last executing test programs: 1.886716119s ago: executing program 4 (id=239): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={r1, r3, 0xa, 0x0, @void}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 1.857288249s ago: executing program 4 (id=241): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) 1.856785029s ago: executing program 3 (id=243): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) 1.856285949s ago: executing program 4 (id=244): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x7fffffff, 0x4) 1.80892799s ago: executing program 3 (id=245): process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000080)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1000007e, 0x0) 1.80871107s ago: executing program 4 (id=247): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x22443, 0x0) r1 = eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x1, 0x1, r0, 0x0, 0x0, 0xfffffffffffffbff, 0x0, 0x1, r1}]) 1.80864476s ago: executing program 3 (id=248): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000aac"], 0x1c}}, 0x20000052) 1.754270161s ago: executing program 3 (id=251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r1, 0x309, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40040094}, 0x8880) 1.754129481s ago: executing program 3 (id=253): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0xfffffffe, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x67, 0x7, 0x80000000}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x44}}, 0x0) 1.753958481s ago: executing program 3 (id=255): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r2, 0x0, 0x40000460e, 0x5) 1.664485211s ago: executing program 4 (id=258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb8}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 1.664266162s ago: executing program 4 (id=260): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000780)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(0x0, 0x3, 0xfffffbfd, 0x0, 0x0, 0x93fffffa) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2026) 1.280660076s ago: executing program 0 (id=271): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) 1.245802946s ago: executing program 0 (id=272): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getresgid(&(0x7f0000000240), 0xffffffffffffffff, 0x0) 1.195348987s ago: executing program 0 (id=273): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0xe, 0xdd, 0x0, 0x1, [@generic="f236b6103235f063467b"]}]}]}, 0x30}}, 0x0) 1.112597838s ago: executing program 0 (id=274): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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") r0 = socket(0x1e, 0x5, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000400)={&(0x7f0000000380), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x8041) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143042, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f0000000280)=ANY=[@ANYBLOB='utf8=0,uni_xlate=0,shortname=winnt,rodir,codepage=862,shortname=lower,quiet,shortname=winnt,shortname=win95,iocharset=cp932,rodir,\x00ni_xlate=1,nonumtail=0,shortname=winnt,nonumtail=0,\x00'], 0x25, 0x365, &(0x7f0000000a00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 564.609374ms ago: executing program 2 (id=289): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 564.415214ms ago: executing program 2 (id=290): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 545.364724ms ago: executing program 2 (id=292): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) 535.749764ms ago: executing program 1 (id=293): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f00000004c0)=[{0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 480.707955ms ago: executing program 1 (id=294): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{&(0x7f0000003c40)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xfffffff9, @local, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@hoplimit={{0x14, 0x29, 0x34, 0x3ff}}], 0x18}}], 0x2, 0x1) 480.566725ms ago: executing program 1 (id=295): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc1400000f4788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 480.499885ms ago: executing program 2 (id=296): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/17, 0x11}, 0x80000000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 475.354645ms ago: executing program 1 (id=297): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884f01a517, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000db1000/0x1000)=nil, &(0x7f0000631000/0x2000)=nil, 0x1000}) 437.358895ms ago: executing program 2 (id=298): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0b, 0x14, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x4, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14"], 0x48}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 356.571526ms ago: executing program 2 (id=299): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 306.826537ms ago: executing program 1 (id=300): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0x3bf}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_win95}, {@fat=@nfs_stale_rw}, {@fat=@discard}, {@fat=@debug}, {@fat=@dos1xfloppy}, {@fat=@sys_immutable}, {@shortname_lower}]}, 0x0, 0x2a5, &(0x7f0000000540)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000001900)=""/4079, 0xfef, 0x66) 268.473557ms ago: executing program 0 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[], 0x324}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4044010) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x658}, 0x1, 0x0, 0x0, 0x4801}, 0x4040005) 3.22538ms ago: executing program 1 (id=302): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 0s ago: executing program 0 (id=303): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x18, 0xde, 0x0, 0x1, [@typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x2c}}, 0x20040040) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 15.895793][ T24] kauditd_printk_skb: 25 callbacks suppressed [ 15.895802][ T24] audit: type=1400 audit(1778095598.639:59): avc: denied { transition } for pid=217 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.905403][ T24] audit: type=1400 audit(1778095598.639:60): avc: denied { noatsecure } for pid=217 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.912751][ T24] audit: type=1400 audit(1778095598.639:61): avc: denied { write } for pid=217 comm="sh" path="pipe:[12975]" dev="pipefs" ino=12975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.921417][ T24] audit: type=1400 audit(1778095598.639:62): avc: denied { rlimitinh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.941491][ T24] audit: type=1400 audit(1778095598.639:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. [ 22.844940][ T24] audit: type=1400 audit(1778095605.589:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.845989][ T271] cgroup: Unknown subsys name 'net' [ 22.868318][ T24] audit: type=1400 audit(1778095605.589:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.897301][ T24] audit: type=1400 audit(1778095605.619:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.897517][ T271] cgroup: Unknown subsys name 'devices' [ 23.014601][ T271] cgroup: Unknown subsys name 'hugetlb' [ 23.020343][ T271] cgroup: Unknown subsys name 'rlimit' [ 23.188370][ T24] audit: type=1400 audit(1778095605.929:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.212466][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.222917][ T24] audit: type=1400 audit(1778095605.929:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.248011][ T24] audit: type=1400 audit(1778095605.929:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.272314][ T24] audit: type=1400 audit(1778095605.959:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.272439][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.298169][ T24] audit: type=1400 audit(1778095605.959:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.335568][ T24] audit: type=1400 audit(1778095605.989:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.363766][ T24] audit: type=1400 audit(1778095605.989:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.833659][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.841768][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.851175][ T280] device bridge_slave_0 entered promiscuous mode [ 23.859836][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.868072][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.876989][ T280] device bridge_slave_1 entered promiscuous mode [ 23.905181][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.912716][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.920402][ T279] device bridge_slave_0 entered promiscuous mode [ 23.928328][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.935744][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.943921][ T279] device bridge_slave_1 entered promiscuous mode [ 24.020882][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.028777][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.038086][ T281] device bridge_slave_0 entered promiscuous mode [ 24.047020][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.055432][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.062997][ T281] device bridge_slave_1 entered promiscuous mode [ 24.098001][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.106010][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.113911][ T282] device bridge_slave_0 entered promiscuous mode [ 24.121228][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.128984][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.137346][ T283] device bridge_slave_0 entered promiscuous mode [ 24.148296][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.156225][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.164486][ T283] device bridge_slave_1 entered promiscuous mode [ 24.174452][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.181953][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.189596][ T282] device bridge_slave_1 entered promiscuous mode [ 24.304427][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.311584][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.318908][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.327088][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.340527][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.348760][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.358887][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.366056][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.399731][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.407178][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.415378][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.422572][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.434689][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.442183][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.449500][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.457302][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.476683][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.484111][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.492561][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.499816][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.514110][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.521882][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.531322][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.539515][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.549733][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.557766][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.568295][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.577931][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.587517][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.595591][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.605167][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.615332][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.647544][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.655870][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.664103][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.671674][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.680029][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.689667][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.699072][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.708517][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.718090][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.726588][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.735137][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.744572][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.753641][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.774353][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.782973][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.792835][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.809823][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.819059][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.827955][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.835959][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.845485][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.857760][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.867891][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.878825][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.890044][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.902710][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.913049][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.923674][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.931896][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.942374][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.952538][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.962584][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.994624][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.004194][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.016906][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.027857][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.036643][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.048779][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.060372][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.072148][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.083394][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.097099][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.106748][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.115547][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.123944][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.133200][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.142589][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.153306][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.164778][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.174381][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.183948][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.193645][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.201942][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.213487][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.224368][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.235161][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.245867][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.255592][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.265159][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.275326][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.285500][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.295254][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.313903][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.323470][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.335454][ T280] device veth0_vlan entered promiscuous mode [ 25.352068][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.360741][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.370044][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.379347][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.397813][ T279] device veth0_vlan entered promiscuous mode [ 25.405439][ T280] device veth1_macvtap entered promiscuous mode [ 25.412838][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.422053][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.431403][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.440587][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.449819][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.459960][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.470114][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.479175][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.487661][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.497487][ T282] device veth0_vlan entered promiscuous mode [ 25.508650][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.517834][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.529425][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.540320][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.557146][ T279] device veth1_macvtap entered promiscuous mode [ 25.568877][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.580529][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.591662][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.601533][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.612874][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.623748][ T282] device veth1_macvtap entered promiscuous mode [ 25.632613][ T281] device veth0_vlan entered promiscuous mode [ 25.649606][ T283] device veth0_vlan entered promiscuous mode [ 25.657043][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.666773][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.676681][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.686878][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.697076][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.707588][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.716907][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.730141][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.740695][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.750760][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.760146][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.768646][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.789091][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.798491][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.798715][ T280] request_module fs-gadgetfs succeeded, but still no fs? [ 25.814736][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.823511][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.832510][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.843530][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.853376][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.863932][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.879497][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.888278][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.901976][ T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.902323][ T281] device veth1_macvtap entered promiscuous mode [ 25.939775][ T283] device veth1_macvtap entered promiscuous mode [ 25.950832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.961828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.973007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.983074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.032286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.048283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.058183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.078365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.088406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.098926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.109395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.119123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.193683][ T330] ====================================================== [ 26.193683][ T330] WARNING: the mand mount option is being deprecated and [ 26.193683][ T330] will be removed in v5.15! [ 26.193683][ T330] ====================================================== [ 26.639259][ T330] FAT-fs (loop1): Directory bread(block 64) failed [ 26.653279][ T330] FAT-fs (loop1): Directory bread(block 65) failed [ 26.660603][ T330] FAT-fs (loop1): Directory bread(block 66) failed [ 26.671957][ T354] tipc: Started in network mode [ 26.675572][ T330] FAT-fs (loop1): Directory bread(block 67) failed [ 26.681340][ T354] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 26.696397][ T354] tipc: Enabling of bearer rejected, failed to enable media [ 26.705148][ T356] FAT-fs (loop3): bogus number of FAT sectors [ 26.719501][ T338] attempt to access beyond end of device [ 26.719501][ T338] loop4: rw=2049, want=234, limit=128 [ 26.723018][ T359] netlink: 'syz.2.23': attribute type 13 has an invalid length. [ 26.739932][ T330] FAT-fs (loop1): Directory bread(block 68) failed [ 26.742289][ T356] FAT-fs (loop3): Can't find a valid FAT filesystem [ 26.755041][ T330] FAT-fs (loop1): Directory bread(block 69) failed [ 26.758082][ T338] attempt to access beyond end of device [ 26.758082][ T338] loop4: rw=2049, want=1041, limit=128 [ 26.762115][ T330] FAT-fs (loop1): Directory bread(block 70) failed [ 26.781823][ T330] FAT-fs (loop1): Directory bread(block 71) failed [ 26.784210][ T338] attempt to access beyond end of device [ 26.784210][ T338] loop4: rw=0, want=242, limit=128 [ 26.790023][ T330] FAT-fs (loop1): Directory bread(block 72) failed [ 26.805224][ T334] attempt to access beyond end of device [ 26.805224][ T334] loop4: rw=0, want=242, limit=128 [ 26.809551][ T330] FAT-fs (loop1): Directory bread(block 73) failed [ 26.820624][ T334] Buffer I/O error on dev loop4, logical block 241, async page read [ 26.835660][ T334] attempt to access beyond end of device [ 26.835660][ T334] loop4: rw=0, want=243, limit=128 [ 26.847851][ T334] Buffer I/O error on dev loop4, logical block 242, async page read [ 26.860362][ T334] attempt to access beyond end of device [ 26.860362][ T334] loop4: rw=0, want=244, limit=128 [ 26.876443][ T334] Buffer I/O error on dev loop4, logical block 243, async page read [ 26.886817][ T360] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 26.902831][ T334] attempt to access beyond end of device [ 26.902831][ T334] loop4: rw=0, want=245, limit=128 [ 26.932168][ T334] Buffer I/O error on dev loop4, logical block 244, async page read [ 26.948852][ T334] attempt to access beyond end of device [ 26.948852][ T334] loop4: rw=0, want=246, limit=128 [ 26.961835][ T334] Buffer I/O error on dev loop4, logical block 245, async page read [ 26.975005][ T334] attempt to access beyond end of device [ 26.975005][ T334] loop4: rw=0, want=247, limit=128 [ 26.989292][ T334] Buffer I/O error on dev loop4, logical block 246, async page read [ 26.990078][ T362] 9pnet: Insufficient options for proto=fd [ 26.999433][ T334] attempt to access beyond end of device [ 26.999433][ T334] loop4: rw=0, want=248, limit=128 [ 27.051136][ T334] Buffer I/O error on dev loop4, logical block 247, async page read [ 27.060063][ T334] Buffer I/O error on dev loop4, logical block 248, async page read [ 27.069934][ T334] Buffer I/O error on dev loop4, logical block 241, async page read [ 27.079444][ T334] Buffer I/O error on dev loop4, logical block 242, async page read [ 27.093493][ T368] xt_TCPMSS: Only works on TCP SYN packets [ 27.156776][ T370] EXT4-fs (loop1): Ignoring removed oldalloc option [ 27.191658][ T370] EXT4-fs (loop1): 1 truncate cleaned up [ 27.220717][ T370] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005, [ 27.281362][ T404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 27.292810][ T406] capability: warning: `syz.2.45' uses deprecated v2 capabilities in a way that may be insecure [ 27.325184][ T409] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 27.427471][ T425] EXT4-fs (loop1): Ignoring removed bh option [ 27.460163][ T425] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable, [ 27.673538][ T448] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 27.737282][ T448] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 3 (only 1 groups) [ 27.906509][ T24] kauditd_printk_skb: 79 callbacks suppressed [ 27.906541][ T24] audit: type=1400 audit(1778095610.649:153): avc: denied { ioctl } for pid=470 comm="syz.1.72" path="socket:[16148]" dev="sockfs" ino=16148 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.932203][ T478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.75'. [ 28.405309][ T496] netlink: 'syz.4.82': attribute type 10 has an invalid length. [ 28.414450][ T496] netlink: 40 bytes leftover after parsing attributes in process `syz.4.82'. [ 28.425002][ T496] device wg0 entered promiscuous mode [ 28.456026][ T24] audit: type=1400 audit(1778095611.199:154): avc: denied { setopt } for pid=488 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 28.786930][ T24] audit: type=1400 audit(1778095611.529:155): avc: denied { name_bind } for pid=506 comm="syz.3.87" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 28.812095][ T24] audit: type=1400 audit(1778095611.529:156): avc: denied { node_bind } for pid=506 comm="syz.3.87" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 28.916431][ T510] EXT4-fs error (device loop1): ext4_iget_extra_inode:4685: inode #15: comm syz.1.88: corrupted in-inode xattr [ 28.924908][ T517] netlink: 'syz.3.90': attribute type 12 has an invalid length. [ 28.930381][ T510] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.88: couldn't read orphan inode 15 (err -117) [ 28.951917][ T24] audit: type=1400 audit(1778095611.689:157): avc: denied { connect } for pid=516 comm="syz.3.90" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.975954][ T24] audit: type=1400 audit(1778095611.689:158): avc: denied { write } for pid=516 comm="syz.3.90" laddr=172.20.20.170 lport=256 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.003737][ T510] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 29.021319][ T24] audit: type=1400 audit(1778095611.759:159): avc: denied { create } for pid=509 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.021504][ T510] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.88: bg 0: block 465: padding at end of block bitmap is not set [ 29.055205][ T24] audit: type=1400 audit(1778095611.799:160): avc: denied { create } for pid=518 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 29.060530][ T510] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 29.082066][ T24] audit: type=1400 audit(1778095611.829:161): avc: denied { write } for pid=518 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 29.089758][ T510] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.88: invalid indirect mapped block 234881024 (level 0) [ 29.204943][ T533] fuse: Bad value for 'fd' [ 29.228404][ T537] FAT-fs (loop3): Unrecognized mount option "18446744073709551615" or missing value [ 29.238454][ T24] audit: type=1400 audit(1778095611.969:162): avc: denied { name_bind } for pid=539 comm="syz.2.101" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 29.324279][ T552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.106'. [ 29.346512][ T555] tipc: Started in network mode [ 29.352120][ T555] tipc: Own node identity 3208e83db5c9, cluster identity 4711 [ 29.360142][ T555] tipc: Enabled bearer , priority 0 [ 29.369391][ T555] tipc: Resetting bearer [ 29.377185][ T554] tipc: Disabling bearer [ 29.509188][ T564] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 29.522808][ T564] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.541772][ T564] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:404: inode #2: comm syz.1.111: No space for directory leaf checksum. Please run e2fsck -D. [ 29.561785][ T564] EXT4-fs error (device loop1): htree_dirblock_to_tree:1063: inode #2: comm syz.1.111: Directory block failed checksum [ 29.729917][ T586] tipc: Enabled bearer , priority 0 [ 29.740351][ T586] tipc: Resetting bearer [ 29.747418][ T585] tipc: Disabling bearer [ 29.803232][ T53] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.851578][ T590] EXT4-fs (loop1): filesystem is read-only [ 29.857901][ T590] EXT4-fs (loop1): Unsupported encryption level 6 [ 30.029763][ T610] tipc: Enabled bearer , priority 0 [ 30.038136][ T610] tipc: Resetting bearer [ 30.043173][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 30.049502][ T609] tipc: Disabling bearer [ 30.124472][ T612] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,norecovery,min_batch_time=0x0000000010000005,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,inode_readahead_blks=0x0000000,errors=continue [ 30.173867][ T53] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.251479][ T642] netlink: 'syz.2.146': attribute type 30 has an invalid length. [ 30.272122][ T646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'. [ 30.378626][ T671] netlink: 7 bytes leftover after parsing attributes in process `syz.2.160'. [ 30.445580][ T682] overlayfs: failed to clone upperpath [ 30.452643][ T682] overlayfs: failed to clone upperpath [ 31.433557][ T53] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.443321][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.478585][ T53] usb 5-1: Product: Ц [ 31.564613][ T53] usb 5-1: Manufacturer: 꾪砧胄셹㮦␊裟㝎龙ᯞꮃ绗㙅䧬䵫鳿쥺좷俞ﲳ솘絈껀⍔裰ꔔ␒䷠渙쥐̸୯≢컐감ⱸ▏䜫廊柅➌᧨嬩攽 [ 31.695516][ T706] EXT4-fs (loop0): Ignoring removed nobh option [ 31.704256][ T706] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 31.712917][ T706] EXT4-fs error (device loop0): ext4_clear_blocks:880: inode #13: comm syz.0.174: attempt to clear invalid blocks 1 len 1 [ 31.726753][ T706] EXT4-fs (loop0): Remounting filesystem read-only [ 31.787177][ T706] EXT4-fs error (device loop0): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 31.836504][ T706] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.174: invalid indirect mapped block 1819239214 (level 0) [ 31.851065][ T706] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.174: invalid indirect mapped block 1819239214 (level 1) [ 31.866607][ T706] EXT4-fs (loop0): 1 truncate cleaned up [ 31.872344][ T706] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=.. [ 31.890690][ T53] usb 5-1: bad CDC descriptors [ 31.898257][ T706] EXT4-fs error (device loop0): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz.0.174: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 31.920357][ T706] EXT4-fs (loop0): Remounting filesystem read-only [ 32.030848][ T722] FAT-fs (loop0): Directory bread(block 64) failed [ 32.038660][ T722] FAT-fs (loop0): Directory bread(block 65) failed [ 32.046024][ T725] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodelalloc,noquota,resgid=0x0000000000000000,jqfmt=vfsv0,barrier,,errors=continue [ 32.046242][ T722] FAT-fs (loop0): Directory bread(block 66) failed [ 32.063364][ T725] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.070242][ T722] FAT-fs (loop0): Directory bread(block 67) failed [ 32.088157][ T722] FAT-fs (loop0): Directory bread(block 68) failed [ 32.099079][ T722] FAT-fs (loop0): Directory bread(block 69) failed [ 32.106784][ T722] FAT-fs (loop0): Directory bread(block 70) failed [ 32.114294][ T722] FAT-fs (loop0): Directory bread(block 71) failed [ 32.122014][ T722] FAT-fs (loop0): Directory bread(block 72) failed [ 32.130926][ T722] FAT-fs (loop0): Directory bread(block 73) failed [ 32.144146][ T570] EXT4-fs (loop4): Test dummy encryption mode enabled [ 32.156440][ T570] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,discard,test_dummy_encryption=v1,,errors=continue [ 32.172123][ T570] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.184254][ T53] usb 5-1: USB disconnect, device number 2 [ 32.335246][ T734] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 32.373406][ T739] EXT4-fs (loop0): Test dummy encryption mode enabled [ 32.380613][ T739] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 32.390742][ T739] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 32.390742][ T739] [ 32.401266][ T739] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,usrquota,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000ffffffff,nodiscard,test_dummy_encryption,,errors=continue [ 32.491262][ T752] fuse: Bad value for 'fd' [ 32.522816][ T760] netlink: 388 bytes leftover after parsing attributes in process `syz.2.191'. [ 32.544913][ T764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.193'. [ 32.753653][ T769] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 32.974397][ T24] kauditd_printk_skb: 32 callbacks suppressed [ 32.974407][ T24] audit: type=1400 audit(1778095615.709:195): avc: denied { setopt } for pid=785 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.010783][ T794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 33.019667][ T794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.205'. [ 33.048467][ T24] audit: type=1400 audit(1778095615.789:196): avc: denied { sys_admin } for pid=797 comm="syz.4.207" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 33.410089][ T24] audit: type=1400 audit(1778095616.149:197): avc: denied { read } for pid=803 comm="syz.3.209" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.431849][ T24] audit: type=1400 audit(1778095616.169:198): avc: denied { setopt } for pid=805 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.454009][ T24] audit: type=1400 audit(1778095616.169:199): avc: denied { read } for pid=805 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.532246][ T819] input: syz0 as /devices/virtual/input/input6 [ 33.541967][ T24] audit: type=1400 audit(1778095616.279:200): avc: denied { read } for pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=552 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.546960][ T822] tunl0: Caught tx_queue_len zero misconfig [ 33.577159][ T24] audit: type=1400 audit(1778095616.279:201): avc: denied { open } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=552 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.619206][ T24] audit: type=1400 audit(1778095616.279:202): avc: denied { ioctl } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=552 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.657673][ T826] tipc: Enabling of bearer rejected, failed to enable media [ 33.921034][ T837] tipc: Enabling of bearer rejected, failed to enable media [ 34.037580][ T838] tipc: New replicast peer: 255.255.255.255 [ 34.044858][ T838] tipc: Enabled bearer , priority 10 [ 34.129237][ T24] audit: type=1400 audit(1778095616.869:203): avc: denied { listen } for pid=835 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.170718][ T24] audit: type=1400 audit(1778095616.909:204): avc: denied { write } for pid=835 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.186503][ T846] cgroup: release_agent respecified [ 34.198363][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 34.208339][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 34.230567][ T857] netlink: 'syz.4.232': attribute type 6 has an invalid length. [ 34.239280][ T857] netlink: 'syz.4.232': attribute type 7 has an invalid length. [ 34.247289][ T857] netlink: 'syz.4.232': attribute type 8 has an invalid length. [ 34.255780][ T859] tipc: Enabling of bearer rejected, failed to enable media [ 34.310663][ T870] binder: 869:870 ioctl c0306201 200000000040 returned -11 [ 34.339573][ T876] tipc: Started in network mode [ 34.349088][ T876] tipc: Own node identity 66c618b20f9, cluster identity 4711 [ 34.360003][ T876] tipc: Enabled bearer , priority 0 [ 34.382150][ T876] device syzkaller0 entered promiscuous mode [ 34.403754][ T876] tipc: Resetting bearer [ 34.411081][ T873] tipc: Resetting bearer [ 34.418535][ T873] tipc: Disabling bearer [ 34.745324][ T931] tipc: Enabled bearer , priority 0 [ 34.757452][ T931] device syzkaller0 entered promiscuous mode [ 34.771855][ T931] tipc: Resetting bearer [ 34.788609][ T930] tipc: Resetting bearer [ 34.799916][ T930] tipc: Disabling bearer [ 34.916542][ T940] capability: warning: `syz.0.271' uses 32-bit capabilities (legacy support in use) [ 35.184060][ T300] tipc: 32-bit node address hash set to 3de8c187 [ 35.699547][ T992] device syzkaller0 entered promiscuous mode [ 35.775821][ T999] Zero length message leads to an empty skb [ 35.989084][ T1006] tipc: New replicast peer: 255.255.255.255 [ 35.995665][ T1006] tipc: Enabled bearer , priority 10 [ 36.233789][ T1011] ================================================================== [ 36.242105][ T1011] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 36.251500][ T1011] Read of size 1 at addr ffff8881275213d8 by task syz.1.302/1011 [ 36.259500][ T1011] [ 36.261840][ T1011] CPU: 0 PID: 1011 Comm: syz.1.302 Not tainted syzkaller #0 [ 36.269137][ T1011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 36.279434][ T1011] Call Trace: [ 36.282831][ T1011] __dump_stack+0x21/0x24 [ 36.287253][ T1011] dump_stack_lvl+0x1a7/0x208 [ 36.292083][ T1011] ? show_regs_print_info+0x18/0x18 [ 36.297369][ T1011] ? thaw_kernel_threads+0x220/0x220 [ 36.303205][ T1011] ? unwind_get_return_address+0x4d/0x90 [ 36.309016][ T1011] print_address_description+0x7f/0x2c0 [ 36.314565][ T1011] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 36.321149][ T1011] kasan_report+0xe2/0x130 [ 36.325833][ T1011] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 36.332560][ T1011] __asan_report_load1_noabort+0x14/0x20 [ 36.338337][ T1011] xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 36.344780][ T1011] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 36.350932][ T1011] ? xfrm_netlink_rcv+0x72/0x90 [ 36.356078][ T1011] ? netlink_unicast+0x876/0xa40 [ 36.361107][ T1011] ? netlink_sendmsg+0x89c/0xb50 [ 36.366784][ T1011] ? ____sys_sendmsg+0x5b7/0x8f0 [ 36.371730][ T1011] ? ___sys_sendmsg+0x236/0x2e0 [ 36.376579][ T1011] ? do_syscall_64+0x31/0x40 [ 36.381250][ T1011] xfrm_policy_inexact_alloc_chain+0x53d/0xb30 [ 36.387442][ T1011] xfrm_policy_inexact_insert+0x70/0x1130 [ 36.393480][ T1011] ? __kasan_check_write+0x14/0x20 [ 36.398680][ T1011] ? _raw_spin_lock_bh+0x94/0xf0 [ 36.403626][ T1011] ? policy_hash_bysel+0x13f/0x6f0 [ 36.408757][ T1011] xfrm_policy_insert+0x126/0x9a0 [ 36.413781][ T1011] ? xfrm_policy_construct+0x54f/0x1f00 [ 36.419319][ T1011] xfrm_add_policy+0x4ed/0x850 [ 36.424115][ T1011] ? xfrm_dump_sa_done+0xc0/0xc0 [ 36.429149][ T1011] xfrm_user_rcv_msg+0x4d0/0x7b0 [ 36.434262][ T1011] ? xfrm_netlink_rcv+0x90/0x90 [ 36.439126][ T1011] ? selinux_nlmsg_lookup+0x219/0x4a0 [ 36.444498][ T1011] netlink_rcv_skb+0x1f5/0x440 [ 36.449257][ T1011] ? xfrm_netlink_rcv+0x90/0x90 [ 36.454314][ T1011] ? netlink_ack+0xb70/0xb70 [ 36.459044][ T1011] ? mutex_trylock+0xa0/0xa0 [ 36.463689][ T1011] ? __netlink_lookup+0x387/0x3b0 [ 36.468737][ T1011] xfrm_netlink_rcv+0x72/0x90 [ 36.473596][ T1011] netlink_unicast+0x876/0xa40 [ 36.478374][ T1011] netlink_sendmsg+0x89c/0xb50 [ 36.483219][ T1011] ? netlink_getsockopt+0x530/0x530 [ 36.488419][ T1011] ? security_socket_sendmsg+0x82/0xa0 [ 36.494115][ T1011] ? netlink_getsockopt+0x530/0x530 [ 36.499702][ T1011] ____sys_sendmsg+0x5b7/0x8f0 [ 36.504764][ T1011] ? __sys_sendmsg_sock+0x40/0x40 [ 36.510428][ T1011] ? import_iovec+0x7c/0xb0 [ 36.515048][ T1011] ___sys_sendmsg+0x236/0x2e0 [ 36.520057][ T1011] ? slab_post_alloc_hook+0x7d/0x2f0 [ 36.525493][ T1011] ? __sys_sendmsg+0x280/0x280 [ 36.530787][ T1011] ? alloc_file+0x82/0x540 [ 36.535248][ T1011] ? __fdget+0x1a1/0x230 [ 36.539513][ T1011] __x64_sys_sendmsg+0x1f9/0x2c0 [ 36.544538][ T1011] ? __kasan_check_write+0x14/0x20 [ 36.549761][ T1011] ? ___sys_sendmsg+0x2e0/0x2e0 [ 36.554621][ T1011] ? __kasan_check_read+0x11/0x20 [ 36.559704][ T1011] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 36.565685][ T1011] do_syscall_64+0x31/0x40 [ 36.570121][ T1011] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.576013][ T1011] RIP: 0033:0x7f67cc4ccdd9 [ 36.580423][ T1011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.600145][ T1011] RSP: 002b:00007f67caf27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.609189][ T1011] RAX: ffffffffffffffda RBX: 00007f67cc745fa0 RCX: 00007f67cc4ccdd9 [ 36.617519][ T1011] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 36.625797][ T1011] RBP: 00007f67cc562d69 R08: 0000000000000000 R09: 0000000000000000 [ 36.633891][ T1011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.643445][ T1011] R13: 00007f67cc746038 R14: 00007f67cc745fa0 R15: 00007ffcac36d1b8 [ 36.651623][ T1011] [ 36.654168][ T1011] Allocated by task 1011: [ 36.658615][ T1011] __kasan_kmalloc+0xda/0x110 [ 36.663422][ T1011] __kmalloc+0x1a4/0x330 [ 36.667772][ T1011] sk_prot_alloc+0xb2/0x340 [ 36.672357][ T1011] sk_alloc+0x38/0x4e0 [ 36.676421][ T1011] pfkey_create+0x12a/0x660 [ 36.681358][ T1011] __sock_create+0x38d/0x770 [ 36.686670][ T1011] __sys_socket+0xec/0x190 [ 36.691611][ T1011] __x64_sys_socket+0x7a/0x90 [ 36.696393][ T1011] do_syscall_64+0x31/0x40 [ 36.700887][ T1011] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.707806][ T1011] [ 36.710174][ T1011] The buggy address belongs to the object at ffff888127521000 [ 36.710174][ T1011] which belongs to the cache kmalloc-1k of size 1024 [ 36.725185][ T1011] The buggy address is located 984 bytes inside of [ 36.725185][ T1011] 1024-byte region [ffff888127521000, ffff888127521400) [ 36.739148][ T1011] The buggy address belongs to the page: [ 36.744891][ T1011] page:ffffea00049d4800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x127520 [ 36.755814][ T1011] head:ffffea00049d4800 order:3 compound_mapcount:0 compound_pincount:0 [ 36.764233][ T1011] flags: 0x4000000000010200(slab|head) [ 36.770317][ T1011] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100042f00 [ 36.778988][ T1011] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 36.788731][ T1011] page dumped because: kasan: bad access detected [ 36.795711][ T1011] page_owner tracks the page as allocated [ 36.801444][ T1011] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 282, ts 24241370827, free_ts 0 [ 36.820213][ T1011] prep_new_page+0x179/0x180 [ 36.824887][ T1011] get_page_from_freelist+0x223b/0x23d0 [ 36.830531][ T1011] __alloc_pages_nodemask+0x290/0x620 [ 36.836215][ T1011] new_slab+0x84/0x3f0 [ 36.840803][ T1011] ___slab_alloc+0x2a6/0x450 [ 36.845520][ T1011] __slab_alloc+0x63/0xa0 [ 36.850399][ T1011] __kmalloc_track_caller+0x1ec/0x320 [ 36.855844][ T1011] __alloc_skb+0xdc/0x520 [ 36.860792][ T1011] alloc_uevent_skb+0x85/0x240 [ 36.865672][ T1011] kobject_uevent_net_broadcast+0x1a6/0x5a0 [ 36.871950][ T1011] kobject_uevent_env+0x52e/0x700 [ 36.877145][ T1011] kobject_uevent+0x1d/0x30 [ 36.881972][ T1011] netdev_queue_update_kobjects+0x1a7/0x390 [ 36.888151][ T1011] netdev_register_kobject+0x2af/0x360 [ 36.893826][ T1011] register_netdevice+0xdf0/0x13e0 [ 36.898922][ T1011] veth_newlink+0x678/0xb60 [ 36.903591][ T1011] page_owner free stack trace missing [ 36.908970][ T1011] [ 36.911395][ T1011] Memory state around the buggy address: [ 36.917445][ T1011] ffff888127521280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.926079][ T1011] ffff888127521300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.934661][ T1011] >ffff888127521380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 36.943868][ T1011] ^ [ 36.951422][ T1011] ffff888127521400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 36.959808][ T1011] ffff888127521480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 36.969004][ T1011] ================================================================== [ 36.977144][ T1011] Disabling lock debugging due to kernel taint [ 36.985094][ T1013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.303'. [ 37.113191][ T20] tipc: 32-bit node address hash set to 1000000