last executing test programs: 1m21.238687082s ago: executing program 0 (id=32): capset(&(0x7f00000001c0)={0x20071026}, &(0x7f00000019c0)={0x0, 0x2, 0x0, 0x81, 0xfffffffb}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1, 0x10, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m21.202729873s ago: executing program 0 (id=35): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) 1m21.136449895s ago: executing program 0 (id=38): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a1, &(0x7f00000007c0)={'bridge0\x00', @broadcast}) 1m21.015119318s ago: executing program 0 (id=40): syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12011003c40b6220"], 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r1, 0x0, &(0x7f0000020880)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m19.603342913s ago: executing program 0 (id=53): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000001c0)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000003c0)=[@acquire]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000600)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000640)}) 1m19.160663114s ago: executing program 0 (id=69): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000013c0)={0x84, &(0x7f0000001480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) 1m19.160573754s ago: executing program 32 (id=69): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000013c0)={0x84, &(0x7f0000001480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) 48.220487314s ago: executing program 5 (id=838): r0 = socket$inet(0x2, 0x2, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r1) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f00000002c0)='\b\x00', 0x2}, {&(0x7f0000000300)="f4a30ea7f0c8", 0x6}], 0x2, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x810) listen(0xffffffffffffffff, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 47.96842465s ago: executing program 5 (id=841): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) 47.800473395s ago: executing program 5 (id=844): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 47.469000383s ago: executing program 5 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}]}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)}) 46.186268254s ago: executing program 5 (id=861): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x7, 0x0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0x10106, 0x2, 0x0) 45.913129331s ago: executing program 5 (id=867): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6) sched_setscheduler(0x0, 0x2, 0x0) ptrace(0x10, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000001380), 0x76, 0x101b01) ioctl$USBDEVFS_RESET(r0, 0x5514) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 30.89008644s ago: executing program 33 (id=867): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6) sched_setscheduler(0x0, 0x2, 0x0) ptrace(0x10, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000001380), 0x76, 0x101b01) ioctl$USBDEVFS_RESET(r0, 0x5514) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 2.879899999s ago: executing program 1 (id=2061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x13, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000020000000900010073797a30000000004c000000120a01040000000000000000020000000900010073797a30000000000900020073797a300000000008000300000000031800048009000100736e6d70000000000500030011"], 0x94}}, 0x0) 2.730172932s ago: executing program 1 (id=2065): prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000006c0), 0x10106, 0x2, 0x0) mincore(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, &(0x7f0000000f00)=""/163) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.718988198s ago: executing program 3 (id=2066): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd2a}, 0x14}, 0x1, 0x0, 0x0, 0x2400c804}, 0x20008190) 1.718770667s ago: executing program 3 (id=2067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x12, r2, 0x100000000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "60ece29a364c878d", "07c654e4f141f71487906ece11071f86", "16e12b65", "62582c7aad500e74"}, 0x28) write$binfmt_script(r6, 0x0, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xd4, 0x0, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, 0x0) close_range(r5, r6, 0x0) 1.132507342s ago: executing program 1 (id=2069): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x342) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0x7}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x8, &(0x7f0000000840)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0x20000008}) 946.808486ms ago: executing program 1 (id=2074): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x0, &(0x7f0000000640), 0x1, 0x4bc, &(0x7f0000000ac0)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000f80)=@loop={'/dev/loop', 0x0}, 0x0, 0xffffffffffffffff) 846.747969ms ago: executing program 1 (id=2077): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000b704000000deff00850000003400000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f00000004c0), &(0x7f0000000500)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000540)='h', 0x100000) 842.652619ms ago: executing program 3 (id=2078): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) finit_module(r0, 0x0, 0x2) 794.39352ms ago: executing program 3 (id=2081): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0xb2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 638.233444ms ago: executing program 3 (id=2088): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) ioctl$UBLK_U_CMD_SET_PARAMS(r4, 0xc0207508, 0x0) r6 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r6, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4000e704, 0x4, 0x1000002, 0x91, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x40, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x10000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 440.494959ms ago: executing program 2 (id=2093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r0, &(0x7f00000006c0)="57178de81f", &(0x7f0000000780)=""/38}, 0x20) 440.393529ms ago: executing program 2 (id=2094): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x13, 0x3, &(0x7f0000000cc0)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x8a}}, &(0x7f0000000d00)='syzkaller\x00'}, 0x80) 409.857819ms ago: executing program 2 (id=2095): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000008000000fbff00000040", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000030000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 380.27477ms ago: executing program 2 (id=2096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000011c0)={{r0}, &(0x7f0000001140), &(0x7f0000001180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 338.876581ms ago: executing program 2 (id=2097): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) 254.271593ms ago: executing program 2 (id=2098): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x10, 0x41101, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2, 0xfffffffd}, 0x50) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x7c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:modules_object_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10008001}, 0x400a0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/167, 0xa7}], 0x1}, 0xfff}], 0x1, 0x122, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200), 0x4) openat$cgroup_ro(r7, &(0x7f0000000840)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 253.942063ms ago: executing program 6 (id=2100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x5, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0), 0x1000, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r2}, 0xc) 156.653276ms ago: executing program 3 (id=2102): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x7, 0x0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs\x00', 0x1ff) syz_open_procfs(0x0, &(0x7f0000000180)='net/rpc\x00') write(0xffffffffffffffff, &(0x7f0000000200)=' \\ 127.0.0.1 2000 \\00x0 \\xalhost\n', 0x24) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x201, 0x18b) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)) fsopen(&(0x7f0000000540)='pipefs\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracefs/dynamic_events\x00', 0x2, 0x0) write$hidraw(r2, &(0x7f0000000140)='s#i ', 0x4) 156.319826ms ago: executing program 6 (id=2104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x3, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000516fce30f043b24c000000bf91000000000000b7020000010000008500000085000000b7000000000000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 155.649876ms ago: executing program 4 (id=2105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 137.657897ms ago: executing program 4 (id=2106): socketpair(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x1, 0x3adc, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003680)={0x1, 0xc, &(0x7f0000003740)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0, 0x4bb0}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff4}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000037c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000003800)=r3, 0x4) sendmsg(r0, &(0x7f0000003840)={0x0, 0x0, 0x0}, 0x4000000) 118.143347ms ago: executing program 6 (id=2107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000100000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 117.126547ms ago: executing program 4 (id=2108): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002540)=@base={0x1, 0x9, 0x5, 0x7, 0xc1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002600), &(0x7f0000002640), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002680)={r0, &(0x7f00000026c0)="e231a43c", &(0x7f0000002700)=""/74}, 0x20) 96.920678ms ago: executing program 4 (id=2109): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 64.570058ms ago: executing program 6 (id=2110): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={0xffffffffffffffff, 0x300f000, 0xe, 0x88a8, &(0x7f0000001b00)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 63.182028ms ago: executing program 4 (id=2111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x94}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 33.283929ms ago: executing program 1 (id=2112): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r0, 0x2000000, 0x20, 0x0, &(0x7f0000000b00)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 980.489µs ago: executing program 6 (id=2113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r2}, 0xc) 895.149µs ago: executing program 6 (id=2114): bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000026c0), 0xfffffedf, 0x10, &(0x7f0000002700)}, 0x48) 0s ago: executing program 4 (id=2115): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.552330][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 14.552346][ T28] audit: type=1400 audit(1792156473.462:59): avc: denied { transition } for pid=225 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.557135][ T28] audit: type=1400 audit(1792156473.462:60): avc: denied { noatsecure } for pid=225 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.560860][ T28] audit: type=1400 audit(1792156473.462:61): avc: denied { write } for pid=225 comm="sh" path="pipe:[15392]" dev="pipefs" ino=15392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.564301][ T28] audit: type=1400 audit(1792156473.462:62): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.567509][ T28] audit: type=1400 audit(1792156473.462:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. [ 21.895999][ T28] audit: type=1400 audit(1792156480.802:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.899696][ T279] cgroup: Unknown subsys name 'net' [ 21.918860][ T28] audit: type=1400 audit(1792156480.802:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.946318][ T28] audit: type=1400 audit(1792156480.842:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.946775][ T279] cgroup: Unknown subsys name 'devices' [ 22.094168][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.099869][ T279] cgroup: Unknown subsys name 'rlimit' [ 22.204738][ T28] audit: type=1400 audit(1792156481.112:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.228085][ T28] audit: type=1400 audit(1792156481.112:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.253119][ T28] audit: type=1400 audit(1792156481.112:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.324249][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.333189][ T28] audit: type=1400 audit(1792156481.242:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.358634][ T28] audit: type=1400 audit(1792156481.242:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.372076][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.385637][ T28] audit: type=1400 audit(1792156481.272:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.418879][ T28] audit: type=1400 audit(1792156481.272:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.329515][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.336759][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.344435][ T289] device bridge_slave_0 entered promiscuous mode [ 23.352839][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.359907][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.367433][ T289] device bridge_slave_1 entered promiscuous mode [ 23.388063][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.395276][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.402847][ T287] device bridge_slave_0 entered promiscuous mode [ 23.425882][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.433003][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.440545][ T287] device bridge_slave_1 entered promiscuous mode [ 23.484734][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.491933][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.499346][ T291] device bridge_slave_0 entered promiscuous mode [ 23.510211][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.517404][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.524969][ T291] device bridge_slave_1 entered promiscuous mode [ 23.542035][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.549114][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.556687][ T288] device bridge_slave_0 entered promiscuous mode [ 23.575911][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.583058][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.590489][ T290] device bridge_slave_0 entered promiscuous mode [ 23.597556][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.604704][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.612264][ T288] device bridge_slave_1 entered promiscuous mode [ 23.633139][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.640232][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.647908][ T290] device bridge_slave_1 entered promiscuous mode [ 23.838020][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.845139][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.852490][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.859554][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.869148][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.876270][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.883585][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.890630][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.902843][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.909922][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.917273][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.924343][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.933044][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.940117][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.947467][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.954573][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.989916][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.997525][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.005533][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.013479][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.020704][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.028128][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.035565][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.042938][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.050249][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.083131][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.091596][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.098648][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.106269][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.114844][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.122045][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.153809][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.162420][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.170447][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.179041][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.187542][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.194748][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.202619][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.210788][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.217959][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.238140][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.246263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.255083][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.263103][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.289411][ T288] device veth0_vlan entered promiscuous mode [ 24.301838][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.310078][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.318683][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.325803][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.334385][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.342543][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.350692][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.357772][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.365397][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.373529][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.381002][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.388616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.396709][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.405034][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.413603][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.422182][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.429303][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.436833][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.444983][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.453221][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.460959][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.468709][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.477141][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.485885][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.494481][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.501586][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.518465][ T291] device veth0_vlan entered promiscuous mode [ 24.530419][ T288] device veth1_macvtap entered promiscuous mode [ 24.538024][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.546639][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.555157][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.562336][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.570163][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.578724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.587316][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.595423][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.603712][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.612116][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.620355][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.628044][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.641634][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.649808][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.658181][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.666666][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.690406][ T290] device veth0_vlan entered promiscuous mode [ 24.697112][ T291] device veth1_macvtap entered promiscuous mode [ 24.704363][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.713512][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.722559][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.729994][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.737872][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.746467][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.754957][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.763379][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.771793][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.778854][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.786505][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.794935][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.803499][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.811647][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.842685][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.851490][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.859684][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.868003][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.876652][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.884746][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.893131][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.901619][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.909842][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.918600][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.927004][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.941858][ T290] device veth1_macvtap entered promiscuous mode [ 24.952036][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.960054][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.969062][ T287] device veth0_vlan entered promiscuous mode [ 24.981362][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 24.994700][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.002624][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.010300][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.019611][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.028253][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.036847][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.063224][ T289] IPv6: veth1_vlan: Failed to add prefix route for address fe80::31; dropping [ 25.077361][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.090642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.101141][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.109310][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.122025][ T289] device veth0_vlan entered promiscuous mode [ 25.137530][ T287] device veth1_macvtap entered promiscuous mode [ 25.148978][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.158131][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.166785][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.187976][ T289] device veth1_macvtap entered promiscuous mode [ 25.196943][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.205737][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.227773][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.241712][ T324] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.248932][ T326] loop4: detected capacity change from 0 to 512 [ 25.265457][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.277810][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.286963][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.295882][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.334132][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.343240][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.353922][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.363474][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.379244][ T332] loop4: detected capacity change from 0 to 16 [ 25.396017][ T332] erofs: (device loop4): mounted with root inode @ nid 36. [ 25.409740][ T332] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=89 [ 25.428638][ T332] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=89 [ 25.442968][ T334] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 25.444643][ T337] loop0: detected capacity change from 0 to 16 [ 25.462084][ T332] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=89 [ 25.476546][ T334] kvm: pic: non byte read [ 25.483939][ T334] kvm: pic: level sensitive irq not supported [ 25.484005][ T334] kvm: pic: non byte read [ 25.491617][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.497186][ T334] kvm: pic: level sensitive irq not supported [ 25.502420][ T334] kvm: pic: non byte read [ 25.504445][ T337] erofs: (device loop0): mounted with root inode @ nid 36. [ 25.510167][ T334] kvm: pic: level sensitive irq not supported [ 25.524851][ T337] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=89 [ 25.545171][ T334] kvm: pic: non byte read [ 25.548125][ T342] loop3: detected capacity change from 0 to 1024 [ 25.550516][ T334] kvm: pic: level sensitive irq not supported [ 25.560566][ T334] kvm: pic: non byte read [ 25.571737][ T337] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=89 [ 25.583539][ T343] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=89 [ 25.592698][ T342] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.607743][ T337] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=89 [ 25.638584][ T343] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=89 [ 25.647728][ T345] loop4: detected capacity change from 0 to 4096 [ 25.655683][ T343] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=89 [ 25.666135][ T342] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 25.676328][ T345] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 25.701260][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 25.707605][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.726850][ T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.750961][ T288] EXT4-fs (loop3): unmounting filesystem. [ 25.763420][ T39] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 25.774303][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.782450][ T39] usb 3-1: Product: syz [ 25.786855][ T39] usb 3-1: Manufacturer: syz [ 25.791592][ T39] usb 3-1: SerialNumber: syz [ 25.868922][ T358] loop0: detected capacity change from 0 to 512 [ 25.905654][ T358] EXT4-fs error (device loop0): __ext4_iget:5104: inode #2: block 131072: comm syz.0.17: invalid block [ 25.925184][ T358] EXT4-fs (loop0): get root inode failed [ 25.931073][ T358] EXT4-fs (loop0): mount failed [ 25.945113][ T366] binder: 365:366 ioctl c0306201 2000000005c0 returned -14 [ 25.961776][ T368] capability: warning: `syz.3.19' uses deprecated v2 capabilities in a way that may be insecure [ 26.079563][ T39] usb 3-1: unit 6 not found! [ 26.113243][ T39] usb 3-1: USB disconnect, device number 2 [ 26.227315][ T375] loop0: detected capacity change from 0 to 2048 [ 26.299951][ T375] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 26.308557][ T375] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.381420][ T58] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.461683][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.562823][ T58] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.576382][ T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.604141][ T58] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.628900][ T386] loop2: detected capacity change from 0 to 16 [ 26.645928][ T58] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 26.660877][ T386] erofs: (device loop2): mounted with root inode @ nid 36. [ 26.673503][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.717867][ T58] usb 2-1: Product: syz [ 26.718779][ T386] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=89 [ 26.723002][ T58] usb 2-1: Manufacturer: syz [ 26.733722][ T289] EXT4-fs (loop0): unmounting filesystem. [ 26.737254][ T58] usb 2-1: SerialNumber: syz [ 26.748937][ T386] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=89 [ 26.760831][ T58] usb 2-1: selecting invalid altsetting 1 [ 26.766830][ T386] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=89 [ 26.776147][ T58] usb 2-1: unit 6 not found! [ 26.781811][ T387] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=89 [ 26.790952][ T387] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=89 [ 26.800184][ T387] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=89 [ 26.838282][ T290] EXT4-fs (loop4): unmounting filesystem. [ 26.886242][ T392] kvm: pic: non byte write [ 26.897090][ T389] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 26.932769][ T389] kvm: pic: non byte read [ 26.937452][ T389] kvm: pic: level sensitive irq not supported [ 26.937518][ T389] kvm: pic: non byte read [ 26.956141][ T389] kvm: pic: level sensitive irq not supported [ 26.956227][ T389] kvm: pic: non byte read [ 26.965343][ T58] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 26.967576][ T389] kvm: pic: level sensitive irq not supported [ 26.975055][ T389] kvm: pic: non byte read [ 26.986523][ T58] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 26.995265][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 26.995280][ T28] audit: type=1400 audit(1792156485.912:171): avc: denied { write } for pid=394 comm="syz.4.28" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.025913][ T389] kvm: pic: level sensitive irq not supported [ 27.025979][ T389] kvm: pic: non byte read [ 27.064232][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.108915][ T28] audit: type=1400 audit(1792156486.012:172): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.229738][ T28] audit: type=1400 audit(1792156486.132:173): avc: denied { read write } for pid=411 comm="syz.0.35" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 27.289495][ T28] audit: type=1400 audit(1792156486.132:174): avc: denied { open } for pid=411 comm="syz.0.35" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 27.644040][ T28] audit: type=1400 audit(1792156486.162:175): avc: denied { ioctl } for pid=411 comm="syz.0.35" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 27.669999][ T28] audit: type=1400 audit(1792156486.192:176): avc: denied { mount } for pid=418 comm="syz.2.37" name="/" dev="configfs" ino=14031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 27.821314][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.924029][ T28] audit: type=1400 audit(1792156486.832:177): avc: denied { read } for pid=445 comm="syz.4.48" dev="nsfs" ino=4026532546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.970067][ T28] audit: type=1400 audit(1792156486.832:178): avc: denied { open } for pid=445 comm="syz.4.48" path="net:[4026532546]" dev="nsfs" ino=4026532546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.999904][ T28] audit: type=1400 audit(1792156486.832:179): avc: denied { create } for pid=445 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.021271][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 28.031947][ T28] audit: type=1400 audit(1792156486.852:180): avc: denied { bind } for pid=445 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.104753][ T451] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.112043][ T451] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.131481][ T39] usb 1-1: unable to get BOS descriptor or descriptor too short [ 28.144000][ T39] usb 1-1: no configurations [ 28.151393][ T39] usb 1-1: can't read configurations, error -22 [ 29.041135][ T6] usb 2-1: USB disconnect, device number 2 [ 29.136005][ T486] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.143342][ T486] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.313184][ T500] tipc: Enabling of bearer rejected, failed to enable media [ 29.447321][ T504] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.459712][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.467766][ T504] device bridge_slave_0 entered promiscuous mode [ 29.476987][ T504] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.484500][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.492446][ T504] device bridge_slave_1 entered promiscuous mode [ 29.582220][ T504] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.589313][ T504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.596674][ T504] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.603762][ T504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.627899][ T526] fuse: Bad value for 'fd' [ 29.642146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.650388][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.658571][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.683918][ T528] loop1: detected capacity change from 0 to 512 [ 29.690318][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.699189][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.706401][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.723203][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.738655][ T528] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.83: inode #1: comm syz.1.83: iget: illegal inode # [ 29.742249][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.759608][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.771386][ T528] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.83: error while reading EA inode 1 err=-117 [ 29.791708][ T528] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.821375][ T528] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.83: inode #1: comm syz.1.83: iget: illegal inode # [ 29.851551][ T528] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.83: error while reading EA inode 1 err=-117 [ 29.864665][ T528] EXT4-fs (loop1): 1 orphan inode deleted [ 29.865445][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.870791][ T528] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 29.895154][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.930582][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.957530][ T504] device veth0_vlan entered promiscuous mode [ 29.964704][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.989577][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.997221][ T543] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.83: unexpected EA_INODE flag [ 30.028518][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.046636][ T504] device veth1_macvtap entered promiscuous mode [ 30.064703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.084641][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.107671][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.117751][ T550] Illegal XDP return value 4294967274 on prog (id 8) dev N/A, expect packet loss! [ 30.251532][ T287] EXT4-fs (loop1): unmounting filesystem. [ 30.342344][ T308] device bridge_slave_1 left promiscuous mode [ 30.350876][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.381624][ T308] device bridge_slave_0 left promiscuous mode [ 30.392232][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.419763][ T308] device veth1_macvtap left promiscuous mode [ 30.428262][ T308] device veth0_vlan left promiscuous mode [ 30.521004][ T587] loop1: detected capacity change from 0 to 512 [ 30.546183][ T587] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.560078][ T587] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 30.596639][ T587] EXT4-fs (loop1): 1 truncate cleaned up [ 30.611980][ T587] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 30.644616][ T585] netlink: 'syz.2.107': attribute type 27 has an invalid length. [ 30.662011][ T585] netlink: 48 bytes leftover after parsing attributes in process `syz.2.107'. [ 30.675638][ T585] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.962813][ T604] tipc: Enabling of bearer rejected, failed to enable media [ 31.111589][ T614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'. [ 31.322287][ T632] tipc: Started in network mode [ 31.332815][ T632] tipc: Node identity 52b33d14bbdc, cluster identity 4711 [ 31.348673][ T632] tipc: Enabled bearer , priority 0 [ 31.489924][ T632] device syzkaller0 entered promiscuous mode [ 31.507089][ T632] tipc: Resetting bearer [ 31.530673][ T630] tipc: Resetting bearer [ 31.550324][ T630] tipc: Disabling bearer [ 31.597255][ T647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.134'. [ 31.624000][ T287] EXT4-fs (loop1): unmounting filesystem. [ 31.861464][ T668] netlink: 36 bytes leftover after parsing attributes in process `syz.3.139'. [ 32.320446][ T674] binder_alloc: 666: binder_alloc_buf, no vma [ 32.411899][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 32.411942][ T28] audit: type=1400 audit(1792156491.322:205): avc: denied { write } for pid=677 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.489042][ T684] tipc: Enabling of bearer rejected, failed to enable media [ 32.702882][ T692] fuse: Bad value for 'fd' [ 32.733022][ T28] audit: type=1400 audit(1792156491.642:206): avc: denied { remount } for pid=690 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.008594][ T716] tipc: Started in network mode [ 33.013624][ T716] tipc: Node identity 76b70a63ccd3, cluster identity 4711 [ 33.020815][ T716] tipc: Enabled bearer , priority 0 [ 33.043833][ T716] device syzkaller0 entered promiscuous mode [ 33.050357][ T716] tipc: Resetting bearer [ 33.058481][ T715] tipc: Resetting bearer [ 33.075038][ T715] tipc: Disabling bearer [ 33.234940][ T731] binder_alloc: 730: binder_alloc_buf, no vma [ 33.292759][ T28] audit: type=1400 audit(1792156492.202:207): avc: denied { mount } for pid=740 comm="syz.2.170" name="/" dev="ramfs" ino=18550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 33.348504][ T28] audit: type=1400 audit(1792156492.252:208): avc: denied { create } for pid=745 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 33.383633][ T28] audit: type=1400 audit(1792156492.262:209): avc: denied { setopt } for pid=745 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.423247][ T28] audit: type=1400 audit(1792156492.272:210): avc: denied { write } for pid=745 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.442935][ T28] audit: type=1400 audit(1792156492.292:211): avc: denied { create } for pid=748 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.468905][ T28] audit: type=1400 audit(1792156492.312:212): avc: denied { ioctl } for pid=745 comm="syz.4.173" path="socket:[17397]" dev="sockfs" ino=17397 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.493944][ T28] audit: type=1400 audit(1792156492.312:213): avc: denied { getopt } for pid=745 comm="syz.4.173" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.528085][ T755] tipc: Enabled bearer , priority 0 [ 33.556623][ T755] device syzkaller0 entered promiscuous mode [ 33.563512][ T755] tipc: Resetting bearer [ 33.572745][ T754] tipc: Resetting bearer [ 33.594637][ T754] tipc: Disabling bearer [ 33.853046][ T28] audit: type=1400 audit(1792156492.762:214): avc: denied { name_bind } for pid=773 comm="syz.5.186" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 34.067748][ T785] tipc: Enabling of bearer rejected, failed to enable media [ 34.142353][ T791] tipc: Enabling of bearer rejected, media not registered [ 34.506082][ T820] tipc: Enabling of bearer rejected, failed to enable media [ 35.212466][ T848] binder: 847:848 ioctl 4018620d 0 returned -22 [ 35.243634][ T851] tipc: Enabling of bearer rejected, failed to enable media [ 35.343608][ T861] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 35.592390][ T879] tipc: Enabling of bearer rejected, failed to enable media [ 35.722364][ T886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.233'. [ 36.103071][ T898] netlink: 60 bytes leftover after parsing attributes in process `syz.2.238'. [ 36.169610][ T906] tipc: Enabling of bearer rejected, failed to enable media [ 36.180419][ T904] device bridge_slave_1 left promiscuous mode [ 36.191729][ T904] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.203165][ T904] device bridge_slave_0 left promiscuous mode [ 36.209496][ T904] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.310879][ T919] device vlan2 entered promiscuous mode [ 36.317293][ T919] device bridge0 entered promiscuous mode [ 36.361852][ T929] tipc: Enabling of bearer rejected, failed to enable media [ 36.413600][ T938] bridge0: port 3(syz_tun) entered blocking state [ 36.420138][ T938] bridge0: port 3(syz_tun) entered disabled state [ 36.427732][ T938] device syz_tun entered promiscuous mode [ 36.433828][ T938] bridge0: port 3(syz_tun) entered blocking state [ 36.440325][ T938] bridge0: port 3(syz_tun) entered forwarding state [ 36.599638][ T971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.272'. [ 36.611024][ T971] device vlan2 entered promiscuous mode [ 36.617206][ T971] device bridge0 entered promiscuous mode [ 36.837779][ T1008] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 37.012607][ T1032] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 37.792323][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 37.792339][ T28] audit: type=1400 audit(1792156496.702:224): avc: denied { bind } for pid=1111 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.114447][ T28] audit: type=1400 audit(1792156497.022:225): avc: denied { ioctl } for pid=1132 comm="syz.5.346" path="socket:[20486]" dev="sockfs" ino=20486 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.362659][ T1148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.353'. [ 38.435925][ T1156] device bridge_slave_1 left promiscuous mode [ 38.442836][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.450546][ T1156] device bridge_slave_0 left promiscuous mode [ 38.457716][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.516413][ T28] audit: type=1400 audit(1792156497.422:226): avc: denied { execute } for pid=1151 comm="syz.3.355" path="/90/cgroup.controllers" dev="tmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.145649][ T1186] tipc: Enabling of bearer rejected, failed to enable media [ 39.192212][ T28] audit: type=1400 audit(1792156498.102:227): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 39.237301][ T28] audit: type=1400 audit(1792156498.142:228): avc: denied { setopt } for pid=1199 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.245368][ T1200] Zero length message leads to an empty skb [ 39.281566][ T28] audit: type=1400 audit(1792156498.142:229): avc: denied { create } for pid=1199 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.303142][ T28] audit: type=1400 audit(1792156498.192:230): avc: denied { ioctl } for pid=1199 comm="syz.4.376" path="socket:[20596]" dev="sockfs" ino=20596 ioctlcmd=0x52d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.562892][ T1222] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 39.623877][ T1226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.387'. [ 39.720225][ T1234] fuse: Bad value for 'fd' [ 40.896580][ T28] audit: type=1400 audit(1792156499.802:231): avc: denied { setopt } for pid=1310 comm="syz.5.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.005562][ T1322] netlink: 64 bytes leftover after parsing attributes in process `syz.2.430'. [ 41.161944][ T28] audit: type=1400 audit(1792156500.062:232): avc: denied { write } for pid=1332 comm="syz.2.434" laddr=fe80::90a7:6dff:fe1a:f6f0 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.796721][ T1357] fuse: Bad value for 'fd' [ 41.935809][ T28] audit: type=1400 audit(1792156500.842:233): avc: denied { create } for pid=1383 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.938084][ T1385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'. [ 42.398503][ T1417] netlink: 40 bytes leftover after parsing attributes in process `syz.4.470'. [ 42.597533][ T1425] tipc: Enabling of bearer rejected, failed to enable media [ 43.678712][ T1433] binder: BINDER_SET_CONTEXT_MGR already set [ 43.684771][ T1433] binder: 1431:1433 ioctl 4018620d 200000004a80 returned -16 [ 43.703915][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 43.703930][ T28] audit: type=1400 audit(1792156502.612:237): avc: denied { write } for pid=1435 comm="syz.5.479" path="socket:[21983]" dev="sockfs" ino=21983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.741957][ T1437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.479'. [ 43.834291][ T1446] netlink: 9 bytes leftover after parsing attributes in process `syz.5.479'. [ 43.887918][ T28] audit: type=1400 audit(1792156502.792:238): avc: denied { map } for pid=1463 comm="syz.5.492" path="socket:[20955]" dev="sockfs" ino=20955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.921657][ T28] audit: type=1400 audit(1792156502.792:239): avc: denied { read } for pid=1463 comm="syz.5.492" path="socket:[20955]" dev="sockfs" ino=20955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.008449][ T28] audit: type=1400 audit(1792156502.912:240): avc: denied { create } for pid=1477 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.078077][ T1486] fuse: Bad value for 'fd' [ 44.121572][ T1491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 44.180826][ T1491] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 44.919332][ T28] audit: type=1400 audit(1792156503.822:241): avc: denied { create } for pid=1550 comm="syz.5.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 46.179403][ T1586] binder: 1585:1586 ioctl c0306201 0 returned -14 [ 46.389907][ T1620] binder: BINDER_SET_CONTEXT_MGR already set [ 46.399908][ T1620] binder: 1618:1620 ioctl 4018620d 200000000600 returned -16 [ 46.454873][ T28] audit: type=1400 audit(1792156505.362:242): avc: denied { nlmsg_tty_audit } for pid=1630 comm="syz.2.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 46.521665][ T28] audit: type=1400 audit(1792156505.392:243): avc: denied { audit_write } for pid=1630 comm="syz.2.569" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.560162][ T28] audit: type=1107 audit(1792156505.392:244): pid=1630 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 46.601986][ T1645] device syzkaller0 entered promiscuous mode [ 46.627131][ T1645] tipc: Enabled bearer , priority 0 [ 46.641646][ T1644] tipc: Resetting bearer [ 46.649260][ T1644] tipc: Disabling bearer [ 46.670407][ T28] audit: type=1400 audit(1792156505.572:245): avc: denied { shutdown } for pid=1666 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.753363][ T28] audit: type=1400 audit(1792156505.662:246): avc: denied { read } for pid=1685 comm="syz.5.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.365465][ T1754] fuse: Bad value for 'fd' [ 47.749275][ T1824] loop4: detected capacity change from 0 to 256 [ 47.758471][ T1824] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d) [ 48.417221][ T1843] loop5: detected capacity change from 0 to 256 [ 48.441563][ T1846] binder: 1845:1846 ioctl 4018620d 0 returned -22 [ 48.995351][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 48.995368][ T28] audit: type=1326 audit(1792156507.902:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.2.675" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309999e559 code=0x7ffc0000 [ 49.026983][ T28] audit: type=1326 audit(1792156507.902:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.2.675" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309999e559 code=0x7ffc0000 [ 49.052916][ T28] audit: type=1326 audit(1792156507.902:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.2.675" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309999e559 code=0x7ffc0000 [ 49.078070][ T28] audit: type=1326 audit(1792156507.902:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.2.675" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f309999e559 code=0x7ffc0000 [ 49.103187][ T28] audit: type=1326 audit(1792156507.902:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.2.675" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309999e559 code=0x7ffc0000 [ 49.128203][ T28] audit: type=1326 audit(1792156507.902:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.2.675" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309999e559 code=0x7ffc0000 [ 49.154850][ T28] audit: type=1326 audit(1792156507.902:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.2.675" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309999e559 code=0x7ffc0000 [ 49.180064][ T28] audit: type=1326 audit(1792156507.902:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.2.675" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309999e559 code=0x7ffc0000 [ 49.205641][ T28] audit: type=1326 audit(1792156507.902:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.2.675" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f309999e559 code=0x7ffc0000 [ 49.230794][ T28] audit: type=1326 audit(1792156507.912:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.2.675" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309999e559 code=0x7ffc0000 [ 49.480198][ T1908] Config c/1 of g1 needs at least one function. [ 49.486702][ T1908] udc dummy_udc.0: failed to start g1: -22 [ 49.492635][ T1908] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 49.500710][ T1908] UDC core: g1: couldn't find an available UDC or it's busy [ 50.554934][ T1936] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 50.898246][ T1955] loop4: detected capacity change from 0 to 256 [ 50.905128][ T1955] ======================================================= [ 50.905128][ T1955] WARNING: The mand mount option has been deprecated and [ 50.905128][ T1955] and is ignored by this kernel. Remove the mand [ 50.905128][ T1955] option from the mount to silence this warning. [ 50.905128][ T1955] ======================================================= [ 50.941375][ T1955] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.006191][ T1958] loop5: detected capacity change from 0 to 512 [ 51.064716][ T1960] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.611146][ T2027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.740'. [ 53.803613][ T2072] syz.1.759 (2072) used greatest stack depth: 21888 bytes left [ 55.211009][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 55.211025][ T28] audit: type=1400 audit(1792156514.112:292): avc: denied { create } for pid=2106 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.093296][ T28] audit: type=1400 audit(1792156515.002:293): avc: denied { ioctl } for pid=2153 comm="syz.2.791" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24050 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.217952][ T2207] loop4: detected capacity change from 0 to 256 [ 57.226171][ T2207] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.860830][ T2216] syz.3.816 (2216) used greatest stack depth: 21704 bytes left [ 60.952776][ T28] audit: type=1400 audit(1792156519.862:294): avc: denied { nlmsg_read } for pid=2302 comm="syz.1.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.062501][ T28] audit: type=1400 audit(1792156519.972:295): avc: denied { bind } for pid=2316 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.171687][ T2330] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.625196][ T2364] binder: BINDER_SET_CONTEXT_MGR already set [ 62.631375][ T2364] binder: 2363:2364 ioctl 4018620d 200000000300 returned -16 [ 63.270733][ T28] audit: type=1326 audit(1792156522.172:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.3.866" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1639e559 code=0x7fc00000 [ 63.391679][ T28] audit: type=1400 audit(1792156522.292:297): avc: denied { create } for pid=2378 comm="syz.3.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.473632][ T2385] ip_tables: iptables: counters copy to user failed while replacing table [ 63.725150][ T2424] binder: 2412:2424 ioctl c0306201 0 returned -14 [ 65.710579][ T2474] loop4: detected capacity change from 0 to 2048 [ 65.870287][ T2474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 65.884278][ T28] audit: type=1400 audit(1792156524.792:298): avc: denied { rename } for pid=2473 comm="syz.4.912" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.906815][ T28] audit: type=1400 audit(1792156524.802:299): avc: denied { create } for pid=2489 comm="syz.1.918" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 65.947432][ T290] EXT4-fs (loop4): unmounting filesystem. [ 66.107631][ T28] audit: type=1400 audit(1792156525.012:300): avc: denied { write } for pid=2489 comm="syz.1.918" name="file0" dev="tmpfs" ino=877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.130182][ T28] audit: type=1400 audit(1792156525.012:301): avc: denied { open } for pid=2489 comm="syz.1.918" path="/165/file0" dev="tmpfs" ino=877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.153190][ T28] audit: type=1400 audit(1792156525.012:302): avc: denied { ioctl } for pid=2489 comm="syz.1.918" path="/165/file0" dev="tmpfs" ino=877 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.628179][ T28] audit: type=1400 audit(1792156525.532:303): avc: denied { unlink } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=1352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.120007][ T2524] loop4: detected capacity change from 0 to 4096 [ 67.129346][ T2524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.141155][ T28] audit: type=1400 audit(1792156526.052:304): avc: denied { append } for pid=2523 comm="syz.4.931" path="/158/file0/cpuset.effective_cpus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.172741][ T290] EXT4-fs (loop4): unmounting filesystem. [ 67.195403][ T28] audit: type=1400 audit(1792156526.102:305): avc: denied { sqpoll } for pid=2526 comm="syz.4.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.588522][ T2543] fuse: Bad value for 'fd' [ 67.993771][ T28] audit: type=1400 audit(1792156526.902:306): avc: denied { mount } for pid=2584 comm="syz.1.957" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 68.299795][ T28] audit: type=1400 audit(1792156527.202:307): avc: denied { mounton } for pid=2612 comm="syz.4.970" path="/166/file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.355972][ T28] audit: type=1400 audit(1792156527.262:308): avc: denied { connect } for pid=2618 comm="syz.4.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.773393][ T28] audit: type=1400 audit(1792156527.682:309): avc: denied { setopt } for pid=2638 comm="syz.2.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.005876][ T2660] overlayfs: failed to clone upperpath [ 69.813544][ T2699] fuse: Bad value for 'fd' [ 70.795438][ T2711] tipc: Enabling of bearer rejected, failed to enable media [ 71.047449][ T2727] fuse: Bad value for 'fd' [ 71.133968][ T2742] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2742 comm=syz.2.1028 [ 71.194959][ T2748] loop4: detected capacity change from 0 to 256 [ 71.254140][ T28] audit: type=1326 audit(1792156530.162:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2761 comm="syz.1.1038" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbec799e559 code=0x0 [ 71.279124][ T2748] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.338482][ T28] audit: type=1400 audit(1792156530.242:311): avc: denied { read } for pid=2771 comm="syz.3.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.792949][ T28] audit: type=1400 audit(1792156530.702:312): avc: denied { mount } for pid=2817 comm="syz.4.1062" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 71.815465][ T28] audit: type=1400 audit(1792156530.702:313): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 73.644063][ T28] audit: type=1400 audit(1792156532.552:314): avc: denied { sys_module } for pid=2846 comm="syz.4.1075" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.697817][ T28] audit: type=1400 audit(1792156532.602:315): avc: denied { name_bind } for pid=2853 comm="syz.1.1078" src=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 73.829200][ T2875] mmap: syz.1.1086 (2875): VmData 29061120 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data. [ 75.365405][ T28] audit: type=1400 audit(1792156534.272:316): avc: denied { associate } for pid=2960 comm="syz.1.1122" name="file1" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 75.784761][ T28] audit: type=1400 audit(1792156534.692:317): avc: denied { name_bind } for pid=3002 comm="syz.1.1142" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 76.530101][ T3087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1182'. [ 76.816863][ T3118] syz.2.1195 uses obsolete (PF_INET,SOCK_PACKET) [ 77.426902][ T28] audit: type=1400 audit(1792156536.332:318): avc: denied { map } for pid=3162 comm="syz.4.1215" path="socket:[26456]" dev="sockfs" ino=26456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 77.684164][ T327] tipc: Left network mode [ 77.702568][ T28] audit: type=1400 audit(1792156536.612:319): avc: denied { mounton } for pid=3184 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.829603][ T3184] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.847377][ T3184] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.864762][ T3184] device bridge_slave_0 entered promiscuous mode [ 77.881413][ T3184] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.926023][ T3184] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.933879][ T3184] device bridge_slave_1 entered promiscuous mode [ 78.010339][ T28] audit: type=1400 audit(1792156536.912:320): avc: denied { getopt } for pid=3214 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.099339][ T3184] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.106476][ T3184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.113841][ T3184] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.120901][ T3184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.189049][ T28] audit: type=1326 audit(1792156537.092:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3222 comm="syz.1.1243" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec799e559 code=0x7ffc0000 [ 78.284531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.297672][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.324817][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.336228][ T28] audit: type=1326 audit(1792156537.122:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3222 comm="syz.1.1243" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec799e559 code=0x7ffc0000 [ 78.393855][ T327] device bridge_slave_1 left promiscuous mode [ 78.394585][ T28] audit: type=1326 audit(1792156537.122:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3222 comm="syz.1.1243" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec799e559 code=0x7ffc0000 [ 78.406461][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.425281][ T28] audit: type=1326 audit(1792156537.122:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3222 comm="syz.1.1243" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec799e559 code=0x7ffc0000 [ 78.457016][ T28] audit: type=1326 audit(1792156537.122:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3222 comm="syz.1.1243" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fbec799e559 code=0x7ffc0000 [ 78.473132][ T327] device bridge_slave_0 left promiscuous mode [ 78.541363][ T28] audit: type=1326 audit(1792156537.122:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3222 comm="syz.1.1243" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec799e559 code=0x7ffc0000 [ 78.566473][ T28] audit: type=1326 audit(1792156537.122:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3222 comm="syz.1.1243" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec799e559 code=0x7ffc0000 [ 78.581841][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.719495][ T327] device veth0_vlan left promiscuous mode [ 78.886719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.895709][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.902865][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.961308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.978031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.997437][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.004621][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.021366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.029919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.038281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.057794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.079141][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.088236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.107165][ T3184] device veth0_vlan entered promiscuous mode [ 79.117107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.130540][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.159207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.171924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.183884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.194309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.204888][ T3184] device veth1_macvtap entered promiscuous mode [ 79.216902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.225857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.235038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.259727][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.280261][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.455531][ T3291] binder: 3290:3291 ioctl c0306201 0 returned -14 [ 80.504020][ T3357] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 80.504342][ T2209] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 80.561082][ T3359] fuse: Unknown parameter 'grou00000000000000000000' [ 81.550127][ T3392] fuse: Unknown parameter 'grou00000000000000000000' [ 81.815953][ T3408] futex_wake_op: syz.6.1318 tries to shift op by -1; fix this program [ 82.108180][ T3437] fuse: Bad value for 'fd' [ 82.780047][ T3482] netlink: 1068 bytes leftover after parsing attributes in process `syz.6.1349'. [ 83.097329][ T3492] process 'syz.3.1353' launched './file1' with NULL argv: empty string added [ 83.107034][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 83.107053][ T28] audit: type=1400 audit(1792156542.022:340): avc: denied { execute_no_trans } for pid=3491 comm="syz.3.1353" path="/312/file1" dev="tmpfs" ino=1649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.137028][ T6] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 83.344520][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.362451][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.373514][ T6] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.401332][ T6] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.410528][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.426524][ T6] usb 7-1: config 0 descriptor?? [ 83.545328][ T3541] 9pnet: Could not find request transport: f [ 83.663410][ T3553] fuse: Bad value for 'fd' [ 83.849094][ T6] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 83.859399][ T6] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 83.878630][ T6] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 84.009781][ T3577] fuse: Bad value for 'fd' [ 84.061117][ T2244] usb 7-1: USB disconnect, device number 2 [ 84.373728][ T3603] fuse: Bad value for 'fd' [ 84.379660][ T28] audit: type=1400 audit(1792156543.282:341): avc: denied { remount } for pid=3602 comm="syz.2.1404" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.151750][ T3619] fuse: Unknown parameter 'group_i00000000000000000000' [ 85.397003][ T3643] fuse: Unknown parameter 'group_i00000000000000000000' [ 85.618298][ T3659] xt_hashlimit: size too large, truncated to 1048576 [ 85.713023][ T3671] fuse: Unknown parameter 'group_i00000000000000000000' [ 85.728788][ T28] audit: type=1400 audit(1792156544.632:342): avc: denied { unmount } for pid=3670 comm="syz.6.1432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 87.491187][ C0] sched: RT throttling activated [ 87.573044][ T3702] fuse: Unknown parameter 'group_id00000000000000000000' [ 88.202029][ T3729] fuse: Unknown parameter 'group_id00000000000000000000' [ 88.590931][ T28] audit: type=1400 audit(1792156547.492:343): avc: denied { mount } for pid=3746 comm="syz.2.1468" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 88.753807][ T3757] fuse: Unknown parameter 'group_id00000000000000000000' [ 89.039661][ T3784] fuse: Bad value for 'fd' [ 89.263633][ T3791] fuse: Bad value for 'user_id' [ 89.852692][ T3804] ip_tables: iptables: counters copy to user failed while replacing table [ 90.088329][ T3830] overlayfs: failed to clone upperpath [ 90.130575][ T3838] overlayfs: failed to clone upperpath [ 90.866677][ T28] audit: type=1400 audit(1792156549.772:344): avc: denied { read } for pid=3911 comm="syz.3.1545" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.760129][ T3946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'. [ 91.806666][ T3953] fuse: Bad value for 'fd' [ 91.840842][ T3960] overlayfs: failed to clone upperpath [ 91.848093][ T3960] overlayfs: failed to clone upperpath [ 92.101377][ T28] audit: type=1400 audit(1792156550.982:345): avc: denied { mount } for pid=3983 comm="syz.1.1578" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 92.153699][ T3993] fuse: Bad value for 'fd' [ 92.480921][ T4023] fuse: Bad value for 'fd' [ 92.518234][ T4027] 9pnet_fd: Insufficient options for proto=fd [ 92.755967][ T4051] overlayfs: failed to clone upperpath [ 93.260343][ T4097] fuse: Invalid rootmode [ 93.493471][ T4132] fuse: Bad value for 'rootmode' [ 94.330292][ T4165] fuse: Bad value for 'rootmode' [ 94.894873][ T4184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1670'. [ 94.907417][ T4184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1670'. [ 95.052690][ T4203] capability: warning: `syz.6.1679' uses 32-bit capabilities (legacy support in use) [ 95.634442][ T4201] syz.1.1678 (4201) used greatest stack depth: 21000 bytes left [ 96.004688][ T28] audit: type=1400 audit(1792156554.912:346): avc: denied { bind } for pid=4278 comm="syz.1.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.040597][ T28] audit: type=1400 audit(1792156554.932:347): avc: denied { listen } for pid=4278 comm="syz.1.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.073255][ T28] audit: type=1400 audit(1792156554.932:348): avc: denied { write } for pid=4278 comm="syz.1.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.189592][ T28] audit: type=1400 audit(1792156555.092:349): avc: denied { getopt } for pid=4296 comm="syz.4.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.270253][ T4311] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 96.478647][ T28] audit: type=1400 audit(1792156555.382:350): avc: denied { getopt } for pid=4350 comm="syz.2.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.523411][ T28] audit: type=1400 audit(1792156555.432:351): avc: denied { mounton } for pid=4356 comm="syz.6.1750" path="/98/file0" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.573397][ T28] audit: type=1400 audit(1792156555.432:352): avc: denied { write } for pid=4356 comm="syz.6.1750" name="file0" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.659135][ T28] audit: type=1400 audit(1792156555.562:353): avc: denied { setopt } for pid=4366 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.680733][ T28] audit: type=1400 audit(1792156555.572:354): avc: denied { bind } for pid=4366 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.385934][ T28] audit: type=1400 audit(1792156556.292:355): avc: denied { mount } for pid=4431 comm="syz.6.1785" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 97.432392][ T4435] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1774'. [ 97.676568][ T4437] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1787'. [ 97.724666][ T4444] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 97.917401][ T4464] fuse: Bad value for 'fd' [ 98.130007][ T4493] fuse: Unknown parameter 'use00000000000000000000' [ 98.266790][ T4503] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1814'. [ 98.423311][ T4524] fuse: Unknown parameter 'use00000000000000000000' [ 98.655178][ T4548] fuse: Unknown parameter 'use00000000000000000000' [ 98.796410][ T4554] 9pnet_fd: Insufficient options for proto=fd [ 98.924638][ T4572] fuse: Unknown parameter 'user_i00000000000000000000' [ 99.210868][ T4600] fuse: Unknown parameter 'user_i00000000000000000000' [ 99.885758][ T4630] fuse: Unknown parameter 'user_i00000000000000000000' [ 100.093552][ T4649] overlayfs: failed to clone upperpath [ 100.143697][ T4653] fuse: Unknown parameter 'user_id00000000000000000000' [ 100.574640][ T4699] mmap: syz.2.1903 (4699) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.853363][ T4744] fuse: Unknown parameter 'user_id00000000000000000000' [ 100.900226][ T4746] overlayfs: failed to resolve './file0': -2 [ 101.040776][ T4770] fuse: Bad value for 'fd' [ 101.091902][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 101.091923][ T28] audit: type=1400 audit(1792156560.002:363): avc: denied { create } for pid=4773 comm="syz.4.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 101.406002][ T28] audit: type=1326 audit(1792156560.312:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.1.1956" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbec799e559 code=0x0 [ 102.179217][ T4839] syz.4.1967 (4839) used greatest stack depth: 19816 bytes left [ 102.218844][ T4847] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 102.837505][ T4889] 9pnet_fd: Insufficient options for proto=fd [ 103.825718][ T4956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.862076][ T4958] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 105.179501][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2044'. [ 105.195623][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2044'. [ 105.210068][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2044'. [ 105.220645][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2044'. [ 105.230476][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2044'. [ 105.253092][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2044'. [ 105.271605][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2044'. [ 105.291115][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2044'. [ 105.310322][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2044'. [ 105.331601][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2044'. [ 105.420243][ T28] audit: type=1400 audit(1792156564.322:365): avc: denied { ioctl } for pid=5029 comm="syz.2.2052" path="socket:[31749]" dev="sockfs" ino=31749 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.757650][ T28] audit: type=1400 audit(1792156565.662:366): avc: denied { ioctl } for pid=5064 comm="syz.2.2068" path="socket:[31808]" dev="sockfs" ino=31808 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.297680][ T5068] overlayfs: failed to clone upperpath [ 107.354488][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.420689][ T5141] ================================================================== [ 108.428945][ T5141] BUG: KASAN: use-after-free in tipc_skb_dump+0x1282/0x1780 [ 108.436278][ T5141] Read of size 4 at addr ffff888111c0a8b4 by task syz.2.2098/5141 [ 108.444090][ T5141] [ 108.446436][ T5141] CPU: 0 PID: 5141 Comm: syz.2.2098 Not tainted syzkaller #0 [ 108.453822][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.463940][ T5141] Call Trace: [ 108.467236][ T5141] [ 108.470177][ T5141] __dump_stack+0x21/0x24 [ 108.474532][ T5141] dump_stack_lvl+0x110/0x170 [ 108.479232][ T5141] ? __cfi_dump_stack_lvl+0x8/0x8 [ 108.484273][ T5141] ? tipc_skb_dump+0x1282/0x1780 [ 108.489250][ T5141] print_address_description+0x71/0x200 [ 108.494841][ T5141] print_report+0x4a/0x60 [ 108.499213][ T5141] kasan_report+0x122/0x150 [ 108.503732][ T5141] ? tipc_skb_dump+0x1282/0x1780 [ 108.508697][ T5141] __asan_report_load4_noabort+0x14/0x20 [ 108.514444][ T5141] tipc_skb_dump+0x1282/0x1780 [ 108.519259][ T5141] tipc_list_dump+0x22b/0x2f0 [ 108.524065][ T5141] tipc_sk_dump+0xa12/0xfb0 [ 108.528592][ T5141] trace_event_raw_event_tipc_sk_class+0x250/0x470 [ 108.535243][ T5141] ? __cfi_trace_event_raw_event_tipc_sk_class+0x10/0x10 [ 108.542322][ T5141] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 108.547821][ T5141] ? number+0xc99/0xef0 [ 108.552015][ T5141] tipc_sk_rcv+0x168a/0x2c20 [ 108.556639][ T5141] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 108.561644][ T5141] ? trace_buffer_unlock_commit_regs+0x152/0x630 [ 108.568008][ T5141] tipc_node_xmit+0x36f/0xd80 [ 108.572728][ T5141] ? trace_event_raw_event_tipc_sk_class+0x2be/0x470 [ 108.579424][ T5141] ? __cfi_tipc_node_xmit+0x10/0x10 [ 108.584649][ T5141] ? __cfi_trace_event_raw_event_tipc_sk_class+0x10/0x10 [ 108.591708][ T5141] __tipc_sendmsg+0x1b1a/0x2860 [ 108.596599][ T5141] ? rht_lock+0x120/0x120 [ 108.600953][ T5141] ? avc_has_perm+0x163/0x250 [ 108.605644][ T5141] ? __cfi_avc_has_perm+0x10/0x10 [ 108.610691][ T5141] ? __kasan_check_write+0x14/0x20 [ 108.615843][ T5141] ? _raw_spin_lock_bh+0x94/0xf0 [ 108.620903][ T5141] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 108.626427][ T5141] ? __local_bh_enable_ip+0x58/0x80 [ 108.631648][ T5141] ? lock_sock_nested+0x212/0x290 [ 108.636700][ T5141] ? __cfi_lock_sock_nested+0x10/0x10 [ 108.642093][ T5141] ? __cfi_woken_wake_function+0x10/0x10 [ 108.647751][ T5141] ? ring_buffer_unlock_commit+0x46f/0x5d0 [ 108.653589][ T5141] tipc_sendmsg+0x55/0x70 [ 108.657945][ T5141] ? __cfi_tipc_sendmsg+0x10/0x10 [ 108.662994][ T5141] ____sys_sendmsg+0x5fb/0x9c0 [ 108.667792][ T5141] ? __sys_sendmsg_sock+0x40/0x40 [ 108.672840][ T5141] ? import_iovec+0x7c/0xb0 [ 108.677372][ T5141] ___sys_sendmsg+0x2a2/0x360 [ 108.682072][ T5141] ? __sys_sendmsg+0x290/0x290 [ 108.686882][ T5141] ? up_read+0x56/0x1d0 [ 108.691111][ T5141] __sys_sendmmsg+0x2cc/0x4e0 [ 108.695838][ T5141] ? __cfi___sys_sendmmsg+0x10/0x10 [ 108.701079][ T5141] ? __kasan_check_read+0x11/0x20 [ 108.706220][ T5141] ? trace_buffer_unlock_commit_regs+0x152/0x630 [ 108.712673][ T5141] ? trace_event_raw_event_sys_enter+0xf1/0x120 [ 108.719124][ T5141] __x64_sys_sendmmsg+0xa0/0xb0 [ 108.724084][ T5141] x64_sys_call+0x3f5/0x9a0 [ 108.728613][ T5141] do_syscall_64+0x4c/0xa0 [ 108.733162][ T5141] ? clear_bhb_loop+0x30/0x80 [ 108.737898][ T5141] ? clear_bhb_loop+0x30/0x80 [ 108.742618][ T5141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.748536][ T5141] RIP: 0033:0x7f309999e559 [ 108.752983][ T5141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.772914][ T5141] RSP: 002b:00007f30983f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 108.781459][ T5141] RAX: ffffffffffffffda RBX: 00007f3099c26090 RCX: 00007f309999e559 [ 108.789460][ T5141] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000006 [ 108.797630][ T5141] RBP: 00007f3099a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 108.805620][ T5141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.813631][ T5141] R13: 00007f3099c26128 R14: 00007f3099c26090 R15: 00007ffeea0cbf78 [ 108.821725][ T5141] [ 108.824858][ T5141] [ 108.827192][ T5141] Allocated by task 5141: [ 108.831533][ T5141] kasan_set_track+0x4b/0x70 [ 108.836254][ T5141] kasan_save_alloc_info+0x1f/0x30 [ 108.841440][ T5141] __kasan_kmalloc+0x95/0xb0 [ 108.846083][ T5141] __kmalloc_node_track_caller+0xb1/0x1e0 [ 108.851931][ T5141] __alloc_skb+0x226/0x4a0 [ 108.856500][ T5141] tipc_msg_build+0xce/0xf60 [ 108.861219][ T5141] __tipc_sendmsg+0x167c/0x2860 [ 108.866107][ T5141] tipc_sendmsg+0x55/0x70 [ 108.870465][ T5141] ____sys_sendmsg+0x5fb/0x9c0 [ 108.875260][ T5141] ___sys_sendmsg+0x2a2/0x360 [ 108.879982][ T5141] __sys_sendmmsg+0x2cc/0x4e0 [ 108.884761][ T5141] __x64_sys_sendmmsg+0xa0/0xb0 [ 108.889731][ T5141] x64_sys_call+0x3f5/0x9a0 [ 108.894258][ T5141] do_syscall_64+0x4c/0xa0 [ 108.898697][ T5141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.904616][ T5141] [ 108.906971][ T5141] Freed by task 5131: [ 108.910991][ T5141] kasan_set_track+0x4b/0x70 [ 108.915603][ T5141] kasan_save_free_info+0x2b/0x40 [ 108.920665][ T5141] ____kasan_slab_free+0x132/0x180 [ 108.925813][ T5141] __kasan_slab_free+0x11/0x20 [ 108.930615][ T5141] slab_free_freelist_hook+0xc2/0x190 [ 108.936005][ T5141] __kmem_cache_free+0xb7/0x1b0 [ 108.940887][ T5141] kfree+0x6f/0xf0 [ 108.944630][ T5141] skb_release_data+0x63d/0x8a0 [ 108.949516][ T5141] kfree_skb_reason+0xd4/0x230 [ 108.954310][ T5141] tsk_advance_rx_queue+0x114/0x250 [ 108.959542][ T5141] tipc_recvmsg+0x304/0x13a0 [ 108.964154][ T5141] ____sys_recvmsg+0x2d6/0x5c0 [ 108.968943][ T5141] ___sys_recvmsg+0x210/0x590 [ 108.973723][ T5141] do_recvmmsg+0x370/0x7e0 [ 108.978163][ T5141] __x64_sys_recvmmsg+0x195/0x250 [ 108.983215][ T5141] x64_sys_call+0x3e7/0x9a0 [ 108.987748][ T5141] do_syscall_64+0x4c/0xa0 [ 108.992178][ T5141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.998125][ T5141] [ 109.000461][ T5141] Last potentially related work creation: [ 109.006188][ T5141] kasan_save_stack+0x3a/0x60 [ 109.010898][ T5141] __kasan_record_aux_stack+0xb6/0xc0 [ 109.016284][ T5141] kasan_record_aux_stack_noalloc+0xb/0x10 [ 109.022131][ T5141] kvfree_call_rcu+0x8b/0x7a0 [ 109.026851][ T5141] drop_sysctl_table+0x2f5/0x430 [ 109.031830][ T5141] unregister_sysctl_table+0x75/0x120 [ 109.037250][ T5141] unregister_net_sysctl_table+0x15/0x20 [ 109.042924][ T5141] neigh_sysctl_unregister+0x78/0x90 [ 109.048259][ T5141] addrconf_ifdown+0x168b/0x1950 [ 109.053230][ T5141] addrconf_notify+0x39f/0xe30 [ 109.058037][ T5141] raw_notifier_call_chain+0xa1/0x110 [ 109.063443][ T5141] unregister_netdevice_many+0x104a/0x1910 [ 109.069306][ T5141] unregister_netdevice_queue+0x2e1/0x320 [ 109.075242][ T5141] __tun_detach+0xc9d/0x1450 [ 109.079874][ T5141] tun_chr_close+0x92/0x140 [ 109.084484][ T5141] __fput+0x1fd/0x8f0 [ 109.088489][ T5141] ____fput+0x15/0x20 [ 109.092485][ T5141] task_work_run+0x1e1/0x250 [ 109.097110][ T5141] exit_to_user_mode_loop+0x9b/0xb0 [ 109.102342][ T5141] exit_to_user_mode_prepare+0x87/0xd0 [ 109.107815][ T5141] syscall_exit_to_user_mode+0x1a/0x30 [ 109.113290][ T5141] do_syscall_64+0x58/0xa0 [ 109.117738][ T5141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.123638][ T5141] [ 109.125977][ T5141] The buggy address belongs to the object at ffff888111c0a800 [ 109.125977][ T5141] which belongs to the cache kmalloc-1k of size 1024 [ 109.140485][ T5141] The buggy address is located 180 bytes inside of [ 109.140485][ T5141] 1024-byte region [ffff888111c0a800, ffff888111c0ac00) [ 109.153895][ T5141] [ 109.156248][ T5141] The buggy address belongs to the physical page: [ 109.162669][ T5141] page:ffffea0004470200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111c08 [ 109.172932][ T5141] head:ffffea0004470200 order:3 compound_mapcount:0 compound_pincount:0 [ 109.181277][ T5141] flags: 0x4000000000010200(slab|head|zone=1) [ 109.187387][ T5141] raw: 4000000000010200 ffffea00045e7c00 dead000000000002 ffff888100043080 [ 109.196173][ T5141] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 109.204879][ T5141] page dumped because: kasan: bad access detected [ 109.211339][ T5141] page_owner tracks the page as allocated [ 109.217068][ T5141] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 289, tgid 289 (syz-executor), ts 24077394804, free_ts 23834100354 [ 109.238275][ T5141] post_alloc_hook+0x1f5/0x210 [ 109.243075][ T5141] prep_new_page+0x1c/0x110 [ 109.247690][ T5141] get_page_from_freelist+0x2ca9/0x2d20 [ 109.253249][ T5141] __alloc_pages+0x1fa/0x610 [ 109.257870][ T5141] alloc_slab_page+0x6e/0xf0 [ 109.262484][ T5141] new_slab+0x98/0x3e0 [ 109.266599][ T5141] ___slab_alloc+0x70f/0xb70 [ 109.271222][ T5141] __slab_alloc+0x5e/0xa0 [ 109.275585][ T5141] __kmem_cache_alloc_node+0x204/0x2d0 [ 109.281255][ T5141] __kmalloc+0xa4/0x1e0 [ 109.285543][ T5141] __register_sysctl_table+0xd9/0xe50 [ 109.291026][ T5141] register_net_sysctl+0x23f/0x250 [ 109.296280][ T5141] neigh_sysctl_register+0x9a0/0xa80 [ 109.301878][ T5141] addrconf_sysctl_register+0xb3/0x1a0 [ 109.307390][ T5141] ipv6_add_dev+0xbf5/0x1130 [ 109.311998][ T5141] inet6_rtm_newaddr+0x4e2/0xa10 [ 109.316961][ T5141] page last free stack trace: [ 109.321734][ T5141] free_unref_page_prepare+0x81b/0x820 [ 109.327212][ T5141] free_unref_page+0x93/0x530 [ 109.331933][ T5141] __free_pages+0x67/0x100 [ 109.336486][ T5141] __free_slab+0xc7/0x1a0 [ 109.340820][ T5141] __unfreeze_partials+0x15a/0x190 [ 109.345942][ T5141] put_cpu_partial+0xa9/0x100 [ 109.350652][ T5141] __slab_free+0x1c4/0x280 [ 109.355110][ T5141] ___cache_free+0xbf/0xd0 [ 109.359551][ T5141] qlist_free_all+0xc6/0x140 [ 109.364152][ T5141] kasan_quarantine_reduce+0x14a/0x170 [ 109.369632][ T5141] __kasan_slab_alloc+0x24/0x80 [ 109.374524][ T5141] slab_post_alloc_hook+0x4f/0x2d0 [ 109.379664][ T5141] __kmem_cache_alloc_node+0x194/0x2d0 [ 109.385143][ T5141] __kmalloc+0xa4/0x1e0 [ 109.389346][ T5141] fib_create_info+0x8a6/0x1fc0 [ 109.394235][ T5141] fib_table_insert+0xaf/0x1de0 [ 109.399139][ T5141] [ 109.401472][ T5141] Memory state around the buggy address: [ 109.407112][ T5141] ffff888111c0a780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.415184][ T5141] ffff888111c0a800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.423286][ T5141] >ffff888111c0a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.431369][ T5141] ^ [ 109.437042][ T5141] ffff888111c0a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.445136][ T5141] ffff888111c0a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.454047][ T5141] ================================================================== [ 109.462235][ T5141] Disabling lock debugging due to kernel taint [ 109.480595][ T28] audit: type=1400 audit(1792156568.382:367): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 109.527962][ T28] audit: type=1400 audit(1792156568.382:368): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.549944][ T28] audit: type=1400 audit(1792156568.392:369): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.574850][ T28] audit: type=1400 audit(1792156568.392:370): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.595776][ T28] audit: type=1400 audit(1792156568.392:371): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.616469][ T28] audit: type=1400 audit(1792156568.392:372): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.639904][ T28] audit: type=1400 audit(1792156568.392:373): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1