last executing test programs: 3.2583668s ago: executing program 2 (id=159): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') setns(r0, 0x40000000) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') read(r1, &(0x7f0000000200), 0x1000) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'lo\x00', &(0x7f0000000400)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10, '\x00'/16}}) 3.247967531s ago: executing program 2 (id=162): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x601, 0x1, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0x0, 0x1}]}}}, 0x0) 3.190490072s ago: executing program 2 (id=165): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800010000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800020000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800030000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800040000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800050000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800060000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800070000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800080000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800090000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000a0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000b0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000c0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000d0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000e0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000f0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800100000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800110000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800120000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800130000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800140000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800150000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800160000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800170000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800180000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800190000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001a0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001b0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001c0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001d0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001e0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001f0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800200000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800210000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800220000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800230000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000200)="1c0000001a00010103000000000000000a00"/28, 0x1c) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0) 3.184334042s ago: executing program 2 (id=168): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x0, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x100}}}}, 0x0) 2.028435171s ago: executing program 2 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1ff) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/probability\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='100\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/failslab/times\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='100\x00', 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000700), 0x0, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@msize={'msize', 0x3d, 0x1000}}]}}) write$P9_RVERSION(r1, &(0x7f0000000900)={0x13, 0x65, 0xffff, 0x1000, 0x6, '9P2000'}, 0x13) write$P9_RATTACH(r1, &(0x7f0000000a00)={0x13, 0x69, 0x1}, 0x13) write$P9_RSTAT(r1, &(0x7f0000000b00)={0x0, 0x77, 0x1}, 0x13) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0) 1.63092265s ago: executing program 2 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000040), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0xbb06, @empty}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000220)={0x2, 0xbb06, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)="009c00011a2b3c4d0001000001000000000000010000000100010001", 0x1c, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000400)="009c00011a2b3c4d0002000001000100000000010000000100010001", 0x1c, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000500)="00a800011a2b3c4d0007000012340001000000010000000100010001000100000000", 0x22, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000600)="002000011a2b3c4d00080000567812340100"/32, 0x20, 0x0, 0x0, 0x0) 1.63069063s ago: executing program 4 (id=185): r0 = socket$inet6_udp(0xa, 0x2, 0x11) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1d, 0x6, 0x660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000006c0), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x0, 0x24}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x100, 0x8, 0xb34f, 0x57c1, 0xffff, 0x6}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@frag={{0x30}}, @common=@ah={{0x30}, {[0x4d2, 0x4d4], 0x6, 0x2, 0x2}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) 1.578570471s ago: executing program 4 (id=187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x1, [@m_nat={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @private=0xa010101, @private=0xa010102}}]}, {0x7, 0x3, "001122"}, {0xc, 0x4}, {0xc, 0x5}}}]}]}}]}, 0x94}}, 0x0) write(r0, &(0x7f0000000300)="4500001c00010000400100000a0000010a0000020800f7ff00000000", 0x1c) 1.434886075s ago: executing program 4 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='+tcp\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\n\x00', 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r3, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 1.421068495s ago: executing program 4 (id=196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000010)=@newnexthop={0x24, 0x68, 0x601, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000010)=@newnexthop={0x2c, 0x68, 0x601, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000010)=@getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 1.346915737s ago: executing program 4 (id=198): unshare(0x50000000) unshare(0x50000000) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 1.2183947s ago: executing program 4 (id=202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40950b901700010102030109022700010100a0320904000003ffff0000070581031000080705820200020007050302000200"], 0x0) nanosleep(&(0x7f0000000200)={0x2}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, 0x2}]}, @ETHTOOL_A_EEE_MODES_OURS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x34}}, 0x0) 982.917936ms ago: executing program 1 (id=210): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x208, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='mountport\x00', &(0x7f0000000300)='2049\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) accept4(r0, &(0x7f0000000400)=@in={0x2, 0x0, @loopback}, &(0x7f0000000500)=0x10, 0x0) 982.776026ms ago: executing program 3 (id=211): r0 = userfaultfd(0x1) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x32, 0xffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{0xffffffffffffffff, 0x1000}, 0x2}) 982.574326ms ago: executing program 3 (id=212): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x4, 0x248, 0xffffffff, 0x0, 0x98, 0x128, 0xffffffff, 0xffffffff, 0x1b8, 0x1b8, 0x1b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1}}}, {{@uncond, 0x0, 0x70, 0x90}, @common=@unspec=@STANDARD={0x20, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x90}, @common=@unspec=@STANDARD={0x20, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x90}, {0x20}}}}, 0x0) sendto$inet(r1, &(0x7f0000000500)="00010203040506070809", 0xa, 0x0, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) 972.831046ms ago: executing program 3 (id=213): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040002000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b0008000100020000000800040001000000", 0x58) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa86dd6000000000342b4020010db800000000000000000000000220010db8000000000000000000000001110404010100000020010db800000000000000000000000320010db800000000000000000000000430393039000c0000deadbeef"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 862.855149ms ago: executing program 3 (id=215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local, 0x7}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @local, 0x8}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @local, 0x9}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e26, 0x0, @local, 0xa}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e27, 0x0, @local, 0xb}, 0x1c) 862.593829ms ago: executing program 0 (id=216): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='addr\x00', &(0x7f0000000080)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='port\x00', &(0x7f0000000180)='0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 862.443659ms ago: executing program 3 (id=217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x402}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'\x00', 0x1}) write$tun(r0, &(0x7f0000000200)={@void, @val={0x1, 0x1, 0x14, 0x10, 0x0, 0xe}, @eth={@broadcast, @broadcast, @void, {@generic={0x8847, "000001ff4500002800004000400600007f0000017f0000010050005000000000000000005002200000000000"}}}}, 0x60) 854.591039ms ago: executing program 0 (id=218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000c0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000d0000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000), 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a00010301000000000000002d00"/28], 0x1c}}, 0x0) 831.44649ms ago: executing program 3 (id=219): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='port\x00', &(0x7f0000000280)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) read(r2, &(0x7f0000000400)=""/256, 0x100) write(r2, &(0x7f0000000500)="80000100000000000000000100"/36, 0x24) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 778.758431ms ago: executing program 0 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-2 -3 -4\n\x00', 0x9) r1 = socket$inet(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='4\n\x00', 0x2) write(r0, &(0x7f0000000380)='+3 +4\n\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='\\x01000000 2147483647 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 root\n\x00', 0x61) r5 = socket$inet(0x2, 0x1, 0x6) connect$inet(r5, &(0x7f0000000800)={0x2, 0x0, @empty}, 0x10) write(r5, &(0x7f0000000900)="123456780000000000000002000186a300000003000000000000000600000018000000010000000200000000000000010000000401000000000000060000001c040400ffffffffff00"/92, 0x54) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) 698.205053ms ago: executing program 0 (id=221): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = accept$inet6(r0, 0x0, 0x0) write(r1, &(0x7f0000000100)='hello', 0x5) write(r2, &(0x7f0000000140)='world', 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @loopback, @loopback, {[], {{0x4e23, 0x4e22, 0x1, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 657.046144ms ago: executing program 0 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n\x00', 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='3\n\x00', 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r3, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 590.743306ms ago: executing program 0 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000300)={0x2}, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 171.127376ms ago: executing program 1 (id=224): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 151.096826ms ago: executing program 1 (id=225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x2}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0xd0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) 82.854858ms ago: executing program 1 (id=226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf1, 0xff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newtfilter={0x6c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf1, 0xff}, {0x0, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x6c}}, 0x0) 49.999729ms ago: executing program 1 (id=227): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/times\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/fail_page_alloc/probability\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/fail_page_alloc/times\x00', 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) write(r1, &(0x7f00000001c0)='1000\x00', 0x4) write(r3, &(0x7f00000002c0)='1000\x00', 0x4) write(r0, &(0x7f0000000140)='100\x00', 0x3) write(r2, &(0x7f0000000240)='100\x00', 0x3) sendto$inet(r4, &(0x7f0000000300)="11223344", 0x4, 0x0, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) 0s ago: executing program 1 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x1f91, @loopback}, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1f90, @loopback}}, {0x14, 0x2, @in={0x2, 0x1f91, @loopback}}}}]}]}, 0x54}}, 0x0) recvfrom$inet(r2, &(0x7f0000000200), 0x100, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 28.728105][ T28] audit: type=1400 audit(1785172330.842:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.731910][ T279] cgroup: Unknown subsys name 'net' [ 28.750938][ T28] audit: type=1400 audit(1785172330.842:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.778238][ T28] audit: type=1400 audit(1785172330.882:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.778799][ T279] cgroup: Unknown subsys name 'devices' [ 28.893456][ T279] cgroup: Unknown subsys name 'hugetlb' [ 28.899121][ T279] cgroup: Unknown subsys name 'rlimit' [ 29.034881][ T28] audit: type=1400 audit(1785172331.152:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.058154][ T28] audit: type=1400 audit(1785172331.152:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.082942][ T28] audit: type=1400 audit(1785172331.152:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.116449][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.125486][ T28] audit: type=1400 audit(1785172331.252:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.151026][ T28] audit: type=1400 audit(1785172331.252:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.178034][ T28] audit: type=1400 audit(1785172331.292:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.203629][ T28] audit: type=1400 audit(1785172331.292:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.204489][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.467076][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.474206][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.482133][ T287] device bridge_slave_0 entered promiscuous mode [ 30.490821][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.498091][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.505561][ T287] device bridge_slave_1 entered promiscuous mode [ 30.584961][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.592248][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.599703][ T289] device bridge_slave_0 entered promiscuous mode [ 30.608549][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.615702][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.623285][ T289] device bridge_slave_1 entered promiscuous mode [ 30.680777][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.687975][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.695571][ T291] device bridge_slave_0 entered promiscuous mode [ 30.706377][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.713605][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.721051][ T291] device bridge_slave_1 entered promiscuous mode [ 30.727766][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.734884][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.742428][ T288] device bridge_slave_0 entered promiscuous mode [ 30.782434][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.789524][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.797103][ T288] device bridge_slave_1 entered promiscuous mode [ 30.809303][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.816679][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.824212][ T290] device bridge_slave_0 entered promiscuous mode [ 30.834618][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.841710][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.849237][ T290] device bridge_slave_1 entered promiscuous mode [ 30.979676][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.986810][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.050464][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.057687][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.065028][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.072260][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.087466][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.094572][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.101911][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.108962][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.118462][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.125548][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.132876][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.139928][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.165774][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.172886][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.180184][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.187263][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.207338][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.215922][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.223674][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.230952][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.238365][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.245725][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.253056][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.260238][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.267771][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.275567][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.283202][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.309955][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.318500][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.327134][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.334248][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.341770][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.349997][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.357091][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.391922][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.400193][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.407887][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.417410][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.425973][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.433082][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.440974][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.449443][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.456531][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.464029][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.472280][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.479412][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.486870][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.494897][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.503176][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.510216][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.517650][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.525858][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.534224][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.541311][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.548839][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.557125][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.564183][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.601564][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.609887][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.618191][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.626599][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.635042][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.642662][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.650144][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.658693][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.667079][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.674178][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.681642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.689717][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.697831][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.705950][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.713994][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.722093][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.730077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.738293][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.755937][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.764487][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.772783][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.779824][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.787541][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.796350][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.804871][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.812981][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.830731][ T289] device veth0_vlan entered promiscuous mode [ 31.842561][ T290] device veth0_vlan entered promiscuous mode [ 31.851926][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.860387][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.869066][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.877747][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.886437][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.894657][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.903021][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.910959][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.919279][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.927391][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.935776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.943425][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.951011][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.958650][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.966156][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.973920][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.988315][ T291] device veth0_vlan entered promiscuous mode [ 31.998766][ T287] device veth0_vlan entered promiscuous mode [ 32.005178][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.013366][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.023364][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.031939][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.040235][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.048332][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.056558][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.064339][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.080870][ T289] device veth1_macvtap entered promiscuous mode [ 32.088632][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.096858][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.105271][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.116416][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.125253][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.141793][ T287] device veth1_macvtap entered promiscuous mode [ 32.149772][ T290] device veth1_macvtap entered promiscuous mode [ 32.157704][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.166454][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.174846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.182607][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.190167][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.198576][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.206939][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.215451][ T288] device veth0_vlan entered promiscuous mode [ 32.224744][ T291] device veth1_macvtap entered promiscuous mode [ 32.244736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.253221][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.260872][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.269415][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.278038][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.287039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.295566][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.304068][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.312641][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.320846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.338454][ T288] device veth1_macvtap entered promiscuous mode [ 32.347841][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.356250][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.364877][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.374268][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.382837][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.391145][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.399821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.408365][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.433407][ T290] request_module fs-gadgetfs succeeded, but still no fs? [ 32.441661][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.450007][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.463920][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.472639][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.658068][ T342] bridge0: port 3(syz_tun) entered blocking state [ 32.671362][ T342] bridge0: port 3(syz_tun) entered disabled state [ 32.678372][ T342] device syz_tun entered promiscuous mode [ 32.694331][ T342] bridge0: port 3(syz_tun) entered blocking state [ 32.700828][ T342] bridge0: port 3(syz_tun) entered forwarding state [ 32.710896][ T341] tipc: Started in network mode [ 32.716578][ T341] tipc: Node identity 1000001, cluster identity 4711 [ 32.731647][ T341] tipc: Node number set to 16777217 [ 32.737971][ T347] tipc: New replicast peer: 127.0.0.1 [ 32.751519][ T347] tipc: Enabled bearer , priority 10 [ 32.768181][ T341] tipc: Enabling of bearer rejected, failed to enable media [ 32.780901][ T345] tipc: Started in network mode [ 32.789983][ T345] tipc: Node identity e66717f5922, cluster identity 4711 [ 32.805014][ T345] tipc: Enabled bearer , priority 10 [ 32.818262][ T348] tipc: Started in network mode [ 32.824841][ T348] tipc: Node identity 1000001, cluster identity 4369 [ 32.831871][ T348] tipc: Node number set to 16777217 [ 32.837594][ T348] tipc: Cannot configure node identity twice [ 32.849290][ T344] tipc: Disabling bearer [ 32.876289][ T348] tipc: New replicast peer: 127.0.0.1 [ 32.885002][ T348] tipc: Enabled bearer , priority 10 [ 32.911368][ T342] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 32.942650][ T342] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 33.032070][ T377] netlink: 32 bytes leftover after parsing attributes in process `syz.3.27'. [ 33.047778][ T377] tipc: Enabled bearer , priority 10 [ 33.196188][ T397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 33.206335][ T397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.38'. [ 33.384969][ T418] Zero length message leads to an empty skb [ 33.533492][ T442] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 33.627294][ T456] tipc: New replicast peer: 127.0.0.1 [ 33.637338][ T456] tipc: Enabled bearer , priority 10 [ 33.657881][ T458] bridge0: port 3(syz_tun) entered blocking state [ 33.669232][ T458] bridge0: port 3(syz_tun) entered disabled state [ 33.677402][ T458] device syz_tun entered promiscuous mode [ 33.683826][ T458] bridge0: port 3(syz_tun) entered blocking state [ 33.690286][ T458] bridge0: port 3(syz_tun) entered forwarding state [ 33.718751][ T458] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 33.762386][ T473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 33.865290][ T492] bridge0: port 3(syz_tun) entered blocking state [ 33.872629][ T492] bridge0: port 3(syz_tun) entered disabled state [ 33.879783][ T492] device syz_tun entered promiscuous mode [ 33.886585][ T492] bridge0: port 3(syz_tun) entered blocking state [ 33.893070][ T492] bridge0: port 3(syz_tun) entered listening state [ 33.992396][ T509] netlink: 88 bytes leftover after parsing attributes in process `syz.3.90'. [ 34.164555][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 34.164583][ T28] audit: type=1400 audit(1785172336.282:138): avc: denied { relabelfrom } for pid=521 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 34.190679][ T28] audit: type=1400 audit(1785172336.282:139): avc: denied { relabelto } for pid=521 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 34.258516][ T533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 34.317308][ T537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 34.339576][ T539] x_tables: duplicate underflow at hook 3 [ 34.374746][ T543] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=543 comm=syz.4.106 [ 34.400294][ T545] netlink: 124 bytes leftover after parsing attributes in process `syz.3.107'. [ 34.485108][ T556] bridge0: port 3(syz_tun) entered blocking state [ 34.491673][ T556] bridge0: port 3(syz_tun) entered disabled state [ 34.498634][ T556] device syz_tun entered promiscuous mode [ 34.504608][ T556] bridge0: port 3(syz_tun) entered blocking state [ 34.511058][ T556] bridge0: port 3(syz_tun) entered forwarding state [ 34.521693][ T556] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 34.588159][ T561] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=561 comm=syz.0.114 [ 34.614461][ T28] audit: type=1400 audit(1785172336.732:140): avc: denied { create } for pid=563 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.635198][ T28] audit: type=1400 audit(1785172336.732:141): avc: denied { write } for pid=563 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.721367][ T60] tipc: Node number set to 1950816245 [ 35.172765][ T582] bridge0: port 3(syz_tun) entered blocking state [ 35.179295][ T582] bridge0: port 3(syz_tun) entered disabled state [ 35.186886][ T582] device syz_tun entered promiscuous mode [ 35.197890][ T582] bridge0: port 3(syz_tun) entered blocking state [ 35.204497][ T582] bridge0: port 3(syz_tun) entered forwarding state [ 35.214878][ T582] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 35.262017][ T28] audit: type=1400 audit(1785172337.382:142): avc: denied { mount } for pid=589 comm="syz.2.128" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 35.301438][ T28] audit: type=1400 audit(1785172337.412:143): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 35.343444][ T28] audit: type=1400 audit(1785172337.422:144): avc: denied { mount } for pid=593 comm="syz.0.130" name="/" dev="configfs" ino=14289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 35.374767][ T28] audit: type=1400 audit(1785172337.422:145): avc: denied { search } for pid=593 comm="syz.0.130" name="/" dev="configfs" ino=14289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.407821][ T606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 35.430835][ T28] audit: type=1400 audit(1785172337.422:146): avc: denied { write } for pid=593 comm="syz.0.130" name="/" dev="configfs" ino=14289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.452113][ T606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.134'. [ 35.473426][ T28] audit: type=1400 audit(1785172337.442:147): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 35.495172][ T613] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 35.589586][ T629] tipc: Started in network mode [ 35.594739][ T629] tipc: Node identity 7f000001, cluster identity 4711 [ 35.602143][ T629] tipc: New replicast peer: 127.0.0.1 [ 35.607714][ T629] tipc: Enabled bearer , priority 10 [ 35.873086][ T679] FAULT_INJECTION: forcing a failure. [ 35.873086][ T679] name failslab, interval 1, probability 100, space 0, times 1 [ 35.877187][ T677] FAULT_INJECTION: forcing a failure. [ 35.877187][ T677] name failslab, interval 1, probability 100, space 0, times 1 [ 35.891662][ C1] FAULT_INJECTION: forcing a failure. [ 35.891662][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 35.898757][ T677] CPU: 0 PID: 677 Comm: syz.1.172 Not tainted syzkaller #0 [ 35.918756][ T677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 35.928847][ T677] Call Trace: [ 35.932162][ T677] [ 35.935194][ T677] __dump_stack+0x21/0x24 [ 35.939578][ T677] dump_stack_lvl+0x110/0x170 [ 35.944283][ T677] ? __cfi_dump_stack_lvl+0x8/0x8 [ 35.949354][ T677] dump_stack+0x15/0x24 [ 35.953543][ T677] should_fail_ex+0x3bf/0x510 [ 35.958253][ T677] ? __sigqueue_alloc+0x13f/0x210 [ 35.963376][ T677] __should_failslab+0xac/0xf0 [ 35.968218][ T677] should_failslab+0x9/0x20 [ 35.972753][ T677] kmem_cache_alloc+0x3b/0x320 [ 35.977555][ T677] __sigqueue_alloc+0x13f/0x210 [ 35.982441][ T677] __send_signal_locked+0x19d/0xb70 [ 35.987679][ T677] ? __task_pid_nr_ns+0x1e2/0x280 [ 35.992752][ T677] do_notify_parent+0x6b1/0x820 [ 35.997654][ T677] ? __cfi_do_notify_parent+0x10/0x10 [ 36.003075][ T677] release_task+0xe36/0x1200 [ 36.007704][ T677] do_exit+0x1a1d/0x2850 [ 36.011980][ T677] ? preempt_schedule+0xbc/0xd0 [ 36.016866][ T677] ? __cfi_do_exit+0x10/0x10 [ 36.021494][ T677] ? __kasan_check_read+0x11/0x20 [ 36.026545][ T677] ? ttwu_do_wakeup+0x102/0x490 [ 36.031424][ T677] ? __kasan_check_write+0x14/0x20 [ 36.036567][ T677] ? _raw_spin_lock_irq+0x95/0xf0 [ 36.041620][ T677] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 36.047190][ T677] do_group_exit+0x21b/0x2e0 [ 36.051818][ T677] ? __kasan_check_write+0x14/0x20 [ 36.056951][ T677] ? recalc_sigpending+0x168/0x1c0 [ 36.062091][ T677] get_signal+0x167c/0x1700 [ 36.066625][ T677] ? __cfi_get_signal+0x10/0x10 [ 36.071504][ T677] arch_do_signal_or_restart+0xd1/0x11c0 [ 36.077167][ T677] ? do_futex+0x2bf/0x430 [ 36.081533][ T677] ? __cfi_do_futex+0x10/0x10 [ 36.086244][ T677] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 36.092433][ T677] ? __se_sys_futex+0x136/0x310 [ 36.097319][ T677] exit_to_user_mode_loop+0x7a/0xb0 [ 36.102552][ T677] exit_to_user_mode_prepare+0x87/0xd0 [ 36.108037][ T677] syscall_exit_to_user_mode+0x1a/0x30 [ 36.113519][ T677] do_syscall_64+0x58/0xa0 [ 36.117970][ T677] ? clear_bhb_loop+0x30/0x80 [ 36.122668][ T677] ? clear_bhb_loop+0x30/0x80 [ 36.127370][ T677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.133301][ T677] RIP: 0033:0x7fcacd99de99 [ 36.137751][ T677] Code: Unable to access opcode bytes at 0x7fcacd99de6f. [ 36.145223][ T677] RSP: 002b:00007fcace8190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 36.153683][ T677] RAX: 0000000000000001 RBX: 00007fcacdc25fa8 RCX: 00007fcacd99de99 [ 36.161685][ T677] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcacdc25fac [ 36.169681][ T677] RBP: 00007fcacdc25fa0 R08: 00305cceed2cea86 R09: 0000000000000000 [ 36.177676][ T677] R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000000 [ 36.185674][ T677] R13: 00007fcacdc26038 R14: 00007ffd15ac07a0 R15: 00007ffd15ac0888 [ 36.193676][ T677] [ 36.196723][ C1] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0 [ 36.204230][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 36.214319][ C1] Call Trace: [ 36.217629][ C1] [ 36.220499][ C1] __dump_stack+0x21/0x24 [ 36.224873][ C1] dump_stack_lvl+0x110/0x170 [ 36.229582][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.234632][ C1] ? skb_network_protocol+0x52f/0x790 [ 36.240040][ C1] dump_stack+0x15/0x24 [ 36.244226][ C1] should_fail_ex+0x3bf/0x510 [ 36.248937][ C1] ? skb_clone+0x1e8/0x380 [ 36.253379][ C1] __should_failslab+0xac/0xf0 [ 36.258171][ C1] should_failslab+0x9/0x20 [ 36.262699][ C1] kmem_cache_alloc+0x3b/0x320 [ 36.267495][ C1] skb_clone+0x1e8/0x380 [ 36.271773][ C1] dev_queue_xmit_nit+0x245/0xab0 [ 36.276839][ C1] dev_hard_start_xmit+0x15f/0x730 [ 36.281984][ C1] ? _raw_spin_lock+0x94/0xf0 [ 36.286692][ C1] sch_direct_xmit+0x279/0x9c0 [ 36.291483][ C1] ? __cfi_resched_curr+0x10/0x10 [ 36.296536][ C1] ? __kasan_check_write+0x14/0x20 [ 36.301667][ C1] ? _raw_spin_trylock+0xb7/0x150 [ 36.306710][ C1] ? __cfi_sch_direct_xmit+0x10/0x10 [ 36.312019][ C1] __dev_queue_xmit+0x163e/0x3540 [ 36.317068][ C1] ? __dev_queue_xmit+0x281/0x3540 [ 36.322202][ C1] ? update_stack_state+0x171/0x490 [ 36.327426][ C1] ? __cfi___dev_queue_xmit+0x10/0x10 [ 36.332826][ C1] ? __kasan_check_read+0x11/0x20 [ 36.337867][ C1] ? selinux_ip_postroute+0x28c/0x1000 [ 36.343350][ C1] ? __kernel_text_address+0xd/0x30 [ 36.348573][ C1] ? unwind_get_return_address+0x4d/0x90 [ 36.354228][ C1] ? __cfi_selinux_ip_postroute+0x10/0x10 [ 36.360027][ C1] ? arch_stack_walk+0xfc/0x150 [ 36.364905][ C1] ? memcpy+0x56/0x70 [ 36.368906][ C1] ip_finish_output2+0xc07/0xf50 [ 36.373866][ C1] ? __cfi_ip_finish_output2+0x10/0x10 [ 36.379346][ C1] ? kasan_set_track+0x60/0x70 [ 36.384133][ C1] ? kasan_save_free_info+0x2b/0x40 [ 36.389350][ C1] ? ____kasan_slab_free+0x132/0x180 [ 36.394658][ C1] ? __kasan_slab_free+0x11/0x20 [ 36.399626][ C1] ? kmem_cache_free+0x12d/0x300 [ 36.404590][ C1] ? ip_skb_dst_mtu+0x39a/0x630 [ 36.409469][ C1] __ip_finish_output+0x172/0x370 [ 36.414536][ C1] ip_finish_output+0x31/0x2b0 [ 36.419329][ C1] ? ip_output+0x365/0x390 [ 36.423792][ C1] ip_output+0x1ea/0x390 [ 36.428067][ C1] ? __cfi_ip_output+0x10/0x10 [ 36.432861][ C1] ? __cfi_ip_finish_output+0x10/0x10 [ 36.438262][ C1] ? ipv4_dst_check+0xf2/0x160 [ 36.443051][ C1] ? skb_push+0x8e/0xe0 [ 36.447244][ C1] __ip_queue_xmit+0x1129/0x1cf0 [ 36.452269][ C1] ? __kasan_check_read+0x11/0x20 [ 36.457344][ C1] ip_queue_xmit+0x4d/0x70 [ 36.461806][ C1] __tcp_transmit_skb+0x1da6/0x3410 [ 36.467086][ C1] ? __irq_exit_rcu+0x52/0xf0 [ 36.471791][ C1] ? __tcp_send_ack+0x690/0x690 [ 36.476666][ C1] ? __kasan_check_read+0x11/0x20 [ 36.481715][ C1] ? tcp_small_queue_check+0x213/0x430 [ 36.487232][ C1] tcp_write_xmit+0x17e1/0x5e20 [ 36.492133][ C1] __tcp_push_pending_frames+0x99/0x2f0 [ 36.497742][ C1] tcp_rcv_established+0xe2b/0x1ab0 [ 36.502968][ C1] ? __cfi_tcp_rcv_established+0x10/0x10 [ 36.508630][ C1] ? ipv4_dst_check+0xf2/0x160 [ 36.513428][ C1] tcp_v4_do_rcv+0x446/0x9c0 [ 36.518053][ C1] tcp_v4_rcv+0x239f/0x2ae0 [ 36.522591][ C1] ? __cfi_tcp_v4_rcv+0x10/0x10 [ 36.527812][ C1] ? __inet_lookup_established+0x727/0x760 [ 36.533642][ C1] ip_protocol_deliver_rcu+0x371/0x780 [ 36.539124][ C1] ip_local_deliver_finish+0x23e/0x400 [ 36.544604][ C1] ip_local_deliver+0x1dc/0x350 [ 36.549489][ C1] ? __cfi_ip_local_deliver+0x10/0x10 [ 36.554899][ C1] ? ip_rcv_finish_core+0xb26/0x14b0 [ 36.560252][ C1] ip_sublist_rcv+0x787/0x8d0 [ 36.564965][ C1] ? ip_list_rcv+0x430/0x430 [ 36.569585][ C1] ? __cfi_packet_rcv+0x10/0x10 [ 36.574497][ C1] ? memset+0x35/0x40 [ 36.578503][ C1] ? ip_rcv_core+0x75b/0xbd0 [ 36.583201][ C1] ip_list_rcv+0x3e4/0x430 [ 36.587728][ C1] ? __cfi_ip_list_rcv+0x10/0x10 [ 36.592686][ C1] ? __cfi_ip_list_rcv+0x10/0x10 [ 36.597682][ C1] __netif_receive_skb_list_core+0x5a8/0x7b0 [ 36.603695][ C1] ? set_rps_cpu+0x5e0/0x5e0 [ 36.608360][ C1] ? receive_buf+0x22a0/0x4890 [ 36.613149][ C1] netif_receive_skb_list_internal+0x7f8/0xaa0 [ 36.619415][ C1] ? __cfi____update_load_sum+0x10/0x10 [ 36.624992][ C1] ? __cfi_netif_receive_skb_list_internal+0x10/0x10 [ 36.631697][ C1] ? __kasan_check_read+0x11/0x20 [ 36.636915][ C1] ? resched_curr+0xac/0x3a0 [ 36.641563][ C1] ? virtqueue_get_buf_ctx+0x47a/0xcf0 [ 36.647056][ C1] ? detach_buf_split+0x890/0xa90 [ 36.652127][ C1] napi_complete_done+0x375/0x7a0 [ 36.657179][ C1] ? __cfi_napi_complete_done+0x10/0x10 [ 36.662747][ C1] ? virtqueue_enable_cb_prepare+0x21b/0x500 [ 36.668753][ C1] virtnet_poll+0x9a8/0x1150 [ 36.673364][ C1] ? __mod_timer+0x865/0xc00 [ 36.677976][ C1] ? __cfi_virtnet_poll+0x10/0x10 [ 36.683030][ C1] ? call_timer_fn+0x73/0x2a0 [ 36.687738][ C1] __napi_poll+0xcd/0x5d0 [ 36.692100][ C1] net_rx_action+0x4a3/0xa90 [ 36.696714][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 36.701848][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 36.707102][ C1] handle_softirqs+0x1d7/0x600 [ 36.711928][ C1] __irq_exit_rcu+0x52/0xf0 [ 36.716450][ C1] irq_exit_rcu+0x9/0x10 [ 36.720711][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 36.726378][ C1] [ 36.729336][ C1] [ 36.732290][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 36.738305][ C1] RIP: 0010:queued_read_lock_slowpath+0x112/0x350 [ 36.744871][ C1] Code: 00 00 49 89 df 49 c1 ef 03 43 0f b6 04 27 84 c0 74 35 89 d9 80 e1 07 80 c1 03 38 c1 7c 29 48 89 df e8 62 c9 b5 fc eb 1f f3 90 <43> 0f b6 04 27 84 c0 74 14 89 d9 80 e1 07 80 c1 03 38 c1 7c 08 48 [ 36.764509][ C1] RSP: 0018:ffffc9000bf1fb00 EFLAGS: 00000286 [ 36.770628][ C1] RAX: 00000000000002ff RBX: ffffffff8700a040 RCX: ffffffff85012733 [ 36.778653][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8700a040 [ 36.786651][ C1] RBP: ffffc9000bf1fb90 R08: ffffffff8700a043 R09: 1ffffffff0e01408 [ 36.794672][ C1] R10: dffffc0000000000 R11: fffffbfff0e01409 R12: dffffc0000000000 [ 36.802679][ C1] R13: 1ffff920017e3f60 R14: ffffffff8700a044 R15: 1ffffffff0e01408 [ 36.810690][ C1] ? queued_read_lock_slowpath+0xe3/0x350 [ 36.816459][ C1] ? __cfi_queued_read_lock_slowpath+0x10/0x10 [ 36.822646][ C1] _raw_read_lock+0x3a/0x40 [ 36.827255][ C1] do_wait+0x1f9/0x9c0 [ 36.831383][ C1] kernel_wait4+0x1d1/0x2b0 [ 36.835913][ C1] ? __cfi_kernel_wait4+0x10/0x10 [ 36.840961][ C1] ? __cfi_child_wait_callback+0x10/0x10 [ 36.846612][ C1] __x64_sys_wait4+0x163/0x230 [ 36.851396][ C1] ? __cfi___x64_sys_wait4+0x10/0x10 [ 36.856713][ C1] ? __kasan_check_write+0x14/0x20 [ 36.861853][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 36.867508][ C1] ? switch_fpu_return+0xe/0x10 [ 36.872376][ C1] x64_sys_call+0x927/0x9a0 [ 36.876900][ C1] do_syscall_64+0x4c/0xa0 [ 36.881349][ C1] ? clear_bhb_loop+0x30/0x80 [ 36.886050][ C1] ? clear_bhb_loop+0x30/0x80 [ 36.890761][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.896688][ C1] RIP: 0033:0x7f02a9d59017 [ 36.901138][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 36.920766][ C1] RSP: 002b:00007fff26cba0c0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 36.929205][ C1] RAX: ffffffffffffffda RBX: 000055555fdbc500 RCX: 00007f02a9d59017 [ 36.937199][ C1] RDX: 0000000040000001 RSI: 00007fff26cba14c RDI: ffffffffffffffff [ 36.945280][ C1] RBP: 00007fff26cba14c R08: 0000000000000000 R09: 0000000000000000 [ 36.953282][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 36.961274][ C1] R13: 00000000000927c0 R14: 0000000000008a2f R15: 00007fff26cba1a0 [ 36.969283][ C1] [ 36.979217][ T295] tipc: Node number set to 2130706433 [ 36.993051][ T679] CPU: 1 PID: 679 Comm: syz.2.170 Not tainted syzkaller #0 [ 37.000322][ T679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 37.010411][ T679] Call Trace: [ 37.013712][ T679] [ 37.016667][ T679] __dump_stack+0x21/0x24 [ 37.021024][ T679] dump_stack_lvl+0x110/0x170 [ 37.025724][ T679] ? __cfi_dump_stack_lvl+0x8/0x8 [ 37.030768][ T679] ? __cfi_futex_wake+0x10/0x10 [ 37.035732][ T679] dump_stack+0x15/0x24 [ 37.039929][ T679] should_fail_ex+0x3bf/0x510 [ 37.044644][ T679] ? getname_flags+0xba/0x510 [ 37.049357][ T679] __should_failslab+0xac/0xf0 [ 37.054159][ T679] should_failslab+0x9/0x20 [ 37.058713][ T679] kmem_cache_alloc+0x3b/0x320 [ 37.063518][ T679] getname_flags+0xba/0x510 [ 37.068053][ T679] getname+0x19/0x20 [ 37.071969][ T679] do_sys_openat2+0xeb/0x820 [ 37.076596][ T679] ? __se_sys_futex+0x136/0x310 [ 37.081473][ T679] ? do_sys_open+0xe0/0xe0 [ 37.085917][ T679] ? __this_cpu_preempt_check+0x13/0x20 [ 37.091493][ T679] ? xfd_validate_state+0x70/0x150 [ 37.096638][ T679] __x64_sys_openat+0x136/0x160 [ 37.101525][ T679] x64_sys_call+0x783/0x9a0 [ 37.106058][ T679] do_syscall_64+0x4c/0xa0 [ 37.110503][ T679] ? clear_bhb_loop+0x30/0x80 [ 37.115199][ T679] ? clear_bhb_loop+0x30/0x80 [ 37.119904][ T679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.125828][ T679] RIP: 0033:0x7f8055d9de99 [ 37.130261][ T679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.149886][ T679] RSP: 002b:00007f8056c9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 37.158321][ T679] RAX: ffffffffffffffda RBX: 00007f8056025fa0 RCX: 00007f8055d9de99 [ 37.166316][ T679] RDX: 0000000000000001 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 37.174310][ T679] RBP: 00007f8055e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 37.182303][ T679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.190291][ T679] R13: 00007f8056026038 R14: 00007f8056025fa0 R15: 00007ffd9af81318 [ 37.198289][ T679] [ 37.265822][ T693] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=693 comm=syz.4.178 [ 37.440130][ T715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=715 comm=syz.1.189 [ 37.456658][ T715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=715 comm=syz.1.189 [ 37.470438][ T715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=715 comm=syz.1.189 [ 37.777125][ T746] tipc: Enabling of bearer rejected, already enabled [ 37.786591][ T743] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 38.051338][ T295] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 38.234246][ T295] usb 5-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 38.243533][ T295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.251760][ T295] usb 5-1: Product: syz [ 38.256251][ T295] usb 5-1: Manufacturer: syz [ 38.260959][ T295] usb 5-1: SerialNumber: syz [ 38.886408][ T797] __nla_validate_parse: 5 callbacks suppressed [ 38.886428][ T797] netlink: 52 bytes leftover after parsing attributes in process `syz.1.226'. [ 38.963275][ T290] FAULT_INJECTION: forcing a failure. [ 38.963275][ T290] name fail_page_alloc, interval 1, probability 100, space 0, times 998 [ 38.976978][ T290] CPU: 0 PID: 290 Comm: syz-executor Not tainted syzkaller #0 [ 38.984505][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 38.994590][ T290] Call Trace: [ 38.997898][ T290] [ 39.000867][ T279] FAULT_INJECTION: forcing a failure. [ 39.000867][ T279] name fail_page_alloc, interval 1, probability 100, space 0, times 249 [ 39.000863][ T290] __dump_stack+0x21/0x24 [ 39.000896][ T290] dump_stack_lvl+0x110/0x170 [ 39.023492][ T290] ? __cfi_dump_stack_lvl+0x8/0x8 [ 39.028723][ T290] ? __kasan_record_aux_stack+0xb6/0xc0 [ 39.034300][ T290] ? call_rcu+0xcf/0xf50 [ 39.038576][ T290] ? __fput+0x66d/0x8f0 [ 39.042784][ T290] ? ____fput+0x15/0x20 [ 39.046964][ T290] ? exit_to_user_mode_loop+0x9b/0xb0 [ 39.052359][ T290] ? exit_to_user_mode_prepare+0x87/0xd0 [ 39.058015][ T290] ? syscall_exit_to_user_mode+0x1a/0x30 [ 39.063686][ T290] dump_stack+0x15/0x24 [ 39.067864][ T290] should_fail_ex+0x3bf/0x510 [ 39.072565][ T290] should_fail_alloc_page+0x61/0x90 [ 39.077803][ T290] prepare_alloc_pages+0x131/0x570 [ 39.082985][ T290] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 39.088229][ T290] __alloc_pages+0x15b/0x610 [ 39.092856][ T290] ? __cfi___alloc_pages+0x10/0x10 [ 39.098013][ T290] alloc_slab_page+0x6e/0xf0 [ 39.102643][ T290] new_slab+0x30b/0x3e0 [ 39.106880][ T290] ___slab_alloc+0x70f/0xb70 [ 39.111512][ T290] ? getname_flags+0xba/0x510 [ 39.116217][ T290] __slab_alloc+0x5e/0xa0 [ 39.120582][ T290] ? getname_flags+0xba/0x510 [ 39.125280][ T290] ? getname_flags+0xba/0x510 [ 39.129982][ T290] kmem_cache_alloc+0x1a8/0x320 [ 39.134867][ T290] ? getname_flags+0xba/0x510 [ 39.139560][ T290] ? fput+0x15b/0x1a0 [ 39.143564][ T290] getname_flags+0xba/0x510 [ 39.148118][ T290] ? debug_smp_processor_id+0x17/0x20 [ 39.153543][ T290] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 39.159638][ T290] __x64_sys_unlink+0x3c/0x50 [ 39.164342][ T290] x64_sys_call+0x958/0x9a0 [ 39.168915][ T290] do_syscall_64+0x4c/0xa0 [ 39.173362][ T290] ? clear_bhb_loop+0x30/0x80 [ 39.178071][ T290] ? clear_bhb_loop+0x30/0x80 [ 39.182774][ T290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.188701][ T290] RIP: 0033:0x7f8055d9cf87 [ 39.193140][ T290] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 39.212769][ T290] RSP: 002b:00007ffd9af7f498 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 39.221231][ T290] RAX: ffffffffffffffda RBX: 0000000000003fd8 RCX: 00007f8055d9cf87 [ 39.229247][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffd9af7f550 [ 39.237261][ T290] RBP: 00007ffd9af7f550 R08: 0000000000000000 R09: 0000000000000000 [ 39.245265][ T290] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd9af80640 [ 39.253271][ T290] R13: 00007f8055e3330a R14: 000055557a7d54e8 R15: 0000000000000006 [ 39.261286][ T290] [ 39.264678][ T290] SLUB: Unable to allocate memory on node -1, gfp=0xcc0(GFP_KERNEL) [ 39.272731][ T290] cache: names_cache, object size: 4096, buffer size: 4352, default order: 3, min order: 1 [ 39.282961][ T290] names_cache debugging increased min order, use slub_debug=O to disable. [ 39.283135][ T279] CPU: 1 PID: 279 Comm: syz-executor Not tainted syzkaller #0 [ 39.291776][ T290] node 0: slabs: 5753, objs: 40271, free: 0 [ 39.299142][ T279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 39.299156][ T279] Call Trace: [ 39.299163][ T279] [ 39.321529][ T279] __dump_stack+0x21/0x24 [ 39.325887][ T279] dump_stack_lvl+0x110/0x170 [ 39.330593][ T279] ? __cfi_dump_stack_lvl+0x8/0x8 [ 39.335643][ T279] dump_stack+0x15/0x24 [ 39.339846][ T279] should_fail_ex+0x3bf/0x510 [ 39.344688][ T279] should_fail_alloc_page+0x61/0x90 [ 39.349928][ T279] prepare_alloc_pages+0x131/0x570 [ 39.355107][ T279] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 39.360350][ T279] __alloc_pages+0x15b/0x610 [ 39.365004][ T279] ? __cfi___alloc_pages+0x10/0x10 [ 39.370156][ T279] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 39.375646][ T279] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 39.381596][ T279] ? irqentry_exit+0x37/0x40 [ 39.386220][ T279] __get_free_pages+0xe/0x30 [ 39.390843][ T279] __pollwait+0x12e/0x3e0 [ 39.395202][ T279] ? __cfi___pollwait+0x10/0x10 [ 39.400180][ T279] pipe_poll+0x100/0x4f0 [ 39.404436][ T279] ? __fdget+0x15b/0x220 [ 39.408690][ T279] ? __cfi_pipe_poll+0x10/0x10 [ 39.413463][ T279] do_select+0xde6/0x16b0 [ 39.417826][ T279] ? core_sys_select+0x700/0x700 [ 39.422787][ T279] ? __tcp_push_pending_frames+0xd6/0x2f0 [ 39.428531][ T279] ? __cfi___pollwait+0x10/0x10 [ 39.433402][ T279] ? __cfi_pollwake+0x10/0x10 [ 39.438095][ T279] ? __cfi_pollwake+0x10/0x10 [ 39.442815][ T279] ? __cfi_pollwake+0x10/0x10 [ 39.447513][ T279] ? __cfi_pollwake+0x10/0x10 [ 39.452219][ T279] ? __cfi_pollwake+0x10/0x10 [ 39.456914][ T279] ? __cfi_pollwake+0x10/0x10 [ 39.461616][ T279] ? __cfi_pollwake+0x10/0x10 [ 39.466322][ T279] ? __cfi_pollwake+0x10/0x10 [ 39.471027][ T279] ? __cfi_pollwake+0x10/0x10 [ 39.475732][ T279] ? kill_fasync+0x1d0/0x210 [ 39.480362][ T279] ? pipe_write+0x14ed/0x1960 [ 39.485074][ T279] core_sys_select+0x4f8/0x700 [ 39.489877][ T279] ? __cfi_core_sys_select+0x10/0x10 [ 39.495185][ T279] ? __cfi_set_user_sigmask+0x10/0x10 [ 39.500584][ T279] __se_sys_pselect6+0x274/0x340 [ 39.505539][ T279] ? __x64_sys_pselect6+0x100/0x100 [ 39.510754][ T279] ? ksys_write+0x1eb/0x260 [ 39.515304][ T279] ? __cfi_ksys_write+0x10/0x10 [ 39.520168][ T279] __x64_sys_pselect6+0xe5/0x100 [ 39.525146][ T279] x64_sys_call+0x1b0/0x9a0 [ 39.529690][ T279] do_syscall_64+0x4c/0xa0 [ 39.534153][ T279] ? clear_bhb_loop+0x30/0x80 [ 39.538846][ T279] ? clear_bhb_loop+0x30/0x80 [ 39.543541][ T279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.549454][ T279] RIP: 0033:0x7fa051b59017 [ 39.553884][ T279] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 39.573505][ T279] RSP: 002b:00007ffff0ad6270 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 39.581943][ T279] RAX: ffffffffffffffda RBX: 000055555de25500 RCX: 00007fa051b59017 [ 39.589931][ T279] RDX: 0000000000000000 RSI: 00007ffff0ad6390 RDI: 0000000000000023 [ 39.597920][ T279] RBP: 00007ffff0ad67f0 R08: 00007ffff0ad62b0 R09: 00007ffff0ad62c0 [ 39.605909][ T279] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffff0ad6630 [ 39.613894][ T279] R13: 00007ffff0ad6420 R14: 585858582e7a7973 R15: 00007ffff0ad6860 [ 39.621882][ T279] [ 39.632054][ T801] tipc: Enabling of bearer rejected, already enabled [ 39.641427][ T28] kauditd_printk_skb: 7 callbacks suppressed SYZFAIL: pselect failed (errno 12: Cannot allocate memory) [ 39.641441][ T28] audit: type=1400 audit(1785172341.762:155): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[14576]" dev="pipefs" ino=14576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.646667][ T290] bridge0: port 3(syz_tun) entered disabled state [ 39.734553][ T290] device syz_tun left promiscuous mode [ 39.740097][ T290] bridge0: port 3(syz_tun) entered disabled state [ 39.786397][ T289] bridge0: port 3(syz_tun) entered disabled state [ 39.812139][ T289] device syz_tun left promiscuous mode [ 39.817691][ T289] bridge0: port 3(syz_tun) entered disabled state [ 39.863110][ T287] bridge0: port 3(syz_tun) entered disabled state [ 39.870767][ T287] device syz_tun left promiscuous mode [ 39.876948][ T287] bridge0: port 3(syz_tun) entered disabled state [ 39.886829][ T801] bridge0: port 3(syz_tun) entered disabled state [ 39.894816][ T801] device syz_tun left promiscuous mode [ 39.900407][ T801] bridge0: port 3(syz_tun) entered disabled state [ 39.910147][ T10] tipc: Disabling bearer [ 39.915654][ T10] tipc: Left network mode [ 39.921510][ T742] bridge0: port 3(syz_tun) entered disabled state [ 39.929513][ T742] device syz_tun left promiscuous mode [ 39.935641][ T742] bridge0: port 3(syz_tun) entered disabled state [ 39.993978][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 40.010889][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 40.441872][ T10] device bridge_slave_1 left promiscuous mode [ 40.448078][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.455684][ T10] device bridge_slave_0 left promiscuous mode [ 40.461889][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.469799][ T10] device veth1_macvtap left promiscuous mode [ 40.475999][ T10] device veth0_vlan left promiscuous mode [ 40.541869][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 40.771572][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 40.783008][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 40.793742][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 40.804677][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 40.815679][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 40.826741][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 40.837896][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 40.848935][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 40.860056][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 40.871105][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 40.882228][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 40.893327][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 40.905215][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 40.916019][ T10] tipc: Disabling bearer [ 40.916386][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 40.922552][ T10] tipc: Left network mode [ 40.932770][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 40.947660][ T10] tipc: Disabling bearer [ 40.948039][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 40.953706][ T10] tipc: Left network mode [ 40.964434][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 40.979023][ T10] tipc: Disabling bearer [ 40.979241][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 40.995229][ T10] tipc: Disabling bearer [ 41.000562][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 41.002446][ T10] tipc: Left network mode [ 41.012216][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 41.026680][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 41.037908][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 41.049386][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 41.060377][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 41.071392][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 41.082389][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 41.094990][ T295] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 41.111993][ T295] ax88179_178a 5-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, aa:d6:5b:65:ed:78 [ 41.134540][ T28] audit: type=1400 audit(1785172343.252:156): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 41.161297][ T295] usb 5-1: USB disconnect, device number 2 [ 41.167907][ T295] ax88179_178a 5-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 41.179835][ T28] audit: type=1400 audit(1785172343.252:157): avc: denied { read } for pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=1381 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.201473][ T28] audit: type=1400 audit(1785172343.252:158): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1381 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.228592][ T28] audit: type=1400 audit(1785172343.252:159): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1381 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.303397][ T28] audit: type=1400 audit(1785172343.422:160): avc: denied { create } for pid=805 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.333973][ T28] audit: type=1400 audit(1785172343.422:161): avc: denied { write } for pid=805 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1388 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.360617][ T28] audit: type=1400 audit(1785172343.422:162): avc: denied { append } for pid=805 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1388 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.385802][ T28] audit: type=1400 audit(1785172343.492:163): avc: denied { unlink } for pid=816 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1388 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.673012][ T10] device bridge_slave_1 left promiscuous mode [ 41.679185][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.686729][ T10] device bridge_slave_0 left promiscuous mode [ 41.692871][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.700775][ T10] device bridge_slave_1 left promiscuous mode [ 41.707130][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.714627][ T10] device bridge_slave_0 left promiscuous mode [ 41.720746][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.728878][ T10] device bridge_slave_1 left promiscuous mode [ 41.735035][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.742612][ T10] device bridge_slave_0 left promiscuous mode [ 41.748724][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.756674][ T10] device bridge_slave_1 left promiscuous mode [ 41.763081][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.770478][ T10] device bridge_slave_0 left promiscuous mode [ 41.776734][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.785401][ T10] device veth1_macvtap left promiscuous mode [ 41.791518][ T10] device veth0_vlan left promiscuous mode [ 41.797607][ T10] device veth1_macvtap left promiscuous mode [ 41.803704][ T10] device veth0_vlan left promiscuous mode [ 41.809777][ T10] device veth1_macvtap left promiscuous mode [ 41.815865][ T10] device veth0_vlan left promiscuous mode [ 41.822134][ T10] device veth1_macvtap left promiscuous mode [ 41.828152][ T10] device veth0_vlan left promiscuous mode