153): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4000) 196.813504ms ago: executing program 3 (id=1144): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 37.383199ms ago: executing program 1 (id=1145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000005000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000e00)="5e855537814c29f9c13c138a1a2357d6177ca66f91bc643a8381fae44497f8", &(0x7f0000000cc0), 0xf83c, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d00)={r0, &(0x7f0000000d40), 0x0}, 0x20) 37.204929ms ago: executing program 3 (id=1146): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x670, 0x5, 0x410, 0x218, 0x0, 0xfeffffff, 0xf0, 0xf0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x2eb548476ba4c1a5, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x4, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000]}}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x4]}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @local, @loopback, @port=0x4e24, @gre_key=0xbe9}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @local, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 36.992279ms ago: executing program 4 (id=1147): socket$netlink(0x10, 0x3, 0x0) r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_make_request/interval\x00', 0x1, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000400)) preadv(r2, &(0x7f0000001ac0)=[{&(0x7f0000000140)=""/245, 0xf5}, {&(0x7f0000001a00)=""/159, 0x9f}], 0x2, 0x40000004, 0x5) syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x862b01) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000001cc0)={0x1, 'ip6erspan0\x00', {}, 0x4}) syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x862b01) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000001b40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b00)={&(0x7f00000008c0)=@newlinkprop={0x44, 0x6c, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x400, 0x40000}, [@IFLA_MAP={0x24, 0xe, {0x81, 0x3, 0x7, 0x6, 0xe8, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x0, 0x0}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000080000005a000000000000219500000000000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x19, 0x4, &(0x7f0000001c40)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='atkbd', 0x5) flock(r0, 0xd) 32.889539ms ago: executing program 0 (id=1158): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) 4.10509ms ago: executing program 3 (id=1150): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='27', 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) 3.734419ms ago: executing program 3 (id=1151): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000340)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400), 0x4, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./dev/sda\x00', 0x185042, 0xc2) write$P9_RUNLINKAT(r3, &(0x7f0000001180)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000b00)='.\x00', 0x2) 3.453719ms ago: executing program 0 (id=1152): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 2.352499ms ago: executing program 4 (id=1162): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="18e9a2238354e533a2000000000000000000000002000000c60001002500000085100000010000009500000000000000184000008200"/63], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000002c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000001000000b703000000000000b7040000000000008500000032000000b70000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r4, &(0x7f0000000680), &(0x7f00000006c0)=@tcp=r2}, 0x20) sendto(r3, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x80c00, 0x0) fcntl$notify(r6, 0x402, 0x34) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='sched\x00') copy_file_range(r7, 0x0, r7, &(0x7f0000000480)=0xfffffffffffffff7, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) 0s ago: executing program 1 (id=1154): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1f, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d00)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 15.068860][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 15.068873][ T30] audit: type=1400 audit(1792160515.648:59): avc: denied { transition } for pid=224 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.079499][ T30] audit: type=1400 audit(1792160515.648:60): avc: denied { noatsecure } for pid=224 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.086987][ T30] audit: type=1400 audit(1792160515.648:61): avc: denied { write } for pid=224 comm="sh" path="pipe:[14086]" dev="pipefs" ino=14086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.105399][ T30] audit: type=1400 audit(1792160515.648:62): avc: denied { rlimitinh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.124137][ T30] audit: type=1400 audit(1792160515.648:63): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. [ 22.644209][ T30] audit: type=1400 audit(1792160523.218:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.647681][ T278] cgroup: Unknown subsys name 'net' [ 22.667004][ T30] audit: type=1400 audit(1792160523.218:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.694161][ T30] audit: type=1400 audit(1792160523.248:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.694535][ T278] cgroup: Unknown subsys name 'devices' [ 22.838908][ T278] cgroup: Unknown subsys name 'hugetlb' [ 22.844615][ T278] cgroup: Unknown subsys name 'rlimit' [ 22.984015][ T30] audit: type=1400 audit(1792160523.558:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.007658][ T30] audit: type=1400 audit(1792160523.558:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.032406][ T30] audit: type=1400 audit(1792160523.558:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.060314][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.069139][ T30] audit: type=1400 audit(1792160523.648:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.094545][ T30] audit: type=1400 audit(1792160523.648:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.114342][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.120746][ T30] audit: type=1400 audit(1792160523.688:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.154436][ T30] audit: type=1400 audit(1792160523.688:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.058359][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.065430][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.072895][ T286] device bridge_slave_0 entered promiscuous mode [ 24.082069][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.089139][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.096547][ T286] device bridge_slave_1 entered promiscuous mode [ 24.112684][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.119738][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.127146][ T287] device bridge_slave_0 entered promiscuous mode [ 24.136432][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.143646][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.151061][ T287] device bridge_slave_1 entered promiscuous mode [ 24.176022][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.183357][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.190852][ T289] device bridge_slave_0 entered promiscuous mode [ 24.199299][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.206350][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.213899][ T289] device bridge_slave_1 entered promiscuous mode [ 24.260533][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.267711][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.275062][ T288] device bridge_slave_0 entered promiscuous mode [ 24.305450][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.312554][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.320239][ T288] device bridge_slave_1 entered promiscuous mode [ 24.340894][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.348080][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.355508][ T290] device bridge_slave_0 entered promiscuous mode [ 24.365434][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.372505][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.379969][ T290] device bridge_slave_1 entered promiscuous mode [ 24.446473][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.453685][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.460982][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.468025][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.558064][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.565228][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.572546][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.579591][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.592584][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.599655][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.606970][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.614007][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.628240][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.635515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.643874][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.651373][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.658752][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.665860][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.675059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.682453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.704827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.713004][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.720065][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.736485][ T286] device veth0_vlan entered promiscuous mode [ 24.751308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.759735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.768213][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.775597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.783227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.791320][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.820895][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.828786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.836867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.844542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.852114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.860410][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.867475][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.875862][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.884191][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.891238][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.910021][ T286] device veth1_macvtap entered promiscuous mode [ 24.918458][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.926001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.934254][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.941280][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.948845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.957501][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.964528][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.975095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.996406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.004103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.012644][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.021853][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.030132][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.037220][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.044689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.052861][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.059882][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.067285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.075135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.083130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.092393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.113549][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.122459][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.130769][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.137829][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.145994][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.154389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.162528][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.169611][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.177273][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.185253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.193274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.207046][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.215426][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.223774][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.232457][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.241015][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 25.251034][ T287] device veth0_vlan entered promiscuous mode [ 25.269499][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.278412][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.286718][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.295161][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.303923][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.312554][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.320789][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.329236][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.337712][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.345133][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.359583][ T288] device veth0_vlan entered promiscuous mode [ 25.367881][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.375790][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.383938][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.392417][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.400967][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.408481][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.419689][ T289] device veth0_vlan entered promiscuous mode [ 25.430928][ T287] device veth1_macvtap entered promiscuous mode [ 25.441607][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.450017][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.458464][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.466634][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.475164][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.482967][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.490518][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.502595][ T288] device veth1_macvtap entered promiscuous mode [ 25.512930][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.521144][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.529443][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.540795][ T289] device veth1_macvtap entered promiscuous mode [ 25.547650][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.555726][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.563968][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.571678][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.580137][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.597099][ T307] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.605686][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.613952][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.622403][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.630686][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.639104][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.647711][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.655936][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.664184][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.672634][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.680663][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.690811][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.698296][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.706863][ T290] device veth0_vlan entered promiscuous mode [ 25.720185][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.728947][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.752127][ T290] device veth1_macvtap entered promiscuous mode [ 25.759478][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.768036][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.776496][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.785791][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.794066][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.808810][ T318] loop3: detected capacity change from 0 to 1024 [ 25.821767][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.830520][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.848721][ T318] ======================================================= [ 25.848721][ T318] WARNING: The mand mount option has been deprecated and [ 25.848721][ T318] and is ignored by this kernel. Remove the mand [ 25.848721][ T318] option from the mount to silence this warning. [ 25.848721][ T318] ======================================================= [ 25.887297][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.895576][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.947387][ T318] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 25.962581][ T337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=337 comm=syz.0.8 [ 25.967921][ T318] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.007006][ T307] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.017733][ T337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=337 comm=syz.0.8 [ 26.026546][ T318] process 'syz.3.7' launched './file1' with NULL argv: empty string added [ 26.051297][ T318] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.7: corrupted xattr block 128 [ 26.063646][ T318] EXT4-fs (loop3): Remounting filesystem read-only [ 26.071149][ T318] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 26.080999][ T318] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.7: corrupted xattr block 128 [ 26.093257][ T318] EXT4-fs (loop3): Remounting filesystem read-only [ 26.100171][ T318] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 26.109838][ T318] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.7: corrupted xattr block 128 [ 26.112760][ T351] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.123230][ T318] EXT4-fs (loop3): Remounting filesystem read-only [ 26.144350][ T318] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 26.155099][ T318] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.7: corrupted xattr block 128 [ 26.178498][ T318] EXT4-fs (loop3): Remounting filesystem read-only [ 26.187347][ T318] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 26.197472][ T318] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.7: corrupted xattr block 128 [ 26.212215][ T352] loop0: detected capacity change from 0 to 512 [ 26.218191][ T318] EXT4-fs (loop3): Remounting filesystem read-only [ 26.229415][ T318] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 26.235111][ T355] loop4: detected capacity change from 0 to 512 [ 26.256953][ T335] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 26.272838][ T307] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.287579][ T355] FAT-fs (loop4): Unrecognized mount option "ÿ0xffffffffffffffffÿÿÿÿÿÿÿÿ" or missing value [ 26.307144][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.317143][ T307] usb 2-1: Product: syz [ 26.327967][ T335] EXT4-fs (loop3): Remounting filesystem read-only [ 26.377263][ T307] usb 2-1: Manufacturer: syz [ 26.381912][ T307] usb 2-1: SerialNumber: syz [ 26.387059][ T351] loop0: detected capacity change from 0 to 1024 [ 26.400505][ T351] EXT4-fs (loop0): Ignoring removed bh option [ 26.433905][ T351] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #2: comm syz.0.8: pblk 0 bad header/extent: invalid magic - magic f309, entries 1, max 4(0), depth 0(0) [ 26.454434][ T351] EXT4-fs (loop0): get root inode failed [ 26.464325][ T351] EXT4-fs (loop0): mount failed [ 26.574858][ T355] mmap: syz.4.9 (355) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 26.826241][ T351] loop0: detected capacity change from 0 to 512 [ 26.883407][ T351] EXT4-fs (loop0): Mount option "noload" incompatible with ext2 [ 27.414001][ T385] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 28.028111][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 28.028126][ T30] audit: type=1400 audit(1792160528.608:149): avc: denied { unmount } for pid=402 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 28.169937][ T30] audit: type=1400 audit(1792160528.648:150): avc: denied { create } for pid=404 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 28.182924][ T307] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 28.227292][ T307] cdc_ncm 2-1:1.0: bind() failure [ 28.233372][ T307] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 28.269474][ T307] cdc_ncm 2-1:1.1: bind() failure [ 28.278761][ T307] usb 2-1: USB disconnect, device number 2 [ 28.328240][ T30] audit: type=1400 audit(1792160528.728:151): avc: denied { create } for pid=406 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.386685][ T419] SELinux: security_context_str_to_sid(Eá…) failed for (dev ?, type ?) errno=-22 [ 28.400902][ T30] audit: type=1400 audit(1792160528.948:152): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 28.463860][ T419] SELinux: security_context_str_to_sid(Eá…) failed for (dev proc, type proc) errno=-22 [ 28.599709][ T30] audit: type=1400 audit(1792160529.178:153): avc: denied { create } for pid=436 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.749363][ T30] audit: type=1400 audit(1792160529.328:154): avc: denied { read write } for pid=443 comm="syz.3.39" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.779028][ T30] audit: type=1400 audit(1792160529.348:155): avc: denied { audit_read } for pid=433 comm="syz.0.37" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.843173][ T30] audit: type=1400 audit(1792160529.348:156): avc: denied { mount } for pid=433 comm="syz.0.37" name="/" dev="configfs" ino=13146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 28.904399][ T30] audit: type=1400 audit(1792160529.348:157): avc: denied { search } for pid=433 comm="syz.0.37" name="/" dev="configfs" ino=13146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 28.926546][ T30] audit: type=1400 audit(1792160529.348:158): avc: denied { setattr } for pid=433 comm="syz.0.37" name="/" dev="configfs" ino=13146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 29.096950][ T307] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 29.787497][ T465] netlink: 'syz.2.45': attribute type 4 has an invalid length. [ 29.795167][ T465] netlink: 17 bytes leftover after parsing attributes in process `syz.2.45'. [ 29.997203][ T307] usb 2-1: config 0 has no interfaces? [ 30.207068][ T307] usb 2-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=6c.78 [ 30.231455][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.269968][ T307] usb 2-1: Product: syz [ 30.274175][ T307] usb 2-1: Manufacturer: syz [ 30.300227][ T307] usb 2-1: SerialNumber: syz [ 30.327673][ T307] usb 2-1: config 0 descriptor?? [ 30.585475][ T307] usb 2-1: USB disconnect, device number 3 [ 30.998101][ T615] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 31.378696][ T635] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input4 [ 31.493990][ T701] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 31.648517][ T735] ptp ptp0: new virtual clock ptp1 [ 31.660738][ T735] ptp ptp0: guarantee physical clock free running [ 31.738616][ T710] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 31.921747][ T798] ptp ptp0: guarantee physical clock free running [ 32.115806][ T848] ------------[ cut here ]------------ [ 32.121473][ T793] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 32.131314][ T848] trace type BPF program uses run-time allocation [ 32.138117][ T848] WARNING: CPU: 0 PID: 848 at kernel/bpf/verifier.c:11749 check_map_prog_compatibility+0x6cc/0x870 [ 32.159363][ T848] Modules linked in: [ 32.168980][ T848] CPU: 0 PID: 848 Comm: syz.3.221 Not tainted syzkaller #0 [ 32.192338][ T848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 32.217746][ T848] RIP: 0010:check_map_prog_compatibility+0x6cc/0x870 [ 32.242510][ T848] Code: ee ff 48 c7 c6 a0 5a 48 85 4c 8b 65 d0 e9 f9 fc ff ff e8 87 21 ee ff c6 05 a8 7d 6a 05 01 48 c7 c7 00 57 48 85 e8 d4 f3 2f 03 <0f> 0b e9 83 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a7 f9 ff [ 32.272021][ T866] ptp ptp0: guarantee physical clock free running [ 32.287331][ T848] RSP: 0018:ffffc90000b67450 EFLAGS: 00010246 [ 32.303842][ T848] RAX: 4c34ac6c6503c600 RBX: 0000000000000001 RCX: 0000000000080000 [ 32.326269][ T848] RDX: ffffc90002760000 RSI: 00000000000026c2 RDI: 00000000000026c3 [ 32.341386][ T848] RBP: ffffc90000b67490 R08: ffff8881f7032eff R09: 1ffff1103ee065df [ 32.350002][ T848] R10: dffffc0000000000 R11: ffffed103ee065e0 R12: ffff888116278000 [ 32.373208][ T848] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff888117791800 [ 32.386343][ T848] FS: 00007fcb67e2a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.399515][ T848] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.417582][ T848] CR2: 0000001b2eb23ffc CR3: 0000000134cd8000 CR4: 00000000003526b0 [ 32.427719][ T881] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 32.438179][ T848] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.449765][ T848] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.462554][ T848] Call Trace: [ 32.465945][ T848] [ 32.469046][ T881] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 32.470459][ T848] resolve_pseudo_ldimm64+0x617/0x10f0 [ 32.482975][ T848] ? check_attach_btf_id+0xd80/0xd80 [ 32.489098][ T881] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 32.494943][ T848] ? __mark_reg_known+0x1b0/0x1b0 [ 32.504388][ T881] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 32.513938][ T881] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 32.515075][ T848] ? security_capable+0x87/0xb0 [ 32.536253][ T881] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 32.544966][ T848] bpf_check+0x2cfc/0xf750 [ 32.549823][ T881] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 32.557469][ T848] ? is_bpf_text_address+0x177/0x190 [ 32.563954][ T848] ? is_bpf_text_address+0x177/0x190 [ 32.569461][ T881] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 32.574217][ T848] ? bpf_get_btf_vmlinux+0x70/0x70 [ 32.584111][ T881] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 32.592500][ T848] ? unwind_get_return_address+0x4d/0x90 [ 32.598297][ T848] ? stack_trace_save+0xf0/0xf0 [ 32.605185][ T881] pit: kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 32.607080][ T848] ? arch_stack_walk+0xee/0x140 [ 32.618819][ T848] ? stack_trace_save+0xa6/0xf0 [ 32.645194][ T848] ? __stack_depot_save+0x34/0x480 [ 32.663205][ T848] ? __kasan_slab_alloc+0x69/0xe0 [ 32.691154][ T848] ? __kasan_kmalloc+0xe6/0x100 [ 32.696112][ T848] ? __kasan_kmalloc+0xd4/0x100 [ 32.701723][ T848] ? kmem_cache_alloc_trace+0x119/0x270 [ 32.721137][ T848] ? selinux_bpf_prog_alloc+0x51/0x140 [ 32.729880][ T848] ? security_bpf_prog_alloc+0x62/0x90 [ 32.757215][ T848] ? bpf_prog_load+0x9d4/0x1620 [ 32.762574][ T848] ? __sys_bpf+0x51d/0x7d0 [ 32.772879][ T848] ? __x64_sys_bpf+0x7c/0x90 [ 32.779837][ T848] ? x64_sys_call+0x4b9/0x9a0 [ 32.789819][ T848] ? do_syscall_64+0x4c/0xa0 [ 32.799917][ T848] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.813054][ T848] ? check_stack_object+0x81/0x150 [ 32.824905][ T848] ? memset+0x35/0x40 [ 32.831223][ T848] ? bpf_obj_name_cpy+0x193/0x1e0 [ 32.844413][ T848] bpf_prog_load+0x10c5/0x1620 [ 32.849793][ T848] ? __anon_inode_getfd+0x35c/0x3d0 [ 32.855632][ T848] ? map_freeze+0x370/0x370 [ 32.860466][ T848] ? selinux_bpf+0xc7/0xf0 [ 32.864986][ T848] ? security_bpf+0x82/0xa0 [ 32.870038][ T848] __sys_bpf+0x51d/0x7d0 [ 32.874398][ T848] ? bpf_link_show_fdinfo+0x330/0x330 [ 32.885671][ T848] ? __kasan_check_write+0x14/0x20 [ 32.891147][ T848] ? switch_fpu_return+0x15d/0x2c0 [ 32.896370][ T848] __x64_sys_bpf+0x7c/0x90 [ 32.901085][ T848] x64_sys_call+0x4b9/0x9a0 [ 32.915620][ T848] do_syscall_64+0x4c/0xa0 [ 32.922172][ T848] ? clear_bhb_loop+0x50/0xa0 [ 32.927909][ T848] ? clear_bhb_loop+0x50/0xa0 [ 32.937990][ T848] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.943973][ T848] RIP: 0033:0x7fcb693d1559 [ 32.954372][ T848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.977255][ T913] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 33.010022][ T848] RSP: 002b:00007fcb67e2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 33.030728][ T848] RAX: ffffffffffffffda RBX: 00007fcb69658fa0 RCX: 00007fcb693d1559 [ 33.039804][ T848] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 33.048484][ T848] RBP: 00007fcb694688b0 R08: 0000000000000000 R09: 0000000000000000 [ 33.056539][ T848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.064742][ T848] R13: 00007fcb69659038 R14: 00007fcb69658fa0 R15: 00007ffd9b8f6508 [ 33.072904][ T848] [ 33.075999][ T848] ---[ end trace ca32107ed6727980 ]--- [ 33.121529][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 33.121547][ T30] audit: type=1400 audit(1792160533.688:182): avc: denied { setopt } for pid=950 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.297332][ T30] audit: type=1400 audit(1792160533.878:183): avc: denied { relabelfrom } for pid=995 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 33.322171][ T30] audit: type=1400 audit(1792160533.898:184): avc: denied { relabelto } for pid=995 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 33.749708][ T1134] overlayfs: failed to clone upperpath [ 33.852181][ T30] audit: type=1400 audit(1792160534.428:185): avc: denied { bind } for pid=1158 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.874336][ T1159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 33.896349][ T30] audit: type=1400 audit(1792160534.448:186): avc: denied { write } for pid=1158 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.044453][ T30] audit: type=1400 audit(1792160534.618:187): avc: denied { mount } for pid=1200 comm="syz.0.391" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 34.072740][ T1205] cgroup: Invalid name [ 34.077275][ T30] audit: type=1400 audit(1792160534.648:188): avc: denied { mounton } for pid=1204 comm="syz.0.393" path="/91/file0" dev="tmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.138893][ T1218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.399'. [ 34.158949][ T1220] overlayfs: failed to clone lowerpath [ 34.165579][ T1220] overlayfs: failed to clone lowerpath [ 34.255506][ T1245] loop2: detected capacity change from 0 to 128 [ 34.337874][ T1245] FAT-fs (loop2): Directory bread(block 524322) failed [ 34.345124][ T1245] FAT-fs (loop2): Directory bread(block 524323) failed [ 34.352208][ T1245] FAT-fs (loop2): Directory bread(block 524324) failed [ 34.359316][ T1245] FAT-fs (loop2): Directory bread(block 524325) failed [ 34.367882][ T1245] FAT-fs (loop2): Directory bread(block 524326) failed [ 34.380946][ T1245] FAT-fs (loop2): Directory bread(block 524327) failed [ 34.388156][ T1245] FAT-fs (loop2): Directory bread(block 524328) failed [ 34.395486][ T1245] FAT-fs (loop2): Directory bread(block 524329) failed [ 34.403240][ T30] audit: type=1400 audit(1792160534.978:189): avc: denied { mount } for pid=1244 comm="syz.2.412" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.425150][ T1258] device batadv_slave_0 entered promiscuous mode [ 34.432808][ T1245] FAT-fs (loop2): Directory bread(block 524322) failed [ 34.439855][ T1245] FAT-fs (loop2): Directory bread(block 524323) failed [ 34.442732][ T1257] device batadv_slave_0 left promiscuous mode [ 34.458555][ T30] audit: type=1400 audit(1792160535.038:190): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.543908][ T30] audit: type=1400 audit(1792160535.118:191): avc: denied { bind } for pid=1275 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.720445][ T1305] ip_tables: iptables: counters copy to user failed while replacing table [ 34.736444][ T1308] fuse: Bad value for 'fd' [ 34.775157][ T1315] 9pnet: Insufficient options for proto=fd [ 34.795721][ T1319] 9p: Unknown Cache mode readahead [ 34.893423][ T1344] 9pnet: Insufficient options for proto=fd [ 34.900033][ T1346] fuse: Bad value for 'fd' [ 34.928498][ T1352] capability: warning: `syz.3.463' uses deprecated v2 capabilities in a way that may be insecure [ 34.995302][ T1372] 9pnet: Insufficient options for proto=fd [ 35.447862][ T1464] overlayfs: failed to clone upperpath [ 35.511607][ T1435] syz.1.499 (1435) used greatest stack depth: 21224 bytes left [ 35.513449][ T1474] 9pnet: Insufficient options for proto=fd [ 35.565931][ T1482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.526'. [ 35.628872][ T1498] 9pnet: Insufficient options for proto=fd [ 35.652347][ T1502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'. [ 35.698550][ T1514] netlink: 'syz.1.541': attribute type 28 has an invalid length. [ 35.747980][ T1523] 9pnet: Insufficient options for proto=fd [ 35.948154][ T1516] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 36.002439][ T1592] Zero length message leads to an empty skb [ 36.065836][ T1608] VFS: Mount too revealing [ 36.070518][ T1613] cgroup: Unknown subsys name 'favordynmods' [ 36.133607][ T1626] fuse: Bad value for 'fd' [ 36.225663][ T1646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.605'. [ 36.308204][ T1616] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 36.336137][ T1663] netlink: 44 bytes leftover after parsing attributes in process `syz.1.613'. [ 36.504303][ T1685] overlayfs: failed to clone upperpath [ 36.692584][ T1714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.636'. [ 36.724522][ T1722] netlink: 'syz.3.641': attribute type 16 has an invalid length. [ 36.744443][ T1722] netlink: 'syz.3.641': attribute type 17 has an invalid length. [ 36.791307][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 36.814475][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.824168][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 36.839587][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.850517][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.863114][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.875079][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.883273][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.892158][ T39] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 37.217840][ T1790] device bridge1 entered promiscuous mode [ 37.309387][ T1807] ip_tables: iptables: counters copy to user failed while replacing table [ 37.451494][ T1810] fuse: Bad value for 'fd' [ 37.461249][ T1830] overlayfs: failed to clone upperpath [ 37.579434][ T1847] netlink: 'syz.3.699': attribute type 4 has an invalid length. [ 37.662079][ T1864] xt_TPROXY: Can be used only with -p tcp or -p udp [ 37.699034][ T1867] overlayfs: failed to clone upperpath [ 37.759009][ T1873] overlayfs: failed to clone upperpath [ 37.817534][ T1880] fuse: Bad value for 'fd' [ 37.880847][ T1889] overlayfs: failed to clone upperpath [ 37.894039][ T1891] netlink: 68 bytes leftover after parsing attributes in process `syz.4.720'. [ 37.986061][ T1871] syz.0.710 (1871) used greatest stack depth: 20872 bytes left [ 38.005086][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 38.018629][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.030974][ T1903] netlink: 'syz.1.724': attribute type 2 has an invalid length. [ 38.049359][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 38.075932][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.099767][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.121947][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.140672][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.168686][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.460005][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 38.460020][ T30] audit: type=1400 audit(1792162843.038:227): avc: denied { read } for pid=1969 comm="syz.3.755" path="socket:[20521]" dev="sockfs" ino=20521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.705189][ T1996] overlayfs: failed to clone upperpath [ 38.865987][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 38.902590][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.920651][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 38.939618][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.957978][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.966328][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.975148][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.983609][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.994952][ T2024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 39.107491][ T30] audit: type=1400 audit(1792162843.678:228): avc: denied { mount } for pid=2041 comm="syz.0.789" name="/" dev="ramfs" ino=20647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 39.313123][ T2075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=2075 comm=syz.3.805 [ 39.492002][ T2103] netlink: 9 bytes leftover after parsing attributes in process `syz.0.819'. [ 39.517424][ T2103] device gretap0 entered promiscuous mode [ 39.547335][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 39.550072][ T2116] 9pnet: Insufficient options for proto=fd [ 39.570332][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 39.598653][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 39.607059][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 39.615834][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 39.625073][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 39.634157][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 39.642661][ T2103] netlink: 5 bytes leftover after parsing attributes in process `syz.0.819'. [ 39.654743][ T2103] 0ªî{X¹¦: renamed from gretap0 [ 39.661157][ T2103] device 30ªî{X¹¦ left promiscuous mode [ 39.668495][ T2103] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 39.728554][ T2129] overlayfs: failed to clone upperpath [ 39.770871][ T2135] 9pnet: Insufficient options for proto=fd [ 39.822354][ T2147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 39.871830][ T30] audit: type=1400 audit(1792162844.448:229): avc: denied { remount } for pid=2153 comm="syz.0.842" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 39.961303][ T30] audit: type=1400 audit(1792162844.538:230): avc: denied { nlmsg_write } for pid=2167 comm="syz.3.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 39.988743][ T2170] 9pnet: Insufficient options for proto=fd [ 40.015693][ T30] audit: type=1400 audit(1792162844.588:231): avc: denied { getopt } for pid=2171 comm="syz.4.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.126135][ T30] audit: type=1400 audit(1792162844.698:232): avc: denied { associate } for pid=2155 comm="syz.0.842" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 40.502796][ T30] audit: type=1400 audit(1792162845.077:233): avc: denied { create } for pid=2228 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 40.605677][ T2248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'. [ 40.802176][ T2281] fuse: Bad value for 'fd' [ 40.829734][ T2289] fuse: Bad value for 'fd' [ 41.107624][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 41.466964][ T2364] X.509: Got cert with pkey (7) and sig (98) algorithm OIDs [ 41.558547][ T2379] fuse: Bad value for 'fd' [ 41.575101][ T2379] fuse: Bad value for 'fd' [ 41.615536][ T2394] netlink: 'syz.3.955': attribute type 13 has an invalid length. [ 41.641404][ T2394] gretap0: refused to change device tx_queue_len [ 41.654095][ T2394] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 41.686643][ T2398] device ip6gre1 entered promiscuous mode [ 41.722229][ T2412] ip_tables: iptables: counters copy to user failed while replacing table [ 41.733279][ T2413] overlayfs: failed to clone upperpath [ 41.740216][ T2412] ip_tables: iptables: counters copy to user failed while replacing table [ 41.883590][ T2433] overlayfs: failed to clone upperpath [ 41.931621][ T2438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 41.999761][ T2450] Illegal XDP return value 4294967274, expect packet loss! [ 42.104343][ T2483] overlayfs: unrecognized mount option "verity=on" or missing value [ 42.216003][ T2507] fuse: Bad value for 'fd' [ 42.268850][ T2521] fuseblk: Bad value for 'fd' [ 42.292956][ T30] audit: type=1400 audit(1792162846.867:234): avc: denied { getopt } for pid=2526 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.335284][ T2535] fuse: Bad value for 'fd' [ 42.658827][ T2572] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2572 comm=syz.4.1036 [ 42.710637][ T2572] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2572 comm=syz.4.1036 [ 43.406296][ T2605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 43.447323][ T30] audit: type=1400 audit(1792162847.977:235): avc: denied { ioctl } for pid=2602 comm="syz.3.1046" path="socket:[21221]" dev="sockfs" ino=21221 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.773609][ T2628] SELinux: security_context_str_to_sid(Eá…) failed for (dev ?, type ?) errno=-22 [ 43.786134][ T2628] SELinux: security_context_str_to_sid(Eá…) failed for (dev proc, type proc) errno=-22 [ 44.198460][ T2657] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2657 comm=syz.1.1060 [ 44.227284][ T2657] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2657 comm=syz.1.1060 [ 46.124825][ T20] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 46.968238][ T2867] ================================================================== [ 46.976347][ T2867] BUG: KASAN: slab-out-of-bounds in sk_skb_adjust_room+0x389/0x5c0 [ 46.984278][ T2867] Read of size 8 at addr ffff88810c7bf9a8 by task syz.4.1162/2867 [ 46.992114][ T2867] [ 46.994466][ T2867] CPU: 1 PID: 2867 Comm: syz.4.1162 Tainted: G W syzkaller #0 [ 47.003252][ T2867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 47.013356][ T2867] Call Trace: [ 47.016654][ T2867] [ 47.019603][ T2867] __dump_stack+0x21/0x30 [ 47.023948][ T2867] dump_stack_lvl+0x110/0x170 [ 47.028660][ T2867] ? show_regs_print_info+0x20/0x20 [ 47.033878][ T2867] ? load_image+0x3f0/0x3f0 [ 47.038401][ T2867] ? skb_release_data+0x1b5/0xa20 [ 47.043442][ T2867] print_address_description+0x7f/0x2c0 [ 47.048998][ T2867] ? sk_skb_adjust_room+0x389/0x5c0 [ 47.054210][ T2867] kasan_report+0x10f/0x150 [ 47.058731][ T2867] ? sk_skb_adjust_room+0x389/0x5c0 [ 47.063946][ T2867] __asan_report_load8_noabort+0x14/0x20 [ 47.069596][ T2867] sk_skb_adjust_room+0x389/0x5c0 [ 47.074643][ T2867] bpf_prog_e15ab8bd9cea3c06+0x19/0xe4 [ 47.080112][ T2867] sk_psock_verdict_recv+0x245/0x7f0 [ 47.085423][ T2867] unix_read_sock+0x108/0x2d0 [ 47.090121][ T2867] ? sk_psock_skb_redirect+0x440/0x440 [ 47.095599][ T2867] ? unix_stream_splice_actor+0x120/0x120 [ 47.101334][ T2867] ? copy_mc_pipe_to_iter+0x7e0/0x7e0 [ 47.106718][ T2867] ? sk_psock_skb_redirect+0x440/0x440 [ 47.112184][ T2867] unix_stream_read_sock+0x61/0x90 [ 47.117312][ T2867] sk_psock_verdict_data_ready+0x167/0x1d0 [ 47.123132][ T2867] ? sk_psock_start_verdict+0xc0/0xc0 [ 47.128870][ T2867] ? _raw_spin_lock+0x94/0xf0 [ 47.133556][ T2867] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 47.139392][ T2867] ? skb_queue_tail+0xcb/0xf0 [ 47.144102][ T2867] unix_stream_sendmsg+0x7d1/0xc90 [ 47.149237][ T2867] ? unix_show_fdinfo+0xa0/0xa0 [ 47.154099][ T2867] ? __fget_files+0x2e1/0x340 [ 47.158789][ T2867] ? security_socket_sendmsg+0x82/0xa0 [ 47.164260][ T2867] __sys_sendto+0x46d/0x620 [ 47.168770][ T2867] ? __ia32_sys_getpeername+0x90/0x90 [ 47.174156][ T2867] ? map_update_elem+0x286/0x780 [ 47.179108][ T2867] ? __se_sys_futex+0x135/0x330 [ 47.183981][ T2867] ? __kasan_check_write+0x14/0x20 [ 47.189101][ T2867] __x64_sys_sendto+0xe5/0x100 [ 47.193889][ T2867] x64_sys_call+0x178/0x9a0 [ 47.198530][ T2867] do_syscall_64+0x4c/0xa0 [ 47.202977][ T2867] ? clear_bhb_loop+0x50/0xa0 [ 47.207678][ T2867] ? clear_bhb_loop+0x50/0xa0 [ 47.212379][ T2867] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.218290][ T2867] RIP: 0033:0x7efd74a44559 [ 47.222722][ T2867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.242351][ T2867] RSP: 002b:00007efd7349d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 47.250782][ T2867] RAX: ffffffffffffffda RBX: 00007efd74ccbfa0 RCX: 00007efd74a44559 [ 47.258765][ T2867] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004 [ 47.266765][ T2867] RBP: 00007efd74adb8b0 R08: 0000000000000000 R09: 0000000000000000 [ 47.274750][ T2867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.282824][ T2867] R13: 00007efd74ccc038 R14: 00007efd74ccbfa0 R15: 00007ffd00d138e8 [ 47.290814][ T2867] [ 47.293849][ T2867] [ 47.296177][ T2867] Allocated by task 2867: [ 47.300511][ T2867] __kasan_slab_alloc+0xb7/0xe0 [ 47.305380][ T2867] slab_post_alloc_hook+0x4f/0x2b0 [ 47.310505][ T2867] kmem_cache_alloc+0xf7/0x260 [ 47.315275][ T2867] sk_prot_alloc+0x5f/0x320 [ 47.319790][ T2867] sk_alloc+0x38/0x430 [ 47.323867][ T2867] unix_create1+0xb4/0x610 [ 47.328292][ T2867] unix_create+0x149/0x200 [ 47.332724][ T2867] __sock_create+0x38d/0x7a0 [ 47.337325][ T2867] __sys_socketpair+0x1a1/0x590 [ 47.342180][ T2867] __x64_sys_socketpair+0x9b/0xb0 [ 47.347213][ T2867] x64_sys_call+0x36/0x9a0 [ 47.351638][ T2867] do_syscall_64+0x4c/0xa0 [ 47.356060][ T2867] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.361973][ T2867] [ 47.364301][ T2867] The buggy address belongs to the object at ffff88810c7bf480 [ 47.364301][ T2867] which belongs to the cache UNIX-STREAM of size 1216 [ 47.378446][ T2867] The buggy address is located 104 bytes to the right of [ 47.378446][ T2867] 1216-byte region [ffff88810c7bf480, ffff88810c7bf940) [ 47.392344][ T2867] The buggy address belongs to the page: [ 47.397995][ T2867] page:ffffea000431ef00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810c7bf9c0 pfn:0x10c7bc [ 47.409546][ T2867] head:ffffea000431ef00 order:2 compound_mapcount:0 compound_pincount:0 [ 47.417876][ T2867] flags: 0x4000000000010200(slab|head|zone=1) [ 47.423969][ T2867] raw: 4000000000010200 0000000000000000 0000000100000001 ffff8881003e6f00 [ 47.432557][ T2867] raw: ffff88810c7bf9c0 00000000800c0009 00000001ffffffff 0000000000000000 [ 47.441135][ T2867] page dumped because: kasan: bad access detected [ 47.447551][ T2867] page_owner tracks the page as allocated [ 47.453275][ T2867] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 86, ts 4413235561, free_ts 0 [ 47.471262][ T2867] post_alloc_hook+0x192/0x1b0 [ 47.476049][ T2867] prep_new_page+0x1c/0x110 [ 47.480559][ T2867] get_page_from_freelist+0x2c3a/0x2cd0 [ 47.486116][ T2867] __alloc_pages+0x1a2/0x460 [ 47.490710][ T2867] new_slab+0xa0/0x4d0 [ 47.494785][ T2867] ___slab_alloc+0x3ac/0x840 [ 47.499409][ T2867] __slab_alloc+0x49/0x90 [ 47.503841][ T2867] kmem_cache_alloc+0x138/0x260 [ 47.508720][ T2867] sk_prot_alloc+0x5f/0x320 [ 47.513234][ T2867] sk_alloc+0x38/0x430 [ 47.517313][ T2867] unix_create1+0xb4/0x610 [ 47.521741][ T2867] unix_create+0x149/0x200 [ 47.526162][ T2867] __sock_create+0x38d/0x7a0 [ 47.530758][ T2867] __sys_socket+0xec/0x190 [ 47.535175][ T2867] __x64_sys_socket+0x7a/0x90 [ 47.539863][ T2867] x64_sys_call+0x8c5/0x9a0 [ 47.544379][ T2867] page_owner free stack trace missing [ 47.549747][ T2867] [ 47.552073][ T2867] Memory state around the buggy address: [ 47.557709][ T2867] ffff88810c7bf880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.565780][ T2867] ffff88810c7bf900: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 47.573849][ T2867] >ffff88810c7bf980: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 47.581936][ T2867] ^ [ 47.587324][ T2867] ffff88810c7bfa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.595400][ T2867] ffff88810c7bfa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.603462][ T2867] ================================================================== [ 47.611524][ T2867] Disabling lock debugging due to kernel taint [ 47.626576][ T30] audit: type=1400 audit(1792162852.197:236): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 47.659680][ T30] audit: type=1400 audit(1792162852.197:237): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.694004][ T30] audit: type=1400 audit(1792162852.197:238): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.715756][ T30] audit: type=1400 audit(1792162852.197:239): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.738496][ T30] audit: type=1400 audit(1792162852.207:240): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.759171][ T30] audit: type=1400 audit(1792162852.207:241): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.782681][ T30] audit: type=1400 audit(1792162852.207:242): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.827356][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 50.547364][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!