last executing test programs: 6m55.595942452s ago: executing program 1 (id=117): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000340)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_ublk_setup_queues(r0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) 6m55.187943295s ago: executing program 1 (id=118): openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000100), 0x1, 0x4ff, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) fcntl$setownex(r2, 0xf, &(0x7f00000000c0)={0x0, r0}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r0, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000340)='./file0\x00', 0x3010464, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646f74732c747a3d5554432c646f74732c666c7573682c6e66732c6e66733d6e6f7374616c655f726f2c644673636172642c6e6f646f74732c6e6f646f74732c646f7474f90b9b74732c646f733178666c6f7070792c646f74732c6e6f646f74732c73700b79735f696d6d757461626c652c646f74732c646f74732c6e6f646f74732c6e6f636173652c636f6465706167653d3933362c646f74732c646f733178666c6f7070792c00"], 0x0, 0x21e, &(0x7f0000000780)="$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") ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000020000680080001"], 0x84}}, 0x800) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc)=0x2, 0x5, 0xf2, 0x0, &(0x7f0000000000), 0x2000000) futex(&(0x7f0000000040)=0x1, 0x5, 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)=0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x34}, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f8) socket$nl_route(0x10, 0x3, 0x0) 6m53.234552678s ago: executing program 1 (id=121): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) 6m49.417513681s ago: executing program 1 (id=131): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904"], 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x4370, 0x5}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) mmap(&(0x7f000012e000/0x4000)=nil, 0x4000, 0x2000001, 0x50, r4, 0xf168e000) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) read$FUSE(r5, &(0x7f0000004440)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x1) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0x3) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r7, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4ea3, 0x6, @mcast2, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4c040) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x7) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000000)) write(r0, 0x0, 0x0) 6m44.963751863s ago: executing program 1 (id=135): creat(&(0x7f00000000c0)='./bus\x00', 0x182) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = io_uring_setup(0x7cab, &(0x7f0000000480)={0x0, 0x2602, 0x80, 0x2, 0x103}) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x7071, 0x0, 0x2, 0x156, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0xc, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000580)={0x0, 0x5da0, 0x0, 0x2, 0x22d, 0x0, r1}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad67, 0x200, 0x3, 0x8b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe04b, 0x400, 0x3, 0x251}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc2b, 0x10, 0x0, 0x15c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1708, 0x100, 0xffffffff, 0x21, 0x0, r0}}], 0x4, &(0x7f0000002080)={0x2e, 0x52, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x94}, 0x0, 0x0, '\x00', {0x2, 0x54, 0x0, 0x0}}, 0x0) 6m39.175712309s ago: executing program 1 (id=143): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) 6m22.426361307s ago: executing program 32 (id=143): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) 5m43.523734065s ago: executing program 3 (id=221): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") inotify_init() mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x36b}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x23}, @local}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@loopback, @local}, 0xc) 5m42.184530238s ago: executing program 3 (id=229): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x7, 0x8, 0x803d, 0x6, {{0x5, 0x4, 0x2, 0x29, 0x14, 0x64, 0x0, 0x8, 0x4, 0x0, @empty, @multicast1}}}}) socket$inet_tcp(0x2, 0x1, 0x0) ptrace$peekuser(0x3, r0, 0x2) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x29, {0x2, 0x188, 0xff, 0xff, 0xdf4f, 0x3ff}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x9) 5m37.522397338s ago: executing program 3 (id=238): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x84043, 0x0) keyctl$clear(0x3, 0x0) request_key(0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000400)={0x0, 0x7, 0x80, 0xb6, 0x16, "004fba7d07ffffff08630400"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) syz_clone3(&(0x7f0000000340)={0xc6107700, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5m35.938063179s ago: executing program 3 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) capget(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000180)={0xfff, 0x0, 0x1000, 0x9, 0x4, 0xfffff800}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x4, 0x0, &(0x7f0000000200)=0xd9c990bae94e58c1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m35.020367068s ago: executing program 3 (id=247): syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000780)=0xc) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, r4, 0xe}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x49, 0x0, 0x0) keyctl$session_to_parent(0x12) 5m32.197357839s ago: executing program 3 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f00000000000000b604000001ede0ff2500000017ffff17cc040000000000007b0a00fe000000000f04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 5m15.942084281s ago: executing program 33 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 5m5.898944223s ago: executing program 6 (id=279): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) getpgid(0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r1, 0x66020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x7, 0x8, 0x803d, 0x6, {{0x5, 0x4, 0x2, 0x29, 0x14, 0x64, 0x0, 0x8, 0x4, 0x0, @empty, @multicast1}}}}) socket$inet_tcp(0x2, 0x1, 0x0) ptrace$peekuser(0x3, r0, 0x2) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x29, {0x2, 0x188, 0xff, 0xff, 0xdf4f, 0x3ff}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x9) 5m5.694892569s ago: executing program 6 (id=292): process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x7, 0x8, 0x803d, 0x6, {{0x5, 0x4, 0x2, 0x29, 0x14, 0x64, 0x0, 0x8, 0x4, 0x0, @empty, @multicast1}}}}) socket$inet_tcp(0x2, 0x1, 0x0) ptrace$peekuser(0x3, 0x0, 0x2) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x29, {0x2, 0x188, 0xff, 0xff, 0xdf4f, 0x3ff}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x9) 5m4.72351233s ago: executing program 6 (id=295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 5m4.612579044s ago: executing program 34 (id=295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 3m52.476709139s ago: executing program 0 (id=481): r0 = socket$inet(0x2, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x10000000) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @broadcast}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x100000a, 0x11, r5, 0x0) read(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) syz_open_dev$evdev(0x0, 0x7, 0xa0140) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000002240)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x80, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, 0x0) 3m51.709534174s ago: executing program 0 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) capget(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x4, 0x0, &(0x7f0000000200)=0xd9c990bae94e58c1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m46.173019282s ago: executing program 0 (id=491): syz_socket_connect_nvme_tcp() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) clock_gettime(0x6, 0x0) eventfd2(0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_setup(0x81, &(0x7f0000000400)) 3m40.91009565s ago: executing program 0 (id=500): r0 = socket$inet(0x2, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x10000000) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @broadcast}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) read(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x13) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900049000000000000000e5ffff0800040000000000", 0x36}], 0x1) syz_open_dev$evdev(0x0, 0x7, 0xa0140) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000002240)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x80, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, 0x0) 3m35.953165369s ago: executing program 0 (id=509): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x84043, 0x0) keyctl$clear(0x3, 0x0) request_key(0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) syz_clone3(0x0, 0x0) 3m32.466970871s ago: executing program 0 (id=524): r0 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mount(&(0x7f0000000140)=@nullb, 0x0, 0x0, 0x2208004, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0xffff, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x7ffffffc, 0xd, 0xe9c4, 0xcd8, 0x6e, 0x200006, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xeffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x3, 0x6, 0x8, 0x23, 0x2, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x5fffffd, 0xd1, 0xf, 0x4, 0xa, 0xfffffffe, 0x400, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x1, 0x80, 0x4, 0x2, 0x0, 0xd, 0x2000006, 0x4, 0x8, 0x0, 0x1, 0xfffffffc, 0x0, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x3, 0x4, 0x1, 0xa, 0x6, 0x7fff, 0x1, 0x704, 0x33e3, 0x9, 0x6, 0x7fff, 0x6, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, @mcast1, @empty, 0xb6, 0x20, 0x100009, 0x45}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0}) 3m16.554075032s ago: executing program 35 (id=524): r0 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mount(&(0x7f0000000140)=@nullb, 0x0, 0x0, 0x2208004, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0xffff, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x7ffffffc, 0xd, 0xe9c4, 0xcd8, 0x6e, 0x200006, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xeffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x3, 0x6, 0x8, 0x23, 0x2, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x5fffffd, 0xd1, 0xf, 0x4, 0xa, 0xfffffffe, 0x400, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x1, 0x80, 0x4, 0x2, 0x0, 0xd, 0x2000006, 0x4, 0x8, 0x0, 0x1, 0xfffffffc, 0x0, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x3, 0x4, 0x1, 0xa, 0x6, 0x7fff, 0x1, 0x704, 0x33e3, 0x9, 0x6, 0x7fff, 0x6, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, @mcast1, @empty, 0xb6, 0x20, 0x100009, 0x45}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0}) 4.573684153s ago: executing program 2 (id=1631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.145256937s ago: executing program 7 (id=1644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200fe8000"], 0x48}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x48000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2.239740548s ago: executing program 4 (id=1648): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2.010572175s ago: executing program 2 (id=1650): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000c100"/20, @ANYRES32=0x0, @ANYRES32=r0], 0x50) 1.982420806s ago: executing program 7 (id=1651): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000840), 0x0, 0x40010112, 0x0) 1.974133806s ago: executing program 2 (id=1653): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r0, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) recvmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x10000) 1.943318578s ago: executing program 7 (id=1656): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', 0x0, 0x800049, &(0x7f00000001c0)='discard') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 1.274354189s ago: executing program 4 (id=1660): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r0}, 0xc) 1.274203799s ago: executing program 4 (id=1661): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.094976154s ago: executing program 2 (id=1662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130fed27e6b0000000000700"], 0x20}}, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 1.094809285s ago: executing program 5 (id=1663): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$usbfs(0x0, 0x204, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d5, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 1.094448155s ago: executing program 2 (id=1664): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xffff, 0xfffffffffffffffe, 0x2f, 0xa4e, 0x1, 0xffff, 0x2, 0x7, 0x6, 0x8000, 0x10, 0x5, 0x100, 0x1, 0x8, 0x9], 0x1, 0x140200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf2, 0x5, 0x0, '\x00', 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 1.048548296s ago: executing program 7 (id=1665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x62, 0xa, 0xff00, 0x14}, [@call={0x75}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 983.594378ms ago: executing program 2 (id=1668): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0xffffffff, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 394.953687ms ago: executing program 4 (id=1670): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 358.109558ms ago: executing program 4 (id=1671): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}]}, 0x50}, 0x1, 0xba01}, 0x0) 174.175555ms ago: executing program 4 (id=1673): sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0xa4, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001702605208680551172a0010203010902920001090260030904f500000e0100be0a2401060027000201020b24"], 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x20000845, 0x0, 0x0) 174.007244ms ago: executing program 8 (id=1674): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 173.933035ms ago: executing program 8 (id=1675): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, 0x0, 0x0) 115.904246ms ago: executing program 7 (id=1676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x30, r1, 0x101, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x4800) 115.827706ms ago: executing program 8 (id=1677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x1a0}]}) 115.768866ms ago: executing program 8 (id=1678): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000011c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 115.662706ms ago: executing program 8 (id=1679): socket$nl_xfrm(0x10, 0x3, 0x6) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x530, 0x0, 0x0, 0x148, 0x1f0, 0x148, 0x498, 0x240, 0x240, 0x498, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @multicast2, 0xff000000, 0xff, 'batadv_slave_0\x00', 'sit0\x00', {}, {0xff}, 0x5e, 0x0, 0x42}, 0x0, 0x1a8, 0x1f0, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x5, 0x0, 0x4, 0x6, 0x4], 0x3, 0x5}}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x260, 0x2a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@recent0={{0xf8}, {0x2, 0x5, 0x20, 0x0, 'syz0\x00', 0x7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0xb, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x590) syz_open_dev$loop(&(0x7f0000000000), 0x7fff, 0x224b42) 108.818956ms ago: executing program 8 (id=1680): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 91.136257ms ago: executing program 7 (id=1681): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 52.456518ms ago: executing program 5 (id=1682): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000180)=@ethtool_coalesce={0xe, 0x7, 0x7, 0x7, 0x3, 0x0, 0xfff, 0x100, 0x5, 0x6, 0x1, 0x2, 0x401, 0x5, 0x1, 0x9, 0x4, 0xb, 0x8, 0x3, 0x9, 0x90e, 0x2}}) 17.599899ms ago: executing program 5 (id=1683): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x3, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.255589ms ago: executing program 5 (id=1684): io_uring_setup(0x3eb0, &(0x7f00000003c0)={0x0, 0x800000, 0x10000, 0x2, 0x7}) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 9.17704ms ago: executing program 5 (id=1685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) 0s ago: executing program 5 (id=1686): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 21.748688][ T28] audit: type=1400 audit(1781902886.910:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.749723][ T279] cgroup: Unknown subsys name 'net' [ 21.771384][ T28] audit: type=1400 audit(1781902886.910:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.798684][ T28] audit: type=1400 audit(1781902886.940:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.798838][ T279] cgroup: Unknown subsys name 'devices' [ 21.939731][ T279] cgroup: Unknown subsys name 'hugetlb' [ 21.945404][ T279] cgroup: Unknown subsys name 'rlimit' [ 22.077946][ T28] audit: type=1400 audit(1781902887.240:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.101218][ T28] audit: type=1400 audit(1781902887.240:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.109948][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.126167][ T28] audit: type=1400 audit(1781902887.240:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.158071][ T28] audit: type=1400 audit(1781902887.300:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.183613][ T28] audit: type=1400 audit(1781902887.300:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.216865][ T28] audit: type=1400 audit(1781902887.370:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.242441][ T28] audit: type=1400 audit(1781902887.370:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.242617][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.422460][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.429638][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.436969][ T288] device bridge_slave_0 entered promiscuous mode [ 23.445113][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.452214][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.459670][ T288] device bridge_slave_1 entered promiscuous mode [ 23.478671][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.485913][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.493319][ T287] device bridge_slave_0 entered promiscuous mode [ 23.501406][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.508674][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.516156][ T287] device bridge_slave_1 entered promiscuous mode [ 23.591606][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.598727][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.606214][ T289] device bridge_slave_0 entered promiscuous mode [ 23.613439][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.620579][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.628250][ T289] device bridge_slave_1 entered promiscuous mode [ 23.657117][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.664287][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.671917][ T290] device bridge_slave_0 entered promiscuous mode [ 23.681755][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.688941][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.696310][ T290] device bridge_slave_1 entered promiscuous mode [ 23.743081][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.750183][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.757632][ T291] device bridge_slave_0 entered promiscuous mode [ 23.767616][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.774722][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.782237][ T291] device bridge_slave_1 entered promiscuous mode [ 23.926312][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.933406][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.940705][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.947851][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.966777][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.973871][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.981167][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.988223][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.003887][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.011060][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.018365][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.025386][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.041599][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.048697][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.055977][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.063030][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.081398][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.088484][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.095751][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.102808][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.146276][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.153557][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.161166][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.168858][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.176083][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.183678][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.191012][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.198422][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.205837][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.213265][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.221401][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.229109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.259906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.267534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.275557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.283617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.292020][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.299107][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.306520][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.314701][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.321740][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.329147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.337476][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.344545][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.351915][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.360201][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.367233][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.374694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.382919][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.389977][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.397348][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.405577][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.412648][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.429184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.437580][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.445769][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.453878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.462212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.470866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.478858][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.486834][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.496235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.504737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.513126][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.520194][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.544842][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.552397][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.559922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.568665][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.576851][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.583942][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.592259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.600887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.609237][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.616268][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.623743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.632231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.640750][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.647849][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.666866][ T291] device veth0_vlan entered promiscuous mode [ 24.679563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.688114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.696135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.704025][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.711844][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.719976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.728119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.736132][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.744173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.752232][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.760268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.768323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.776266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.784535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.795975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.804445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.821191][ T288] device veth0_vlan entered promiscuous mode [ 24.837648][ T289] device veth0_vlan entered promiscuous mode [ 24.844262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.852803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.860935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.869026][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.877061][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.885660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.894219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.902173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.910290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.918315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.925723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.933325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.948427][ T291] device veth1_macvtap entered promiscuous mode [ 24.963749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.972069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.980734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.990065][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.998531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.006759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.015555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.023954][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.032193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.042690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.051207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.061164][ T288] device veth1_macvtap entered promiscuous mode [ 25.071221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.078907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.086804][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.095054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.102708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.111282][ T287] device veth0_vlan entered promiscuous mode [ 25.121705][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.129609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.143804][ T290] device veth0_vlan entered promiscuous mode [ 25.150436][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.158821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.166201][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.174738][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.183584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.192044][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.208135][ T287] device veth1_macvtap entered promiscuous mode [ 25.216884][ T291] request_module fs-gadgetfs succeeded, but still no fs? [ 25.226918][ T289] device veth1_macvtap entered promiscuous mode [ 25.234282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.243381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.251757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.259998][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.277290][ T290] device veth1_macvtap entered promiscuous mode [ 25.307231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.316520][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.319442][ T312] loop2: detected capacity change from 0 to 256 [ 25.326528][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.332213][ T312] ======================================================= [ 25.332213][ T312] WARNING: The mand mount option has been deprecated and [ 25.332213][ T312] and is ignored by this kernel. Remove the mand [ 25.332213][ T312] option from the mount to silence this warning. [ 25.332213][ T312] ======================================================= [ 25.374617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.378857][ T312] FAT-fs (loop2): Directory bread(block 64) failed [ 25.383635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.389385][ T312] FAT-fs (loop2): Directory bread(block 65) failed [ 25.397927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.405171][ T312] FAT-fs (loop2): Directory bread(block 66) failed [ 25.413198][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.419058][ T312] FAT-fs (loop2): Directory bread(block 67) failed [ 25.434469][ T312] FAT-fs (loop2): Directory bread(block 68) failed [ 25.451656][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.453350][ T312] FAT-fs (loop2): Directory bread(block 69) failed [ 25.460835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.466821][ T312] FAT-fs (loop2): Directory bread(block 70) failed [ 25.475783][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.482626][ T312] FAT-fs (loop2): Directory bread(block 71) failed [ 25.489885][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.496229][ T312] FAT-fs (loop2): Directory bread(block 72) failed [ 25.504263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.510969][ T312] FAT-fs (loop2): Directory bread(block 73) failed [ 25.519377][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.621886][ T317] capability: warning: `syz.1.2' uses 32-bit capabilities (legacy support in use) [ 25.978647][ T321] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.103182][ T333] Illegal XDP return value 4294967294 on prog (id 2) dev syz_tun, expect packet loss! [ 26.346893][ T347] loop0: detected capacity change from 0 to 512 [ 26.816737][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 26.816762][ T28] audit: type=1326 audit(1781902891.960:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.1.11" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba19ce59 code=0x7ffc0000 [ 26.902645][ T347] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 26.912012][ T347] EXT4-fs error (device loop0): ext4_iget_extra_inode:4765: inode #15: comm syz.0.7: corrupted in-inode xattr [ 26.928162][ T347] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.7: couldn't read orphan inode 15 (err -117) [ 26.940747][ T347] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 29.598290][ T358] loop1: detected capacity change from 0 to 512 [ 30.441760][ T290] EXT4-fs (loop0): unmounting filesystem. [ 30.492901][ T358] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 30.506169][ T358] EXT4-fs error (device loop1): ext4_iget_extra_inode:4765: inode #15: comm syz.1.11: corrupted in-inode xattr [ 30.523988][ T358] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.11: couldn't read orphan inode 15 (err -117) [ 30.536943][ T358] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.109979][ T288] EXT4-fs (loop1): unmounting filesystem. [ 32.111226][ T28] audit: type=1326 audit(1781902892.040:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.1.11" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f61ba19ce59 code=0x7ffc0000 [ 32.140875][ T28] audit: type=1326 audit(1781902892.040:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.1.11" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba19ce59 code=0x7ffc0000 [ 32.166712][ T28] audit: type=1326 audit(1781902892.050:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.1.11" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f61ba19ce59 code=0x7ffc0000 [ 32.202579][ T28] audit: type=1326 audit(1781902892.050:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.1.11" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba19ce59 code=0x7ffc0000 [ 32.580077][ T28] audit: type=1326 audit(1781902892.050:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.1.11" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba19ce59 code=0x7ffc0000 [ 32.615074][ T28] audit: type=1326 audit(1781902892.050:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.1.11" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f61ba19ce59 code=0x7ffc0000 [ 32.639881][ T28] audit: type=1326 audit(1781902892.050:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.1.11" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba19ce59 code=0x7ffc0000 [ 32.667309][ T28] audit: type=1326 audit(1781902892.050:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.1.11" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba19ce59 code=0x7ffc0000 [ 32.695403][ T28] audit: type=1400 audit(1781902892.120:155): avc: denied { mount } for pid=334 comm="syz.0.7" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.730496][ T28] audit: type=1326 audit(1781902892.190:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.1.11" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f61ba19ce59 code=0x7ffc0000 [ 32.794965][ T365] loop1: detected capacity change from 0 to 40427 [ 32.805577][ T365] F2FS-fs (loop1): heap/no_heap options were deprecated [ 32.814401][ T365] F2FS-fs (loop1): fault_injection options not supported [ 32.821666][ T365] F2FS-fs (loop1): fault_type options not supported [ 32.837772][ T365] F2FS-fs (loop1): invalid crc value [ 32.855518][ T365] F2FS-fs (loop1): Found nat_bits in checkpoint [ 32.880992][ T382] loop2: detected capacity change from 0 to 128 [ 32.892825][ T382] EXT4-fs (loop2): Test dummy encryption mode enabled [ 32.898264][ T365] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 32.905732][ T382] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.024665][ T382] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.173869][ T365] syz.1.13: attempt to access beyond end of device [ 34.173869][ T365] loop1: rw=2049, sector=77824, nr_sectors = 1992 limit=40427 [ 34.238940][ T365] syz.1.13: attempt to access beyond end of device [ 34.238940][ T365] loop1: rw=0, sector=79808, nr_sectors = 8 limit=40427 [ 36.833701][ T407] syz.3.21 (407) used greatest stack depth: 20424 bytes left [ 36.887314][ T291] EXT4-fs (loop2): unmounting filesystem. [ 36.907653][ T288] syz-executor: attempt to access beyond end of device [ 36.907653][ T288] loop1: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 37.374920][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 37.374958][ T28] audit: type=1400 audit(1781902902.530:199): avc: denied { connect } for pid=409 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.523573][ T417] loop3: detected capacity change from 0 to 256 [ 37.600097][ T417] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 37.698862][ T417] Zero length message leads to an empty skb [ 37.708306][ T28] audit: type=1400 audit(1781902902.860:200): avc: denied { read write } for pid=416 comm="syz.3.26" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.731566][ T28] audit: type=1400 audit(1781902902.860:201): avc: denied { open } for pid=416 comm="syz.3.26" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.755022][ T28] audit: type=1400 audit(1781902902.860:202): avc: denied { ioctl } for pid=416 comm="syz.3.26" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.821266][ T28] audit: type=1400 audit(1781902902.880:203): avc: denied { read write } for pid=421 comm="syz.1.24" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.197782][ T405] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 38.238314][ T28] audit: type=1400 audit(1781902902.880:204): avc: denied { open } for pid=421 comm="syz.1.24" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.407302][ T28] audit: type=1400 audit(1781902902.880:205): avc: denied { mounton } for pid=421 comm="syz.1.24" path="/3/file0" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.429875][ T405] usb 4-1: device descriptor read/64, error -71 [ 39.076440][ T28] audit: type=1400 audit(1781902904.230:206): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 39.184640][ T405] usb 4-1: device descriptor read/64, error -71 [ 39.213956][ T28] audit: type=1400 audit(1781902904.340:207): avc: denied { ioctl } for pid=431 comm="syz.2.28" path="socket:[16109]" dev="sockfs" ino=16109 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.417777][ T28] audit: type=1400 audit(1781902904.570:208): avc: denied { read append } for pid=443 comm="syz.1.31" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.537785][ T405] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 39.687794][ T405] usb 4-1: device descriptor read/64, error -71 [ 39.973631][ T405] usb 4-1: device descriptor read/64, error -71 [ 41.535083][ T405] usb usb4-port1: attempt power cycle [ 43.181987][ T472] loop2: detected capacity change from 0 to 512 [ 43.327428][ T472] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.335638][ T472] __quota_error: 6 callbacks suppressed [ 43.335660][ T472] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 43.350449][ T472] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 43.360360][ T472] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.39: Failed to acquire dquot type 0 [ 43.373527][ T472] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 43.382631][ T472] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 43.392545][ T472] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.39: Failed to acquire dquot type 0 [ 43.405820][ T472] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.39: bg 0: block 64: padding at end of block bitmap is not set [ 43.407708][ C0] sched: RT throttling activated [ 43.410674][ T477] loop1: detected capacity change from 0 to 512 [ 43.427870][ T472] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 43.440490][ T472] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 43.446694][ T28] audit: type=1400 audit(1781902908.610:215): avc: denied { create } for pid=480 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.449511][ T472] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 43.449542][ T472] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.39: Failed to acquire dquot type 0 [ 43.490611][ T472] EXT4-fs (loop2): 1 orphan inode deleted [ 44.434020][ T28] audit: type=1400 audit(1781902909.590:216): avc: denied { setopt } for pid=480 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.677828][ T472] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 45.025260][ T28] audit: type=1400 audit(1781902909.590:217): avc: denied { create } for pid=480 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.755986][ T291] EXT4-fs (loop2): unmounting filesystem. [ 45.760763][ T485] syz.0.38 (485) used greatest stack depth: 19744 bytes left [ 45.769258][ T28] audit: type=1400 audit(1781902910.230:218): avc: denied { getopt } for pid=480 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.772760][ T477] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.873395][ T497] loop0: detected capacity change from 0 to 512 [ 45.879907][ T477] ext4 filesystem being mounted at /6/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.894417][ T497] EXT4-fs: Ignoring removed bh option [ 45.928369][ T497] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 45.963308][ T497] EXT4-fs (loop0): 1 truncate cleaned up [ 45.969590][ T497] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.027789][ T473] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 47.524977][ T288] EXT4-fs (loop1): unmounting filesystem. [ 47.599720][ T473] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 47.974876][ T473] usb 5-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 47.984849][ T473] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.429466][ T290] EXT4-fs (loop0): unmounting filesystem. [ 48.432281][ T473] usb 5-1: config 0 descriptor?? [ 48.440999][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 48.441014][ T28] audit: type=1400 audit(1781905491.605:231): avc: denied { create } for pid=512 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 48.480054][ T515] loop3: detected capacity change from 0 to 8192 [ 48.513778][ T473] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 48.528430][ T515] loop3: p1[EZD] p2 p3 p4 [ 48.533264][ T515] loop3: p1 size 32768 extends beyond EOD, truncated [ 48.543169][ T515] loop3: p2 start 930308 is beyond EOD, truncated [ 48.549677][ T515] loop3: p3 start 117772289 is beyond EOD, truncated [ 48.556432][ T515] loop3: p4 size 262144 extends beyond EOD, truncated [ 48.710221][ T28] audit: type=1400 audit(1781905491.795:232): avc: denied { write } for pid=512 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 48.896937][ T473] usb 5-1: USB disconnect, device number 2 [ 49.271715][ T28] audit: type=1400 audit(1781905492.155:233): avc: denied { connect } for pid=518 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.574809][ T494] udevd[494]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 49.574849][ T343] udevd[343]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 53.578309][ T28] audit: type=1326 audit(1781905495.695:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.4.54" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e27d9ce59 code=0x0 [ 57.588339][ T28] audit: type=1400 audit(1781905496.305:235): avc: denied { read } for pid=535 comm="syz.4.54" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.612440][ T28] audit: type=1400 audit(1781905496.305:236): avc: denied { open } for pid=535 comm="syz.4.54" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.673264][ T28] audit: type=1400 audit(1781905496.315:237): avc: denied { ioctl } for pid=535 comm="syz.4.54" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.179489][ T569] loop1: detected capacity change from 0 to 256 [ 58.186724][ T569] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.197525][ T569] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 58.208974][ T569] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 59.870190][ T593] capability: warning: `syz.2.67' uses deprecated v2 capabilities in a way that may be insecure [ 60.000817][ T593] loop2: detected capacity change from 0 to 1024 [ 61.089842][ T593] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 61.130473][ T593] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 61.137249][ T593] EXT4-fs (loop2): mount failed [ 61.160991][ T28] audit: type=1400 audit(1781905504.326:238): avc: denied { map } for pid=595 comm="syz.4.68" path="socket:[17472]" dev="sockfs" ino=17472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 61.442836][ T598] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 61.454392][ T604] loop1: detected capacity change from 0 to 512 [ 61.461746][ T28] audit: type=1400 audit(1781905504.606:239): avc: denied { mount } for pid=597 comm="syz.0.70" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 61.483723][ T28] audit: type=1400 audit(1781905504.606:240): avc: denied { mounton } for pid=597 comm="syz.0.70" path="/14/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 61.484068][ T604] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 61.515296][ T28] audit: type=1400 audit(1781905504.616:241): avc: denied { mount } for pid=597 comm="syz.0.70" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.589199][ T604] EXT4-fs (loop1): 1 truncate cleaned up [ 61.602529][ T604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 61.665882][ T606] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 61.681029][ T606] EXT4-fs (loop1): Remounting filesystem read-only [ 61.865886][ T473] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 62.014854][ T28] audit: type=1400 audit(62.027:242): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.034238][ T28] audit: type=1400 audit(62.057:243): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 62.089518][ T473] usb 3-1: Using ep0 maxpacket: 16 [ 62.096249][ T473] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.106698][ T473] usb 3-1: config 0 has no interfaces? [ 62.113486][ T473] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.122853][ T473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 62.131524][ T473] usb 3-1: SerialNumber: syz [ 62.140196][ T473] usb 3-1: config 0 descriptor?? [ 62.483279][ T608] loop2: detected capacity change from 0 to 512 [ 62.582851][ T608] EXT4-fs: Ignoring removed i_version option [ 62.672060][ T608] EXT4-fs: Ignoring removed oldalloc option [ 62.734394][ T608] EXT4-fs (loop2): Test dummy encryption mode enabled [ 63.342087][ T288] EXT4-fs (loop1): unmounting filesystem. [ 63.356731][ T608] EXT4-fs (loop2): 1 truncate cleaned up [ 63.362511][ T608] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.444310][ T60] usb 3-1: USB disconnect, device number 2 [ 63.471400][ T28] audit: type=1400 audit(63.457:244): avc: denied { read write } for pid=607 comm="syz.2.72" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.512294][ T28] audit: type=1400 audit(63.457:245): avc: denied { open } for pid=607 comm="syz.2.72" path="/16/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.888625][ T706] syzkaller0: create flow: hash 1829681257 index 2 [ 64.907354][ T705] syzkaller0: delete flow: hash 1829681257 index 2 [ 65.044484][ T28] audit: type=1400 audit(65.057:246): avc: denied { write } for pid=715 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 65.648732][ T291] EXT4-fs (loop2): unmounting filesystem. [ 65.799137][ T731] tipc: Started in network mode [ 65.799171][ T731] tipc: Node identity 7f000001, cluster identity 4711 [ 65.799357][ T731] tipc: Enabled bearer , priority 10 [ 67.009310][ T28] audit: type=1400 audit(67.027:247): avc: denied { read } for pid=736 comm="syz.0.85" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.029586][ T28] audit: type=1400 audit(67.027:248): avc: denied { open } for pid=736 comm="syz.0.85" path="net:[4026532548]" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.410822][ T28] audit: type=1400 audit(67.027:249): avc: denied { create } for pid=736 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.453146][ T19] tipc: Node number set to 2130706433 [ 79.807716][ T28] audit: type=1400 audit(79.817:250): avc: denied { write } for pid=789 comm="syz.3.101" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.840054][ T800] usb usb8: check_ctrlrecip: process 800 (syz.3.101) requesting ep 01 but needs 81 [ 81.866386][ T845] process 'syz.0.114' launched './file0' with NULL argv: empty string added [ 81.896012][ T781] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 82.085848][ T781] usb 4-1: Using ep0 maxpacket: 16 [ 82.092192][ T781] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.103209][ T781] usb 4-1: config 0 has no interfaces? [ 82.109697][ T781] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.119074][ T781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 82.127427][ T781] usb 4-1: SerialNumber: syz [ 82.151236][ T781] usb 4-1: config 0 descriptor?? [ 82.164185][ T854] loop1: detected capacity change from 0 to 512 [ 82.173692][ T854] EXT4-fs (loop1): Test dummy encryption mode enabled [ 82.183600][ T854] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.117: inode has both inline data and extents flags [ 82.197116][ T854] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.117: couldn't read orphan inode 15 (err -117) [ 82.209649][ T854] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 82.227801][ T854] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 82.240655][ T28] audit: type=1400 audit(82.257:251): avc: denied { mounton } for pid=853 comm="syz.1.117" path="/21/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.262808][ T28] audit: type=1400 audit(82.257:252): avc: denied { write } for pid=853 comm="syz.1.117" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.270597][ T854] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 82.291404][ T28] audit: type=1400 audit(82.257:253): avc: denied { add_name } for pid=853 comm="syz.1.117" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.316443][ T28] audit: type=1400 audit(82.257:254): avc: denied { setattr } for pid=853 comm="syz.1.117" name="work" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.343198][ T854] overlayfs: conflicting lowerdir path [ 82.365265][ T836] loop3: detected capacity change from 0 to 512 [ 82.367968][ T28] audit: type=1400 audit(82.327:255): avc: denied { remove_name } for pid=853 comm="syz.1.117" name="#1" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.382249][ T836] EXT4-fs: Ignoring removed i_version option [ 82.438227][ T28] audit: type=1400 audit(82.327:256): avc: denied { rename } for pid=853 comm="syz.1.117" name="#1" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.439418][ T836] EXT4-fs: Ignoring removed oldalloc option [ 82.476544][ T28] audit: type=1400 audit(82.327:257): avc: denied { unlink } for pid=853 comm="syz.1.117" name="#1" dev="loop1" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.503064][ T28] audit: type=1400 audit(82.327:258): avc: denied { unlink } for pid=853 comm="syz.1.117" name="#2" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.524887][ T836] EXT4-fs (loop3): Test dummy encryption mode enabled [ 82.525149][ T28] audit: type=1400 audit(82.417:259): avc: denied { map } for pid=853 comm="syz.1.117" path="/21/file1/bus/blkio.bfq.io_wait_time_recursive" dev="loop1" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.564678][ T836] EXT4-fs (loop3): 1 truncate cleaned up [ 82.570906][ T288] EXT4-fs (loop1): unmounting filesystem. [ 82.576773][ T836] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 82.624628][ T864] loop1: detected capacity change from 0 to 512 [ 82.660470][ T19] usb 4-1: USB disconnect, device number 5 [ 82.671188][ T864] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 83.843817][ T872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.118'. [ 84.237323][ T288] EXT4-fs (loop1): unmounting filesystem. [ 84.267767][ T289] EXT4-fs (loop3): unmounting filesystem. [ 88.334504][ T906] binder: BINDER_SET_CONTEXT_MGR already set [ 88.341973][ T906] binder: 905:906 ioctl 4018620d 200000000040 returned -16 [ 88.427386][ T913] Invalid argument reading file caps for ./file0 [ 88.434852][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 88.434870][ T28] audit: type=1400 audit(88.447:261): avc: denied { execute } for pid=900 comm="syz.0.128" name="file0" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.440845][ T28] audit: type=1400 audit(88.447:262): avc: denied { execute_no_trans } for pid=900 comm="syz.0.128" path="/26/file0" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.586091][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.841900][ T28] audit: type=1400 audit(92.857:263): avc: denied { read } for pid=927 comm="syz.2.136" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.926116][ T28] audit: type=1400 audit(92.857:264): avc: denied { open } for pid=927 comm="syz.2.136" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.626798][ T952] loop3: detected capacity change from 0 to 2048 [ 102.651537][ T952] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 111.241972][ T988] loop4: detected capacity change from 0 to 256 [ 111.250431][ T988] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.261119][ T988] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 111.281348][ T988] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 111.349066][ T988] exFAT-fs (loop4): hint_cluster is invalid (17) [ 111.357644][ T988] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff) [ 111.365745][ T988] exFAT-fs (loop4): Filesystem has been set read-only [ 111.373886][ T28] audit: type=1400 audit(111.347:265): avc: denied { write } for pid=981 comm="syz.4.149" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.602457][ T28] audit: type=1400 audit(111.347:266): avc: denied { add_name } for pid=981 comm="syz.4.149" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.638501][ T28] audit: type=1400 audit(111.347:267): avc: denied { associate } for pid=981 comm="syz.4.149" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 111.685212][ T28] audit: type=1400 audit(111.357:268): avc: denied { read write } for pid=981 comm="syz.4.149" name="file1" dev="loop4" ino=1048605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.764384][ T28] audit: type=1400 audit(111.357:269): avc: denied { open } for pid=981 comm="syz.4.149" path="/33/file0/file1" dev="loop4" ino=1048605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.495035][ T1001] loop4: detected capacity change from 0 to 512 [ 115.501866][ T1001] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.811569][ T28] audit: type=1400 audit(119.827:270): avc: denied { mounton } for pid=1017 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 119.931471][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.938752][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.956622][ T1017] device bridge_slave_0 entered promiscuous mode [ 119.975813][ T956] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.983806][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.998886][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.016393][ T1017] device bridge_slave_1 entered promiscuous mode [ 120.105880][ T359] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.165804][ T956] usb 4-1: Using ep0 maxpacket: 16 [ 120.172124][ T956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.188114][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.195222][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.198621][ T956] usb 4-1: config 0 has no interfaces? [ 120.202577][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.214931][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.218754][ T956] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.256081][ T956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 120.264128][ T956] usb 4-1: SerialNumber: syz [ 120.294173][ T677] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.301812][ T956] usb 4-1: config 0 descriptor?? [ 120.313542][ T677] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.323635][ T359] usb 1-1: Using ep0 maxpacket: 16 [ 120.334827][ T359] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.357270][ T677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.364875][ T677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.374906][ T359] usb 1-1: config 0 has no interfaces? [ 120.386635][ T359] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.417142][ T677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.425482][ T677] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.432595][ T677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.440140][ T359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 120.455821][ T359] usb 1-1: SerialNumber: syz [ 120.466299][ T359] usb 1-1: config 0 descriptor?? [ 120.486666][ T677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.505937][ T677] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.513019][ T677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.536006][ T677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.546170][ T677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.562352][ T1016] loop3: detected capacity change from 0 to 512 [ 120.576562][ T1016] EXT4-fs: Ignoring removed i_version option [ 120.582627][ T1016] EXT4-fs: Ignoring removed oldalloc option [ 120.596514][ T677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.617290][ T1016] EXT4-fs (loop3): Test dummy encryption mode enabled [ 120.625037][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.643405][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.651056][ T1016] EXT4-fs (loop3): 1 truncate cleaned up [ 120.666314][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.673376][ T1016] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.683704][ T1017] device veth0_vlan entered promiscuous mode [ 120.691349][ T292] usb 1-1: USB disconnect, device number 2 [ 120.729459][ T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.744963][ T1017] device veth1_macvtap entered promiscuous mode [ 120.761535][ T956] usb 4-1: USB disconnect, device number 6 [ 120.788581][ T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.929245][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.516936][ T289] EXT4-fs (loop3): unmounting filesystem. [ 125.641410][ T1054] loop3: detected capacity change from 0 to 2048 [ 125.664510][ T1055] loop2: detected capacity change from 0 to 2048 [ 129.076038][ T1055] EXT4-fs warning (device loop2): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop2. [ 129.159375][ T1054] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 129.311167][ T1060] loop3: detected capacity change from 0 to 4096 [ 129.321218][ T1060] EXT4-fs: Ignoring removed orlov option [ 130.024962][ T1070] loop2: detected capacity change from 0 to 2048 [ 130.649422][ T1060] EXT4-fs (loop3): Test dummy encryption mode enabled [ 130.849036][ T1060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 130.869095][ T1070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 131.044680][ T28] audit: type=1400 audit(131.017:271): avc: denied { ioctl } for pid=1059 comm="syz.3.170" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18367 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.116564][ T666] device bridge_slave_1 left promiscuous mode [ 131.602491][ T666] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.679758][ T666] device bridge_slave_0 left promiscuous mode [ 131.709372][ T666] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.818866][ T666] device veth1_macvtap left promiscuous mode [ 132.066273][ T291] EXT4-fs (loop2): unmounting filesystem. [ 132.115879][ T666] device veth0_vlan left promiscuous mode [ 133.074780][ T1098] loop5: detected capacity change from 0 to 4096 [ 133.087919][ T289] EXT4-fs (loop3): unmounting filesystem. [ 133.096425][ T1098] EXT4-fs: Ignoring removed orlov option [ 133.210440][ T1098] EXT4-fs (loop5): Test dummy encryption mode enabled [ 133.339467][ T1098] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 133.503845][ T1106] loop4: detected capacity change from 0 to 2048 [ 133.665821][ T530] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 133.743815][ T1017] EXT4-fs (loop5): unmounting filesystem. [ 133.768059][ T1106] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 134.470736][ T530] usb 4-1: unable to get BOS descriptor or descriptor too short [ 134.491518][ T530] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 134.520790][ T530] usb 4-1: can't read configurations, error -71 [ 134.563323][ T28] audit: type=1400 audit(134.577:272): avc: denied { unmount } for pid=1109 comm="syz.5.181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.326850][ T287] EXT4-fs (loop4): unmounting filesystem. [ 139.346890][ T1181] futex_wake_op: syz.3.198 tries to shift op by 144; fix this program [ 140.241098][ T28] audit: type=1400 audit(139.497:273): avc: denied { mount } for pid=1170 comm="syz.2.199" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 140.483540][ T1190] futex_wake_op: syz.0.201 tries to shift op by 144; fix this program [ 141.547040][ T1201] futex_wake_op: syz.0.205 tries to shift op by 144; fix this program [ 153.707957][ T1256] futex_wake_op: syz.4.216 tries to shift op by 144; fix this program [ 154.062192][ T28] audit: type=1400 audit(154.077:274): avc: denied { map } for pid=1260 comm="syz.4.220" path="socket:[19689]" dev="sockfs" ino=19689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 154.092385][ T28] audit: type=1400 audit(154.107:275): avc: denied { accept } for pid=1260 comm="syz.4.220" path="socket:[19689]" dev="sockfs" ino=19689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 157.961367][ T1303] futex_wake_op: syz.0.230 tries to shift op by 144; fix this program [ 158.047906][ T1305] futex_wake_op: syz.5.231 tries to shift op by 144; fix this program [ 158.374389][ T1315] futex_wake_op: syz.0.233 tries to shift op by 144; fix this program [ 160.224675][ T1325] tipc: Enabling of bearer rejected, failed to enable media [ 160.235383][ T1320] futex_wake_op: syz.4.236 tries to shift op by 144; fix this program [ 161.464785][ T1331] futex_wake_op: syz.3.238 tries to shift op by 144; fix this program [ 161.721319][ T1344] futex_wake_op: syz.0.243 tries to shift op by 144; fix this program [ 168.934566][ T1404] futex_wake_op: syz.0.258 tries to shift op by 144; fix this program [ 169.990814][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.016490][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.040983][ T666] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 170.880178][ T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.910516][ T666] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 170.936391][ T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.962842][ T666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.981326][ T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.996270][ T666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.013633][ T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.485486][ T1476] futex_wake_op: syz.4.276 tries to shift op by 144; fix this program [ 189.633214][ T662] tipc: Disabling bearer [ 189.639938][ T662] tipc: Left network mode [ 189.713724][ T1503] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.747864][ T1503] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.782845][ T1503] device bridge_slave_0 entered promiscuous mode [ 189.906101][ T1503] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.923329][ T1503] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.944032][ T1503] device bridge_slave_1 entered promiscuous mode [ 191.345923][ T1523] tipc: Enabling of bearer rejected, failed to enable media [ 191.478764][ T1503] device veth0_vlan entered promiscuous mode [ 191.495469][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.506962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.516404][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.524992][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.533780][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.541441][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.549941][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.558568][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.566972][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.576513][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.585125][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.592217][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.633454][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.668054][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.698755][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.706027][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.814137][ T1503] device veth1_macvtap entered promiscuous mode [ 191.851454][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.874543][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.903546][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.921237][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.999578][ T662] device bridge_slave_1 left promiscuous mode [ 193.010017][ T662] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.026089][ T662] device bridge_slave_0 left promiscuous mode [ 193.039036][ T662] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.115974][ T662] device veth1_macvtap left promiscuous mode [ 193.122094][ T662] device veth0_vlan left promiscuous mode [ 193.452393][ T1564] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.465811][ T1564] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.474912][ T1564] device bridge_slave_0 entered promiscuous mode [ 193.482312][ T1564] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.489489][ T1564] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.497106][ T1564] device bridge_slave_1 entered promiscuous mode [ 193.699673][ T1564] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.706792][ T1564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.714094][ T1564] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.721196][ T1564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.041361][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.050870][ T631] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.064533][ T631] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.152116][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.219036][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.296866][ T631] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.303979][ T631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.433549][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.514040][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.601526][ T631] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.608632][ T631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.978257][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.037944][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.164358][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.200400][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.650753][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.728563][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.889143][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.910625][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.955009][ T1564] device veth0_vlan entered promiscuous mode [ 195.987909][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.004831][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.040932][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.050806][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.076081][ T1564] device veth1_macvtap entered promiscuous mode [ 196.131378][ T1589] futex_wake_op: syz.0.303 tries to shift op by 144; fix this program [ 196.794687][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.802760][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.811501][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.820553][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.829109][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.918490][ T662] device bridge_slave_1 left promiscuous mode [ 196.936914][ T662] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.954863][ T662] device bridge_slave_0 left promiscuous mode [ 196.961150][ T662] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.969967][ T662] device veth1_macvtap left promiscuous mode [ 196.976359][ T662] device veth0_vlan left promiscuous mode [ 201.568618][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.576086][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.686150][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 201.702344][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.711081][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 201.719863][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.728436][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.838010][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.847048][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.856021][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.928571][ T24] ip6_tunnel: K xmit: Local address not yet configured! [ 203.616512][ T24] ip6_tunnel: K xmit: Local address not yet configured! [ 203.625998][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.971150][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.012141][ T1646] tipc: Enabling of bearer rejected, failed to enable media [ 204.022010][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 204.025193][ T24] ip6_tunnel: K xmit: Local address not yet configured! [ 204.042074][ T359] ip6_tunnel: K xmit: Local address not yet configured! [ 204.045196][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.057515][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 204.083316][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.091812][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.100291][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.108873][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.119656][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.175663][ T359] ip6_tunnel: K xmit: Local address not yet configured! [ 204.183055][ T359] ip6_tunnel: K xmit: Local address not yet configured! [ 204.196790][ T39] ip6_tunnel: K xmit: Local address not yet configured! [ 204.833170][ T39] ip6_tunnel: K xmit: Local address not yet configured! [ 204.847563][ T292] ip6_tunnel: K xmit: Local address not yet configured! [ 205.452721][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.460282][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.725900][ T781] ip6_tunnel: K xmit: Local address not yet configured! [ 205.751709][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 205.785941][ T1664] futex_wake_op: syz.4.318 tries to shift op by 144; fix this program [ 205.796931][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.908167][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 205.922900][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.936420][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.952068][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.966371][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.980778][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.955896][ C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 207.955917][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 208.036176][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 209.875383][ T313] ip6_tunnel: K xmit: Local address not yet configured! [ 210.078438][ T473] ip6_tunnel: K xmit: Local address not yet configured! [ 210.675898][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 213.473512][ T28] audit: type=1400 audit(213.486:276): avc: denied { remount } for pid=1697 comm="syz.7.329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 213.538179][ T1705] loop7: detected capacity change from 0 to 512 [ 213.630987][ T1708] fuse: Bad value for 'fd' [ 213.651423][ T1708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.330'. [ 216.355958][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 216.363027][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 216.736123][ T1705] ext2: Unknown parameter 'obj_type' [ 216.965871][ T28] audit: type=1400 audit(216.967:277): avc: denied { getopt } for pid=1704 comm="syz.7.333" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.451381][ T28] audit: type=1400 audit(217.467:278): avc: denied { remount } for pid=1724 comm="syz.5.337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 217.543577][ T28] audit: type=1400 audit(217.467:279): avc: denied { create } for pid=1724 comm="syz.5.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 217.591803][ T1729] fuse: Bad value for 'fd' [ 217.631681][ T1730] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 218.324002][ T473] ip6_tunnel: K xmit: Local address not yet configured! [ 218.459346][ T28] audit: type=1400 audit(217.467:280): avc: denied { sys_admin } for pid=1724 comm="syz.5.337" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 218.504411][ T1734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 218.508739][ T28] audit: type=1400 audit(217.487:281): avc: denied { associate } for pid=1726 comm="syz.5.337" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 218.544101][ T1734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 218.666191][ T473] ip6_tunnel: K xmit: Local address not yet configured! [ 218.763729][ T1731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.338'. [ 218.915801][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 218.999141][ T1731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.338'. [ 219.636761][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 219.806736][ T292] ip6_tunnel: K xmit: Local address not yet configured! [ 223.760202][ T359] ip6_tunnel: K xmit: Local address not yet configured! [ 224.212972][ T1767] futex_wake_op: syz.0.347 tries to shift op by 144; fix this program [ 225.472274][ T1793] fuse: Bad value for 'fd' [ 225.480061][ T1793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.354'. [ 225.964417][ T1795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 225.995033][ T1795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 226.195882][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 226.786754][ T292] ip6_tunnel: K xmit: Local address not yet configured! [ 226.805675][ T292] ip6_tunnel: K xmit: Local address not yet configured! [ 227.502516][ T359] ip6_tunnel: K xmit: Local address not yet configured! [ 227.686939][ T1817] fuse: Bad value for 'fd' [ 227.694427][ T1817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.360'. [ 227.758849][ T24] ip6_tunnel: K xmit: Local address not yet configured! [ 228.482090][ T24] ip6_tunnel: K xmit: Local address not yet configured! [ 228.598455][ T1827] netlink: 16 bytes leftover after parsing attributes in process `syz.7.365'. [ 228.724624][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.765937][ T24] ip6_tunnel: K xmit: Local address not yet configured! [ 228.975819][ T24] ip6_tunnel: K xmit: Local address not yet configured! [ 230.169323][ T1848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.370'. [ 230.230567][ T1848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.370'. [ 231.795802][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 231.966588][ T1881] netlink: 8 bytes leftover after parsing attributes in process `syz.7.379'. [ 231.990319][ T1881] netlink: 8 bytes leftover after parsing attributes in process `syz.7.379'. [ 232.541960][ T1894] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.558703][ T1897] tipc: Enabling of bearer rejected, failed to enable media [ 232.576870][ T24] ip6_tunnel: K xmit: Local address not yet configured! [ 232.986037][ T292] ip6_tunnel: K xmit: Local address not yet configured! [ 232.995928][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 233.621542][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 233.635884][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 233.784861][ T359] ip6_tunnel: K xmit: Local address not yet configured! [ 233.855946][ T359] ip6_tunnel: K xmit: Local address not yet configured! [ 233.920170][ T1916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 233.929484][ T1916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 234.156364][ T1927] futex_wake_op: syz.7.390 tries to shift op by 144; fix this program [ 234.915880][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 235.047981][ T1940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.395'. [ 235.097279][ T1940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.395'. [ 237.248430][ T1958] tipc: Enabling of bearer rejected, failed to enable media [ 239.072954][ T1974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 239.119856][ T1974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 240.675804][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 240.931742][ T1986] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.972153][ T1680] ip6_tunnel: K xmit: Local address not yet configured! [ 241.351058][ T1680] ip6_tunnel: K xmit: Local address not yet configured! [ 241.695275][ T2003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 241.730318][ T2003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 242.546922][ T2014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 242.583300][ T2014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 242.598872][ T2020] device batadv_slave_1 entered promiscuous mode [ 243.846338][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 244.376093][ T19] ip6_tunnel: K xmit: Local address not yet configured! [ 244.543736][ T2036] fuse: Bad value for 'fd' [ 244.551303][ T2036] netlink: 16 bytes leftover after parsing attributes in process `syz.7.420'. [ 244.975980][ T19] ip6_tunnel: K xmit: Local address not yet configured! [ 246.005949][ T2040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.421'. [ 246.406600][ T2037] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.441235][ T2020] device batadv_slave_1 left promiscuous mode [ 248.414714][ T473] ip6_tunnel: K xmit: Local address not yet configured! [ 248.457861][ T2059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 248.492117][ T2059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 249.027735][ T2071] futex_wake_op: syz.2.430 tries to shift op by 144; fix this program [ 249.085423][ T2074] bpf setsockopt: ignoring program buffer with optlen=65344 (max_optlen=4096) [ 249.488266][ T473] ip6_tunnel: K xmit: Local address not yet configured! [ 249.656832][ T2078] netlink: 8 bytes leftover after parsing attributes in process `syz.7.434'. [ 249.727661][ T2078] netlink: 8 bytes leftover after parsing attributes in process `syz.7.434'. [ 252.134256][ T2109] futex_wake_op: syz.5.439 tries to shift op by 144; fix this program [ 253.136165][ T2121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.442'. [ 253.145127][ T2121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.442'. [ 255.217385][ T2154] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.256148][ T473] ip6_tunnel: K xmit: Local address not yet configured! [ 255.296260][ T2161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.450'. [ 255.591678][ T28] audit: type=1400 audit(255.604:282): avc: denied { ioctl } for pid=2162 comm="syz.0.453" path="socket:[22265]" dev="sockfs" ino=22265 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.610612][ T2161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.450'. [ 255.706060][ T473] ip6_tunnel: K xmit: Local address not yet configured! [ 255.867418][ T2177] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.926196][ T1665] ip6_tunnel: K xmit: Local address not yet configured! [ 256.891824][ T473] ip6_tunnel: K xmit: Local address not yet configured! [ 257.038141][ T2191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 257.516137][ T2191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 257.568841][ T2207] tipc: Enabling of bearer rejected, failed to enable media [ 258.595829][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 261.827735][ T2227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 261.885833][ T2227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 261.887251][ T2235] tipc: Enabling of bearer rejected, failed to enable media [ 263.634076][ T2257] futex_wake_op: syz.5.476 tries to shift op by 144; fix this program [ 263.713219][ T2259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.766158][ T473] ip6_tunnel: K xmit: Local address not yet configured! [ 265.000617][ T473] ip6_tunnel: K xmit: Local address not yet configured! [ 265.103879][ T2268] fuse: Bad value for 'fd' [ 265.337912][ T2276] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 265.396006][ T1665] ip6_tunnel: K xmit: Local address not yet configured! [ 266.275784][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 266.411582][ T1680] ip6_tunnel: K xmit: Local address not yet configured! [ 266.915858][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 267.429748][ T2289] fuse: Bad value for 'fd' [ 267.555820][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 272.016164][ T2305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 275.799854][ T2305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 275.827991][ T2317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.493'. [ 275.844216][ T2317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.493'. [ 276.582535][ T2333] fuse: Unknown parameter '00000000000000000008' [ 276.698565][ T2338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 276.822488][ T2338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 276.841231][ T2346] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 276.848643][ T2346] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 276.868863][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 276.917377][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.945455][ T2347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 276.958374][ T2347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 276.974895][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 276.986455][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.068269][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.086368][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.095671][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.105116][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.404702][ T1666] ip6_tunnel: K xmit: Local address not yet configured! [ 277.411883][ T1666] ip6_tunnel: K xmit: Local address not yet configured! [ 277.436020][ T1666] ip6_tunnel: K xmit: Local address not yet configured! [ 277.610012][ T2362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 277.624454][ T2362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 278.610612][ T309] ip6_tunnel: K xmit: Local address not yet configured! [ 281.475785][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 281.794890][ T1666] ip6_tunnel: K xmit: Local address not yet configured! [ 285.051214][ T28] audit: type=1400 audit(285.064:283): avc: denied { write } for pid=2402 comm="syz.7.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 285.101708][ T28] audit: type=1400 audit(285.064:284): avc: denied { nlmsg_write } for pid=2402 comm="syz.7.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 285.230289][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 285.268284][ T359] ip6_tunnel: K xmit: Local address not yet configured! [ 289.067971][ T292] ip6_tunnel: K xmit: Local address not yet configured! [ 289.955886][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 295.716607][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 296.722260][ T28] audit: type=1400 audit(296.734:285): avc: denied { write } for pid=2441 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 301.752681][ T2464] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.759807][ T2464] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.767719][ T2464] device bridge_slave_0 entered promiscuous mode [ 301.775031][ T2464] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.782532][ T2464] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.792286][ T2464] device bridge_slave_1 entered promiscuous mode [ 303.819169][ T28] audit: type=1400 audit(303.824:286): avc: denied { name_bind } for pid=2470 comm="syz.4.540" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 305.249534][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.426716][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.623988][ T2464] device veth0_vlan entered promiscuous mode [ 305.763787][ T2464] device veth1_macvtap entered promiscuous mode [ 306.355180][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.395265][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.595770][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 306.757111][ T631] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.764228][ T631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.074860][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.111512][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.153084][ T631] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.160203][ T631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.211925][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 308.245207][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.258228][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 308.270571][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.281790][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 308.293080][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.322929][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.427354][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.503310][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.612683][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.740960][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 308.773458][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.860106][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.897707][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.935565][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 309.266756][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.276045][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 309.287489][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 309.318635][ T2497] loop8: detected capacity change from 0 to 512 [ 309.325440][ T2497] ext2: Unknown parameter 'obj_type' [ 309.486664][ T43] device bridge_slave_1 left promiscuous mode [ 309.493319][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.502530][ T43] device bridge_slave_0 left promiscuous mode [ 309.509574][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.525531][ T43] device veth1_macvtap left promiscuous mode [ 309.532041][ T43] device veth0_vlan left promiscuous mode [ 309.878955][ T2510] tipc: Enabling of bearer rejected, failed to enable media [ 310.088361][ T2518] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 310.322212][ T359] ip6_tunnel: K xmit: Local address not yet configured! [ 313.936765][ T359] ip6_tunnel: K xmit: Local address not yet configured! [ 324.010359][ T2558] loop8: detected capacity change from 0 to 512 [ 324.017244][ T2558] ext2: Unknown parameter 'obj_type' [ 324.111718][ T2559] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 327.328655][ T2596] loop8: detected capacity change from 0 to 1024 [ 327.394451][ T2596] ext4: Unknown parameter 'fowner' [ 327.822136][ T2600] loop8: detected capacity change from 0 to 4096 [ 327.843785][ T2600] ext4: Unknown parameter 'nouser_xattr' [ 331.555849][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 331.562975][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 332.112138][ T2618] fuse: Bad value for 'fd' [ 332.117403][ T2618] netlink: 16 bytes leftover after parsing attributes in process `syz.8.574'. [ 332.129713][ T28] audit: type=1400 audit(332.124:287): avc: denied { read append } for pid=2613 comm="syz.8.574" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 332.158976][ T28] audit: type=1400 audit(332.124:288): avc: denied { open } for pid=2613 comm="syz.8.574" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 332.334611][ T2624] tipc: Enabling of bearer rejected, failed to enable media [ 332.772906][ T2635] fuse: Bad value for 'fd' [ 332.852976][ T2635] netlink: 16 bytes leftover after parsing attributes in process `syz.8.579'. [ 336.676454][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 338.780589][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.788502][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.806736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 338.876097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 338.894844][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 338.913677][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 338.924987][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.933947][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 338.946109][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.875769][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 341.965486][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 342.005157][ T28] audit: type=1400 audit(342.014:289): avc: denied { create } for pid=2670 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 348.798282][ T2698] netlink: 8 bytes leftover after parsing attributes in process `syz.8.597'. [ 349.993688][ T2718] netlink: 8 bytes leftover after parsing attributes in process `syz.7.601'. [ 350.023342][ T2718] netlink: 8 bytes leftover after parsing attributes in process `syz.7.601'. [ 350.341566][ T2737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 350.398371][ T2737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 352.760704][ T2756] fuse: Bad value for 'fd' [ 352.783421][ T2756] netlink: 16 bytes leftover after parsing attributes in process `syz.7.610'. [ 354.668416][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 358.387893][ T2781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 358.397229][ T2781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 361.814768][ T2796] fuse: Bad value for 'fd' [ 361.891906][ T2801] netlink: 16 bytes leftover after parsing attributes in process `syz.5.621'. [ 364.049763][ T2832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.631'. [ 364.103620][ T2832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.631'. [ 366.823214][ T2846] futex_wake_op: syz.5.634 tries to shift op by 144; fix this program [ 368.419152][ T2855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.638'. [ 368.543528][ T2865] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 369.017503][ T2855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.638'. [ 374.472387][ T2905] fuse: Bad value for 'fd' [ 374.480558][ T2905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.649'. [ 383.335817][ T2931] futex_wake_op: syz.5.653 tries to shift op by 144; fix this program [ 385.913481][ T2966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 385.982847][ T2966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 403.046485][ T3041] fuse: Bad value for 'fd' [ 403.085949][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 404.211132][ T313] ip6_tunnel: K xmit: Local address not yet configured! [ 404.264833][ T3046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'. [ 404.284094][ T3046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'. [ 406.718737][ T313] ip6_tunnel: K xmit: Local address not yet configured! [ 410.543407][ T3093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.699'. [ 410.561787][ T3093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.699'. [ 413.476472][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 414.917737][ T3095] netlink: 16 bytes leftover after parsing attributes in process `syz.7.696'. [ 416.099222][ T3105] fuse: Unknown parameter 'fd00000000000000000008' [ 416.106549][ T3105] netlink: 16 bytes leftover after parsing attributes in process `syz.8.700'. [ 425.589620][ T28] audit: type=1400 audit(425.604:290): avc: denied { mount } for pid=3173 comm="syz.7.724" name="/" dev="ramfs" ino=25692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 425.760112][ T3207] netlink: 36 bytes leftover after parsing attributes in process `syz.7.739'. [ 425.769147][ T28] audit: type=1400 audit(425.774:291): avc: denied { read } for pid=3198 comm="syz.8.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 425.852986][ T3221] incfs: Error accessing: ./bus/file0. [ 425.858949][ T3221] incfs: mount failed -2 [ 426.024918][ T3239] 9pnet_fd: p9_fd_create_tcp (3239): problem binding to privport [ 426.152895][ T28] audit: type=1400 audit(426.164:292): avc: denied { unmount } for pid=3248 comm="syz.2.759" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 426.245494][ T3253] overlayfs: failed to clone upperpath [ 426.541608][ T28] audit: type=1400 audit(426.554:293): avc: denied { create } for pid=3262 comm="syz.8.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 426.587558][ T28] audit: type=1400 audit(426.574:294): avc: denied { setopt } for pid=3262 comm="syz.8.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 426.624820][ T28] audit: type=1400 audit(426.574:295): avc: denied { getopt } for pid=3262 comm="syz.8.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 426.762351][ T3291] overlayfs: failed to clone upperpath [ 427.567136][ T3319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.791'. [ 427.634018][ T28] audit: type=1400 audit(427.644:296): avc: denied { connect } for pid=3336 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 428.106597][ T28] audit: type=1400 audit(428.124:297): avc: denied { bind } for pid=3360 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 428.130798][ T3365] overlayfs: failed to resolve './file2': -2 [ 428.223819][ T28] audit: type=1400 audit(428.234:298): avc: denied { mount } for pid=3376 comm="syz.5.815" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 428.245567][ T28] audit: type=1400 audit(428.234:299): avc: denied { search } for pid=3376 comm="syz.5.815" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 428.324350][ T3390] overlayfs: failed to clone upperpath [ 428.380988][ T3399] overlayfs: unrecognized mount option "verity=on" or missing value [ 428.421862][ T3404] netlink: 8 bytes leftover after parsing attributes in process `syz.7.826'. [ 428.842789][ T3451] netlink: 744 bytes leftover after parsing attributes in process `syz.4.847'. [ 429.427237][ T3540] overlayfs: failed to clone upperpath [ 430.793943][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 430.793961][ T28] audit: type=1400 audit(430.804:306): avc: denied { read } for pid=3643 comm="syz.7.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 431.888329][ T28] audit: type=1400 audit(431.874:307): avc: denied { wake_alarm } for pid=3687 comm="syz.7.953" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 432.151694][ T28] audit: type=1400 audit(432.164:308): avc: denied { ioctl } for pid=3702 comm="syz.7.960" path="socket:[25548]" dev="sockfs" ino=25548 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 432.176941][ T3703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.960'. [ 432.237800][ T3712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=3712 comm=syz.7.964 [ 432.266053][ T3718] tmpfs: Unknown parameter 'quota' [ 432.317178][ T3728] netlink: 24 bytes leftover after parsing attributes in process `syz.8.972'. [ 432.705061][ T28] audit: type=1400 audit(432.714:309): avc: denied { create } for pid=3750 comm="syz.7.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 432.736294][ T3754] tipc: Started in network mode [ 432.787783][ T3754] tipc: Node identity ac1414aa, cluster identity 4711 [ 432.796569][ T3754] tipc: Enabled bearer , priority 10 [ 434.009489][ T3584] tipc: Node number set to 2886997162 [ 434.147293][ T3779] 9pnet_fd: Insufficient options for proto=fd [ 434.269557][ T28] audit: type=1400 audit(434.284:310): avc: denied { setopt } for pid=3780 comm="syz.4.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 435.959812][ T28] audit: type=1326 audit(435.974:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.8.1020" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f0f9ce59 code=0x7ffc0000 [ 435.985480][ T28] audit: type=1326 audit(435.974:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.8.1020" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f0f9ce59 code=0x7ffc0000 [ 436.011472][ T28] audit: type=1326 audit(436.004:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.8.1020" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f12f0f9ce59 code=0x7ffc0000 [ 436.038538][ T28] audit: type=1326 audit(436.004:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.8.1020" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f0f9ce59 code=0x7ffc0000 [ 436.065766][ T28] audit: type=1326 audit(436.004:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.8.1020" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f12f0f9ce59 code=0x7ffc0000 [ 436.100078][ T28] audit: type=1326 audit(436.004:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.8.1020" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f0f9ce59 code=0x7ffc0000 [ 436.127049][ T28] audit: type=1326 audit(436.004:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.8.1020" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12f0f9ce59 code=0x7ffc0000 [ 436.151475][ T28] audit: type=1326 audit(436.004:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.8.1020" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f0f9ce59 code=0x7ffc0000 [ 436.205463][ T28] audit: type=1326 audit(436.004:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.8.1020" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12f0f9ce59 code=0x7ffc0000 [ 436.236196][ T28] audit: type=1326 audit(436.004:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.8.1020" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f0f9ce59 code=0x7ffc0000 [ 437.636077][ T3936] futex_wake_op: syz.4.1049 tries to shift op by 32; fix this program [ 438.545504][ T3932] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.552961][ T3932] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.496726][ T3980] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1066'. [ 442.179944][ T4005] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1077'. [ 442.363324][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 442.363342][ T28] audit: type=1400 audit(442.374:332): avc: denied { create } for pid=4023 comm="syz.4.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 447.310511][ T4164] device vlan2 entered promiscuous mode [ 447.414704][ T4162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1138'. [ 447.690776][ T4175] tipc: Enabling of bearer rejected, failed to enable media [ 447.841913][ T4187] overlayfs: failed to clone upperpath [ 447.854562][ T4187] overlayfs: failed to clone upperpath [ 452.968721][ T4234] xt_hashlimit: max too large, truncated to 1048576 [ 452.990605][ T4234] xt_hashlimit: overflow, try lower: 0/0 [ 454.435972][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 454.613676][ T4270] overlayfs: failed to clone upperpath [ 454.694544][ T28] audit: type=1400 audit(454.704:333): avc: denied { mmap_zero } for pid=4271 comm="syz.8.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 455.188281][ T4281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1186'. [ 456.773051][ T4317] device vlan2 left promiscuous mode [ 456.897713][ T28] audit: type=1400 audit(456.914:334): avc: denied { setopt } for pid=4323 comm="syz.2.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 458.095143][ T4355] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1218'. [ 458.956253][ T4383] overlayfs: failed to clone upperpath [ 459.118777][ T4395] overlayfs: failed to clone upperpath [ 459.327072][ T4399] overlayfs: failed to clone upperpath [ 459.555949][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 460.124411][ T28] audit: type=1400 audit(460.134:335): avc: denied { bind } for pid=4406 comm="syz.5.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 460.191245][ T28] audit: type=1400 audit(460.174:336): avc: denied { setopt } for pid=4406 comm="syz.5.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 460.406519][ T28] audit: type=1400 audit(460.174:337): avc: denied { listen } for pid=4406 comm="syz.5.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 460.425958][ T28] audit: type=1400 audit(460.174:338): avc: denied { accept } for pid=4406 comm="syz.5.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 461.121879][ T28] audit: type=1400 audit(461.134:339): avc: denied { bind } for pid=4459 comm="syz.2.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 461.238576][ T28] audit: type=1400 audit(461.194:340): avc: denied { name_bind } for pid=4459 comm="syz.2.1258" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 462.855578][ T4463] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 462.905368][ T4462] netlink: 'syz.2.1258': attribute type 4 has an invalid length. [ 462.945267][ T28] audit: type=1400 audit(461.194:341): avc: denied { node_bind } for pid=4459 comm="syz.2.1258" saddr=fe80::3a src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 463.256729][ T4485] overlayfs: failed to clone upperpath [ 463.724321][ T4508] overlayfs: failed to clone upperpath [ 463.777598][ T4517] netlink: 'syz.2.1272': attribute type 4 has an invalid length. [ 464.437652][ T4545] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1293'. [ 464.546744][ T28] audit: type=1400 audit(464.564:342): avc: denied { bind } for pid=4554 comm="syz.7.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 464.602053][ T28] audit: type=1400 audit(464.574:343): avc: denied { nlmsg_read } for pid=4558 comm="syz.4.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 464.673518][ T4584] overlayfs: failed to clone lowerpath [ 464.681271][ T4584] overlayfs: failed to clone upperpath [ 464.687727][ T4588] overlayfs: failed to clone upperpath [ 464.708853][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 464.718335][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 464.755929][ T313] ip6_tunnel: K xmit: Local address not yet configured! [ 465.105985][ T4630] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1331'. [ 465.405851][ T1680] ip6_tunnel: K xmit: Local address not yet configured! [ 465.886998][ T4654] overlayfs: failed to clone upperpath [ 466.608452][ T4662] overlayfs: missing 'lowerdir' [ 468.545683][ T28] audit: type=1400 audit(468.544:344): avc: denied { create } for pid=4724 comm="syz.2.1372" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 468.598623][ T28] audit: type=1400 audit(468.544:345): avc: denied { read append } for pid=4724 comm="syz.2.1372" name="file0" dev="tmpfs" ino=1428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 468.668743][ T28] audit: type=1400 audit(468.544:346): avc: denied { open } for pid=4724 comm="syz.2.1372" path="/268/file0" dev="tmpfs" ino=1428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 468.697926][ T4733] fuse: Unknown parameter 'f01777777777777777777777' [ 468.717751][ T28] audit: type=1400 audit(468.554:347): avc: denied { unlink } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=1428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 469.701143][ T28] audit: type=1400 audit(725.711:348): avc: denied { create } for pid=4761 comm="syz.4.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 469.773720][ T4782] overlayfs: missing 'lowerdir' [ 471.561454][ T28] audit: type=1326 audit(727.572:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4840 comm="syz.5.1424" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0edb19ce59 code=0x0 [ 472.334539][ T4896] ip6t_rpfilter: unknown options [ 472.784662][ T4908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1453'. [ 472.830533][ T4914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1456'. [ 474.912901][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 475.232428][ T4948] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1469'. [ 479.418686][ T5007] overlayfs: failed to clone lowerpath [ 479.448065][ T5011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1494'. [ 479.465936][ T5011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1494'. [ 480.334543][ T5032] x_tables: duplicate underflow at hook 1 [ 480.694130][ T5048] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1507'. [ 480.796512][ T28] audit: type=1400 audit(736.817:350): avc: denied { bind } for pid=5052 comm="syz.8.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 480.820775][ T5053] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1509'. [ 480.837996][ T28] audit: type=1400 audit(736.837:351): avc: denied { setopt } for pid=5052 comm="syz.8.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 482.508300][ T5079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'. [ 482.672669][ T5090] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1525'. [ 484.567952][ T28] audit: type=1400 audit(739.518:352): avc: denied { ioctl } for pid=5085 comm="syz.5.1523" path="socket:[30142]" dev="sockfs" ino=30142 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 484.709700][ T28] audit: type=1400 audit(740.029:353): avc: denied { setopt } for pid=5085 comm="syz.5.1523" laddr=172.20.20.170 lport=34 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 486.279245][ T28] audit: type=1400 audit(742.300:354): avc: denied { write } for pid=5149 comm="syz.4.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 486.392542][ T5155] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1551'. [ 487.569356][ T28] audit: type=1400 audit(743.590:355): avc: denied { create } for pid=5227 comm="syz.8.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 488.157031][ T5268] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1601'. [ 490.961097][ T28] audit: type=1400 audit(746.982:356): avc: denied { create } for pid=5286 comm="syz.2.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 491.091183][ T5297] x_tables: duplicate underflow at hook 1 [ 495.212543][ T5376] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1644'. [ 495.431817][ T5376] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1644'. [ 495.806313][ T5398] overlayfs: failed to clone upperpath [ 496.620543][ T5410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1662'. [ 496.760806][ T5422] overlayfs: failed to clone upperpath [ 497.614723][ T5450] mmap: syz.8.1679 (5450) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 497.702447][ T5460] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1683'. [ 497.711671][ T5460] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1683'. [ 497.747388][ T28] audit: type=1400 audit(753.775:357): avc: denied { ioctl } for pid=5465 comm="syz.5.1686" path="socket:[30548]" dev="sockfs" ino=30548 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 497.772010][ T5465] ================================================================== [ 497.780089][ T5465] BUG: KASAN: use-after-free in mutex_lock+0x86/0x1b0 [ 497.786972][ T5465] Write of size 8 at addr ffff888131f8ed50 by task syz.5.1686/5465 [ 497.794858][ T5465] [ 497.797180][ T5465] CPU: 1 PID: 5465 Comm: syz.5.1686 Not tainted syzkaller #0 [ 497.804558][ T5465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 497.814605][ T5465] Call Trace: [ 497.817978][ T5465] [ 497.821100][ T5465] __dump_stack+0x21/0x24 [ 497.825524][ T5465] dump_stack_lvl+0x110/0x170 [ 497.830238][ T5465] ? __cfi_dump_stack_lvl+0x8/0x8 [ 497.835280][ T5465] ? mutex_lock+0x86/0x1b0 [ 497.839735][ T5465] print_address_description+0x71/0x200 [ 497.845391][ T5465] print_report+0x4a/0x60 [ 497.849753][ T5465] kasan_report+0x122/0x150 [ 497.854445][ T5465] ? mutex_lock+0x86/0x1b0 [ 497.858893][ T5465] kasan_check_range+0x249/0x2a0 [ 497.863869][ T5465] __kasan_check_write+0x14/0x20 [ 497.868899][ T5465] mutex_lock+0x86/0x1b0 [ 497.873179][ T5465] ? __cfi_mutex_lock+0x10/0x10 [ 497.878066][ T5465] ? kfree+0x6f/0xf0 [ 497.882058][ T5465] ? l2tp_session_put+0xaf/0x1a0 [ 497.887075][ T5465] ? l2tp_session_delete+0x3df/0x4d0 [ 497.892527][ T5465] pppol2tp_release+0x178/0x2b0 [ 497.897421][ T5465] sock_close+0xc9/0x220 [ 497.901784][ T5465] ? __cfi_sock_close+0x10/0x10 [ 497.906739][ T5465] __fput+0x1fd/0x8f0 [ 497.910924][ T5465] ____fput+0x15/0x20 [ 497.914941][ T5465] task_work_run+0x1e1/0x250 [ 497.919561][ T5465] ? __cfi_task_work_run+0x10/0x10 [ 497.924719][ T5465] ? __cfi___close_range+0x10/0x10 [ 497.929949][ T5465] ? do_user_addr_fault+0x9a5/0x1030 [ 497.935271][ T5465] exit_to_user_mode_loop+0x9b/0xb0 [ 497.940600][ T5465] exit_to_user_mode_prepare+0x87/0xd0 [ 497.946096][ T5465] syscall_exit_to_user_mode+0x1a/0x30 [ 497.951604][ T5465] do_syscall_64+0x58/0xa0 [ 497.956104][ T5465] ? clear_bhb_loop+0x30/0x80 [ 497.960819][ T5465] ? clear_bhb_loop+0x30/0x80 [ 497.965507][ T5465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.971488][ T5465] RIP: 0033:0x7f0edb19ce59 [ 497.975980][ T5465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.995582][ T5465] RSP: 002b:00007ffedc9197a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 498.004079][ T5465] RAX: 0000000000000000 RBX: 00007ffedc919890 RCX: 00007f0edb19ce59 [ 498.012063][ T5465] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 498.020123][ T5465] RBP: 0000000000079846 R08: 0000000000000001 R09: 0000000000000000 [ 498.028093][ T5465] R10: 0000001b32720000 R11: 0000000000000246 R12: 00007ffedc9198d0 [ 498.036067][ T5465] R13: 00007f0edb415fac R14: 000000000007987a R15: 00007f0edb415fa0 [ 498.044073][ T5465] [ 498.047087][ T5465] [ 498.049399][ T5465] Allocated by task 5466: [ 498.053735][ T5465] kasan_set_track+0x4b/0x70 [ 498.058323][ T5465] kasan_save_alloc_info+0x1f/0x30 [ 498.063446][ T5465] __kasan_kmalloc+0x95/0xb0 [ 498.068062][ T5465] __kmalloc+0xb4/0x1e0 [ 498.072221][ T5465] l2tp_session_create+0x38/0xbd0 [ 498.077241][ T5465] pppol2tp_connect+0xbf5/0x1640 [ 498.082182][ T5465] __sys_connect+0x3da/0x460 [ 498.086784][ T5465] __x64_sys_connect+0x7a/0x90 [ 498.092063][ T5465] x64_sys_call+0x88d/0x9a0 [ 498.096584][ T5465] do_syscall_64+0x4c/0xa0 [ 498.101000][ T5465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.106890][ T5465] [ 498.109305][ T5465] Freed by task 5465: [ 498.113323][ T5465] kasan_set_track+0x4b/0x70 [ 498.117923][ T5465] kasan_save_free_info+0x2b/0x40 [ 498.123024][ T5465] ____kasan_slab_free+0x132/0x180 [ 498.128140][ T5465] __kasan_slab_free+0x11/0x20 [ 498.132907][ T5465] slab_free_freelist_hook+0xc2/0x190 [ 498.138292][ T5465] __kmem_cache_free+0xb7/0x1b0 [ 498.143304][ T5465] kfree+0x6f/0xf0 [ 498.147024][ T5465] l2tp_session_put+0xaf/0x1a0 [ 498.151784][ T5465] l2tp_session_delete+0x3df/0x4d0 [ 498.157005][ T5465] pppol2tp_release+0x169/0x2b0 [ 498.162081][ T5465] sock_close+0xc9/0x220 [ 498.166334][ T5465] __fput+0x1fd/0x8f0 [ 498.170398][ T5465] ____fput+0x15/0x20 [ 498.174370][ T5465] task_work_run+0x1e1/0x250 [ 498.178960][ T5465] exit_to_user_mode_loop+0x9b/0xb0 [ 498.184174][ T5465] exit_to_user_mode_prepare+0x87/0xd0 [ 498.189654][ T5465] syscall_exit_to_user_mode+0x1a/0x30 [ 498.195119][ T5465] do_syscall_64+0x58/0xa0 [ 498.199557][ T5465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.205464][ T5465] [ 498.207790][ T5465] Last potentially related work creation: [ 498.213493][ T5465] kasan_save_stack+0x3a/0x60 [ 498.218185][ T5465] __kasan_record_aux_stack+0xb6/0xc0 [ 498.223587][ T5465] kasan_record_aux_stack_noalloc+0xb/0x10 [ 498.229398][ T5465] call_rcu+0xcf/0xf50 [ 498.233550][ T5465] __ip6_del_rt+0xf5/0x150 [ 498.238042][ T5465] ip6_del_rt+0xbe/0x110 [ 498.242284][ T5465] __ipv6_ifa_notify+0x877/0xe80 [ 498.247230][ T5465] addrconf_ifdown+0xdfd/0x1950 [ 498.252177][ T5465] addrconf_notify+0x39f/0xe30 [ 498.256939][ T5465] raw_notifier_call_chain+0xa1/0x110 [ 498.262388][ T5465] dev_close_many+0x325/0x4d0 [ 498.267145][ T5465] unregister_netdevice_many+0x43f/0x1910 [ 498.272912][ T5465] default_device_exit_batch+0x951/0x9f0 [ 498.278551][ T5465] cleanup_net+0x630/0xb10 [ 498.282998][ T5465] process_one_work+0x717/0xc30 [ 498.287847][ T5465] worker_thread+0xa4d/0x11d0 [ 498.292520][ T5465] kthread+0x281/0x320 [ 498.296585][ T5465] ret_from_fork+0x1f/0x30 [ 498.300992][ T5465] [ 498.303334][ T5465] The buggy address belongs to the object at ffff888131f8ec00 [ 498.303334][ T5465] which belongs to the cache kmalloc-512 of size 512 [ 498.317577][ T5465] The buggy address is located 336 bytes inside of [ 498.317577][ T5465] 512-byte region [ffff888131f8ec00, ffff888131f8ee00) [ 498.330852][ T5465] [ 498.333184][ T5465] The buggy address belongs to the physical page: [ 498.339632][ T5465] page:ffffea0004c7e300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x131f8c [ 498.349863][ T5465] head:ffffea0004c7e300 order:2 compound_mapcount:0 compound_pincount:0 [ 498.358183][ T5465] flags: 0x4000000000010200(slab|head|zone=1) [ 498.364280][ T5465] raw: 4000000000010200 ffffea0004f32000 dead000000000002 ffff888100042f00 [ 498.372866][ T5465] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 498.381452][ T5465] page dumped because: kasan: bad access detected [ 498.387851][ T5465] page_owner tracks the page as allocated [ 498.393553][ T5465] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 287, tgid 287 (syz-executor), ts 25120747475, free_ts 0 [ 498.413945][ T5465] post_alloc_hook+0x1f5/0x210 [ 498.418761][ T5465] prep_new_page+0x1c/0x110 [ 498.423271][ T5465] get_page_from_freelist+0x2ca9/0x2d20 [ 498.428819][ T5465] __alloc_pages+0x1fa/0x610 [ 498.433429][ T5465] alloc_slab_page+0x6e/0xf0 [ 498.438008][ T5465] new_slab+0x98/0x3e0 [ 498.442070][ T5465] ___slab_alloc+0x70f/0xb70 [ 498.446667][ T5465] __slab_alloc+0x5e/0xa0 [ 498.451004][ T5465] __kmem_cache_alloc_node+0x204/0x2d0 [ 498.456452][ T5465] __kmalloc_node_track_caller+0xa1/0x1e0 [ 498.462177][ T5465] __alloc_skb+0x226/0x4a0 [ 498.466723][ T5465] netlink_ack+0x373/0x1160 [ 498.471251][ T5465] netlink_rcv_skb+0x27e/0x450 [ 498.476108][ T5465] rtnetlink_rcv+0x1c/0x20 [ 498.480587][ T5465] netlink_unicast+0x8c1/0xa60 [ 498.485422][ T5465] netlink_sendmsg+0x8b9/0xbd0 [ 498.490196][ T5465] page_owner free stack trace missing [ 498.495575][ T5465] [ 498.497914][ T5465] Memory state around the buggy address: [ 498.503626][ T5465] ffff888131f8ec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 498.511693][ T5465] ffff888131f8ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 498.519755][ T5465] >ffff888131f8ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 498.527822][ T5465] ^ [ 498.534483][ T5465] ffff888131f8ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 498.542559][ T5465] ffff888131f8ee00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 498.550611][ T5465] ================================================================== [ 498.560327][ T5465] Disabling lock debugging due to kernel taint [ 498.569758][ T28] audit: type=1400 audit(754.596:358): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 498.591458][ T28] audit: type=1400 audit(754.596:359): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.612352][ T28] audit: type=1400 audit(754.596:360): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.633056][ T28] audit: type=1400 audit(754.596:361): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.653147][ T28] audit: type=1400 audit(754.596:362): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 498.673050][ T28] audit: type=1400 audit(754.596:363): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 498.695365][ T28] audit: type=1400 audit(754.596:364): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1