[ 8.089654][ T22] audit: type=1400 audit(1645813462.340:67): avc: denied { read write } for pid=234 comm="getty" name="utmp" dev="tmpfs" ino=10084 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 8.092865][ T22] audit: type=1400 audit(1645813462.340:68): avc: denied { open } for pid=234 comm="getty" path="/run/utmp" dev="tmpfs" ino=10084 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 8.095957][ T22] audit: type=1400 audit(1645813462.340:69): avc: denied { lock } for pid=234 comm="getty" path="/run/utmp" dev="tmpfs" ino=10084 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 8.099192][ T22] audit: type=1400 audit(1645813462.340:70): avc: denied { read } for pid=234 comm="getty" name="log" dev="sda1" ino=1125 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 13.974863][ T22] audit: type=1400 audit(1645813468.230:71): avc: denied { transition } for pid=265 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.978292][ T22] audit: type=1400 audit(1645813468.230:72): avc: denied { write } for pid=265 comm="sh" path="pipe:[747]" dev="pipefs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '10.128.0.153' (ECDSA) to the list of known hosts. 2022/02/25 18:24:34 fuzzer started 2022/02/25 18:24:34 dialing manager at 10.128.0.163:43721 [ 20.721366][ T22] audit: type=1400 audit(1645813474.980:73): avc: denied { mounton } for pid=303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.722960][ T303] cgroup1: Unknown subsys name 'net' [ 20.744036][ T22] audit: type=1400 audit(1645813474.980:74): avc: denied { mount } for pid=303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.749713][ T303] cgroup1: Unknown subsys name 'net_prio' [ 20.777363][ T303] cgroup1: Unknown subsys name 'devices' [ 20.783410][ T303] cgroup1: Unknown subsys name 'blkio' [ 20.789690][ T22] audit: type=1400 audit(1645813475.050:75): avc: denied { unmount } for pid=303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.961144][ T303] cgroup1: Unknown subsys name 'hugetlb' [ 20.967077][ T303] cgroup1: Unknown subsys name 'rlimit' 2022/02/25 18:24:35 syscalls: 2365 2022/02/25 18:24:35 code coverage: enabled 2022/02/25 18:24:35 comparison tracing: enabled 2022/02/25 18:24:35 extra coverage: enabled 2022/02/25 18:24:35 delay kcov mmap: mmap returned an invalid pointer 2022/02/25 18:24:35 setuid sandbox: enabled 2022/02/25 18:24:35 namespace sandbox: enabled 2022/02/25 18:24:35 Android sandbox: enabled 2022/02/25 18:24:35 fault injection: enabled 2022/02/25 18:24:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/02/25 18:24:35 net packet injection: enabled 2022/02/25 18:24:35 net device setup: enabled 2022/02/25 18:24:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/02/25 18:24:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/02/25 18:24:35 USB emulation: enabled 2022/02/25 18:24:35 hci packet injection: /dev/vhci does not exist 2022/02/25 18:24:35 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2022/02/25 18:24:35 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 2022/02/25 18:24:35 fetching corpus: 0, signal 0/2000 (executing program) [ 21.090492][ T22] audit: type=1400 audit(1645813475.350:76): avc: denied { mounton } for pid=303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2022/02/25 18:24:35 fetching corpus: 50, signal 15282/18923 (executing program) [ 21.117455][ T22] audit: type=1400 audit(1645813475.350:77): avc: denied { mount } for pid=303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.142067][ T22] audit: type=1400 audit(1645813475.350:78): avc: denied { setattr } for pid=303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2022/02/25 18:24:35 fetching corpus: 100, signal 24211/29401 (executing program) 2022/02/25 18:24:35 fetching corpus: 150, signal 29384/36063 (executing program) 2022/02/25 18:24:35 fetching corpus: 200, signal 33530/41647 (executing program) 2022/02/25 18:24:35 fetching corpus: 250, signal 36584/46087 (executing program) 2022/02/25 18:24:35 fetching corpus: 300, signal 41651/52317 (executing program) 2022/02/25 18:24:35 fetching corpus: 350, signal 46918/58645 (executing program) 2022/02/25 18:24:35 fetching corpus: 400, signal 48612/61660 (executing program) 2022/02/25 18:24:35 fetching corpus: 450, signal 51237/65456 (executing program) 2022/02/25 18:24:35 fetching corpus: 500, signal 53098/68516 (executing program) 2022/02/25 18:24:35 fetching corpus: 550, signal 54601/71208 (executing program) 2022/02/25 18:24:35 fetching corpus: 600, signal 55706/73526 (executing program) 2022/02/25 18:24:35 fetching corpus: 650, signal 56984/76010 (executing program) 2022/02/25 18:24:36 fetching corpus: 700, signal 59115/79156 (executing program) 2022/02/25 18:24:36 fetching corpus: 750, signal 61003/82037 (executing program) 2022/02/25 18:24:36 fetching corpus: 800, signal 63422/85290 (executing program) 2022/02/25 18:24:36 fetching corpus: 850, signal 64968/87874 (executing program) 2022/02/25 18:24:36 fetching corpus: 900, signal 66617/90492 (executing program) 2022/02/25 18:24:36 fetching corpus: 950, signal 68355/93090 (executing program) 2022/02/25 18:24:36 fetching corpus: 1000, signal 70393/95905 (executing program) 2022/02/25 18:24:36 fetching corpus: 1050, signal 72408/98619 (executing program) 2022/02/25 18:24:36 fetching corpus: 1099, signal 73787/100813 (executing program) 2022/02/25 18:24:36 fetching corpus: 1147, signal 74833/102764 (executing program) 2022/02/25 18:24:36 fetching corpus: 1197, signal 75837/104625 (executing program) 2022/02/25 18:24:36 fetching corpus: 1247, signal 77491/106901 (executing program) 2022/02/25 18:24:36 fetching corpus: 1297, signal 79373/109387 (executing program) 2022/02/25 18:24:36 fetching corpus: 1347, signal 80177/111038 (executing program) 2022/02/25 18:24:36 fetching corpus: 1397, signal 80970/112694 (executing program) 2022/02/25 18:24:36 fetching corpus: 1447, signal 81850/114382 (executing program) 2022/02/25 18:24:36 fetching corpus: 1497, signal 82846/116114 (executing program) 2022/02/25 18:24:36 fetching corpus: 1547, signal 83843/117840 (executing program) 2022/02/25 18:24:36 fetching corpus: 1597, signal 85074/119683 (executing program) 2022/02/25 18:24:36 fetching corpus: 1647, signal 85950/121293 (executing program) 2022/02/25 18:24:36 fetching corpus: 1697, signal 86677/122760 (executing program) 2022/02/25 18:24:37 fetching corpus: 1747, signal 87534/124267 (executing program) 2022/02/25 18:24:37 fetching corpus: 1796, signal 88283/125751 (executing program) 2022/02/25 18:24:37 fetching corpus: 1846, signal 89302/127353 (executing program) 2022/02/25 18:24:37 fetching corpus: 1896, signal 89872/128683 (executing program) 2022/02/25 18:24:37 fetching corpus: 1945, signal 90651/130079 (executing program) 2022/02/25 18:24:37 fetching corpus: 1995, signal 91698/131613 (executing program) 2022/02/25 18:24:37 fetching corpus: 2045, signal 92527/133062 (executing program) 2022/02/25 18:24:37 fetching corpus: 2095, signal 93156/134326 (executing program) 2022/02/25 18:24:37 fetching corpus: 2145, signal 93833/135616 (executing program) 2022/02/25 18:24:37 fetching corpus: 2195, signal 94495/136851 (executing program) 2022/02/25 18:24:37 fetching corpus: 2245, signal 95148/138072 (executing program) 2022/02/25 18:24:37 fetching corpus: 2295, signal 95981/139376 (executing program) 2022/02/25 18:24:37 fetching corpus: 2345, signal 96653/140598 (executing program) 2022/02/25 18:24:37 fetching corpus: 2395, signal 97463/141828 (executing program) 2022/02/25 18:24:37 fetching corpus: 2445, signal 98028/143004 (executing program) 2022/02/25 18:24:37 fetching corpus: 2495, signal 98457/144091 (executing program) 2022/02/25 18:24:37 fetching corpus: 2545, signal 98931/145186 (executing program) 2022/02/25 18:24:37 fetching corpus: 2595, signal 99623/146331 (executing program) 2022/02/25 18:24:37 fetching corpus: 2645, signal 100262/147486 (executing program) 2022/02/25 18:24:37 fetching corpus: 2695, signal 101150/148688 (executing program) 2022/02/25 18:24:37 fetching corpus: 2745, signal 101623/149730 (executing program) 2022/02/25 18:24:37 fetching corpus: 2795, signal 102205/150799 (executing program) 2022/02/25 18:24:37 fetching corpus: 2845, signal 102742/151810 (executing program) 2022/02/25 18:24:37 fetching corpus: 2895, signal 103333/152872 (executing program) 2022/02/25 18:24:37 fetching corpus: 2945, signal 103790/153834 (executing program) 2022/02/25 18:24:38 fetching corpus: 2995, signal 104425/154852 (executing program) 2022/02/25 18:24:38 fetching corpus: 3045, signal 105163/155936 (executing program) 2022/02/25 18:24:38 fetching corpus: 3094, signal 105692/156890 (executing program) 2022/02/25 18:24:38 fetching corpus: 3144, signal 106205/157875 (executing program) 2022/02/25 18:24:38 fetching corpus: 3194, signal 108760/159376 (executing program) 2022/02/25 18:24:38 fetching corpus: 3244, signal 109266/160273 (executing program) 2022/02/25 18:24:38 fetching corpus: 3294, signal 110073/161279 (executing program) 2022/02/25 18:24:38 fetching corpus: 3344, signal 110565/162177 (executing program) 2022/02/25 18:24:38 fetching corpus: 3394, signal 111022/163038 (executing program) 2022/02/25 18:24:38 fetching corpus: 3444, signal 111409/163852 (executing program) 2022/02/25 18:24:38 fetching corpus: 3494, signal 112306/164770 (executing program) 2022/02/25 18:24:38 fetching corpus: 3544, signal 113172/165669 (executing program) 2022/02/25 18:24:38 fetching corpus: 3594, signal 113816/166502 (executing program) 2022/02/25 18:24:38 fetching corpus: 3644, signal 114215/167329 (executing program) 2022/02/25 18:24:38 fetching corpus: 3694, signal 114820/168117 (executing program) 2022/02/25 18:24:38 fetching corpus: 3744, signal 115385/168899 (executing program) 2022/02/25 18:24:38 fetching corpus: 3794, signal 115829/169677 (executing program) 2022/02/25 18:24:38 fetching corpus: 3844, signal 116462/170495 (executing program) 2022/02/25 18:24:38 fetching corpus: 3894, signal 116856/171254 (executing program) 2022/02/25 18:24:38 fetching corpus: 3944, signal 117201/171964 (executing program) 2022/02/25 18:24:38 fetching corpus: 3994, signal 117652/172724 (executing program) 2022/02/25 18:24:38 fetching corpus: 4044, signal 118287/173480 (executing program) 2022/02/25 18:24:38 fetching corpus: 4094, signal 118891/174205 (executing program) 2022/02/25 18:24:39 fetching corpus: 4144, signal 119410/174934 (executing program) 2022/02/25 18:24:39 fetching corpus: 4194, signal 119788/175638 (executing program) 2022/02/25 18:24:39 fetching corpus: 4244, signal 120284/176307 (executing program) 2022/02/25 18:24:39 fetching corpus: 4294, signal 120720/176955 (executing program) 2022/02/25 18:24:39 fetching corpus: 4344, signal 121238/177590 (executing program) 2022/02/25 18:24:39 fetching corpus: 4394, signal 121904/178253 (executing program) 2022/02/25 18:24:39 fetching corpus: 4444, signal 122531/178392 (executing program) 2022/02/25 18:24:39 fetching corpus: 4494, signal 122937/178392 (executing program) 2022/02/25 18:24:39 fetching corpus: 4544, signal 123556/178392 (executing program) 2022/02/25 18:24:39 fetching corpus: 4593, signal 123963/178392 (executing program) 2022/02/25 18:24:39 fetching corpus: 4643, signal 124296/178392 (executing program) 2022/02/25 18:24:39 fetching corpus: 4693, signal 124727/178392 (executing program) 2022/02/25 18:24:39 fetching corpus: 4743, signal 125096/178392 (executing program) 2022/02/25 18:24:39 fetching corpus: 4793, signal 125618/178396 (executing program) 2022/02/25 18:24:39 fetching corpus: 4843, signal 126259/178396 (executing program) 2022/02/25 18:24:39 fetching corpus: 4893, signal 126849/178396 (executing program) 2022/02/25 18:24:39 fetching corpus: 4943, signal 127223/178396 (executing program) 2022/02/25 18:24:39 fetching corpus: 4993, signal 127885/178396 (executing program) 2022/02/25 18:24:39 fetching corpus: 5043, signal 128391/178396 (executing program) 2022/02/25 18:24:39 fetching corpus: 5093, signal 128860/178396 (executing program) 2022/02/25 18:24:39 fetching corpus: 5143, signal 129260/178396 (executing program) 2022/02/25 18:24:39 fetching corpus: 5193, signal 129659/178396 (executing program) 2022/02/25 18:24:39 fetching corpus: 5243, signal 130451/178396 (executing program) 2022/02/25 18:24:39 fetching corpus: 5293, signal 130887/178396 (executing program) 2022/02/25 18:24:39 fetching corpus: 5343, signal 131245/178396 (executing program) 2022/02/25 18:24:40 fetching corpus: 5393, signal 131661/178396 (executing program) 2022/02/25 18:24:40 fetching corpus: 5442, signal 132032/178396 (executing program) 2022/02/25 18:24:40 fetching corpus: 5492, signal 132411/178396 (executing program) 2022/02/25 18:24:40 fetching corpus: 5542, signal 132871/178400 (executing program) 2022/02/25 18:24:40 fetching corpus: 5592, signal 133253/178400 (executing program) 2022/02/25 18:24:40 fetching corpus: 5642, signal 133694/178400 (executing program) 2022/02/25 18:24:40 fetching corpus: 5692, signal 134157/178400 (executing program) 2022/02/25 18:24:40 fetching corpus: 5742, signal 134465/178400 (executing program) 2022/02/25 18:24:40 fetching corpus: 5792, signal 134781/178400 (executing program) 2022/02/25 18:24:40 fetching corpus: 5842, signal 135150/178400 (executing program) 2022/02/25 18:24:40 fetching corpus: 5892, signal 135578/178400 (executing program) 2022/02/25 18:24:40 fetching corpus: 5942, signal 136061/178400 (executing program) 2022/02/25 18:24:40 fetching corpus: 5992, signal 136445/178400 (executing program) 2022/02/25 18:24:40 fetching corpus: 6042, signal 136962/178400 (executing program) 2022/02/25 18:24:40 fetching corpus: 6092, signal 137433/178400 (executing program) 2022/02/25 18:24:40 fetching corpus: 6142, signal 137691/178400 (executing program) 2022/02/25 18:24:40 fetching corpus: 6192, signal 138081/178400 (executing program) 2022/02/25 18:24:40 fetching corpus: 6242, signal 138478/178402 (executing program) 2022/02/25 18:24:40 fetching corpus: 6292, signal 138954/178402 (executing program) 2022/02/25 18:24:40 fetching corpus: 6342, signal 139361/178402 (executing program) 2022/02/25 18:24:40 fetching corpus: 6392, signal 139691/178402 (executing program) 2022/02/25 18:24:40 fetching corpus: 6442, signal 140053/178402 (executing program) 2022/02/25 18:24:40 fetching corpus: 6492, signal 140533/178402 (executing program) 2022/02/25 18:24:40 fetching corpus: 6542, signal 141141/178402 (executing program) 2022/02/25 18:24:40 fetching corpus: 6592, signal 141487/178402 (executing program) 2022/02/25 18:24:40 fetching corpus: 6642, signal 141813/178402 (executing program) 2022/02/25 18:24:40 fetching corpus: 6692, signal 142091/178402 (executing program) 2022/02/25 18:24:41 fetching corpus: 6742, signal 142396/178402 (executing program) 2022/02/25 18:24:41 fetching corpus: 6792, signal 142783/178402 (executing program) 2022/02/25 18:24:41 fetching corpus: 6842, signal 143201/178407 (executing program) 2022/02/25 18:24:41 fetching corpus: 6892, signal 143518/178407 (executing program) 2022/02/25 18:24:41 fetching corpus: 6942, signal 143867/178407 (executing program) 2022/02/25 18:24:41 fetching corpus: 6992, signal 144158/178407 (executing program) 2022/02/25 18:24:41 fetching corpus: 7042, signal 144518/178407 (executing program) 2022/02/25 18:24:41 fetching corpus: 7092, signal 144802/178409 (executing program) 2022/02/25 18:24:41 fetching corpus: 7142, signal 145446/178409 (executing program) 2022/02/25 18:24:41 fetching corpus: 7192, signal 145859/178409 (executing program) 2022/02/25 18:24:41 fetching corpus: 7242, signal 146200/178409 (executing program) 2022/02/25 18:24:41 fetching corpus: 7292, signal 146466/178411 (executing program) 2022/02/25 18:24:41 fetching corpus: 7342, signal 146821/178413 (executing program) 2022/02/25 18:24:41 fetching corpus: 7392, signal 147377/178413 (executing program) 2022/02/25 18:24:41 fetching corpus: 7442, signal 147636/178413 (executing program) 2022/02/25 18:24:41 fetching corpus: 7492, signal 148054/178413 (executing program) 2022/02/25 18:24:41 fetching corpus: 7542, signal 148544/178426 (executing program) 2022/02/25 18:24:41 fetching corpus: 7592, signal 148859/178426 (executing program) 2022/02/25 18:24:41 fetching corpus: 7642, signal 149205/178426 (executing program) 2022/02/25 18:24:41 fetching corpus: 7692, signal 149562/178426 (executing program) 2022/02/25 18:24:41 fetching corpus: 7742, signal 149943/178426 (executing program) 2022/02/25 18:24:41 fetching corpus: 7792, signal 150276/178426 (executing program) 2022/02/25 18:24:41 fetching corpus: 7842, signal 150681/178429 (executing program) 2022/02/25 18:24:41 fetching corpus: 7892, signal 150978/178429 (executing program) 2022/02/25 18:24:41 fetching corpus: 7942, signal 151245/178429 (executing program) 2022/02/25 18:24:41 fetching corpus: 7992, signal 151519/178444 (executing program) 2022/02/25 18:24:42 fetching corpus: 8041, signal 151769/178444 (executing program) 2022/02/25 18:24:42 fetching corpus: 8091, signal 152061/178444 (executing program) 2022/02/25 18:24:42 fetching corpus: 8141, signal 152390/178444 (executing program) 2022/02/25 18:24:42 fetching corpus: 8191, signal 152647/178444 (executing program) 2022/02/25 18:24:42 fetching corpus: 8241, signal 152972/178444 (executing program) 2022/02/25 18:24:42 fetching corpus: 8291, signal 153222/178475 (executing program) 2022/02/25 18:24:42 fetching corpus: 8341, signal 153476/178475 (executing program) 2022/02/25 18:24:42 fetching corpus: 8391, signal 153968/178475 (executing program) 2022/02/25 18:24:42 fetching corpus: 8440, signal 154193/178475 (executing program) 2022/02/25 18:24:42 fetching corpus: 8490, signal 154429/178475 (executing program) 2022/02/25 18:24:42 fetching corpus: 8540, signal 154651/178475 (executing program) 2022/02/25 18:24:42 fetching corpus: 8590, signal 154965/178475 (executing program) 2022/02/25 18:24:42 fetching corpus: 8640, signal 155322/178475 (executing program) 2022/02/25 18:24:42 fetching corpus: 8690, signal 155576/178475 (executing program) 2022/02/25 18:24:42 fetching corpus: 8740, signal 156481/178475 (executing program) 2022/02/25 18:24:42 fetching corpus: 8790, signal 156711/178475 (executing program) 2022/02/25 18:24:42 fetching corpus: 8840, signal 157488/178478 (executing program) 2022/02/25 18:24:42 fetching corpus: 8890, signal 157759/178478 (executing program) 2022/02/25 18:24:42 fetching corpus: 8940, signal 158069/178478 (executing program) 2022/02/25 18:24:42 fetching corpus: 8990, signal 158273/178478 (executing program) 2022/02/25 18:24:42 fetching corpus: 9040, signal 158550/178478 (executing program) 2022/02/25 18:24:42 fetching corpus: 9090, signal 158758/178478 (executing program) 2022/02/25 18:24:42 fetching corpus: 9140, signal 159005/178478 (executing program) 2022/02/25 18:24:42 fetching corpus: 9190, signal 159260/178478 (executing program) 2022/02/25 18:24:42 fetching corpus: 9240, signal 159583/178478 (executing program) 2022/02/25 18:24:42 fetching corpus: 9290, signal 159998/178485 (executing program) 2022/02/25 18:24:42 fetching corpus: 9340, signal 160292/178485 (executing program) 2022/02/25 18:24:42 fetching corpus: 9390, signal 160809/178485 (executing program) 2022/02/25 18:24:43 fetching corpus: 9440, signal 161051/178485 (executing program) 2022/02/25 18:24:43 fetching corpus: 9490, signal 161401/178485 (executing program) 2022/02/25 18:24:43 fetching corpus: 9540, signal 161693/178485 (executing program) 2022/02/25 18:24:43 fetching corpus: 9589, signal 161990/178486 (executing program) 2022/02/25 18:24:43 fetching corpus: 9638, signal 162273/178486 (executing program) 2022/02/25 18:24:43 fetching corpus: 9688, signal 162565/178486 (executing program) 2022/02/25 18:24:43 fetching corpus: 9738, signal 162792/178486 (executing program) 2022/02/25 18:24:43 fetching corpus: 9788, signal 163236/178486 (executing program) 2022/02/25 18:24:43 fetching corpus: 9838, signal 163511/178486 (executing program) 2022/02/25 18:24:43 fetching corpus: 9888, signal 163691/178486 (executing program) 2022/02/25 18:24:43 fetching corpus: 9938, signal 164029/178486 (executing program) 2022/02/25 18:24:43 fetching corpus: 9988, signal 164315/178486 (executing program) 2022/02/25 18:24:43 fetching corpus: 10038, signal 164558/178486 (executing program) 2022/02/25 18:24:43 fetching corpus: 10087, signal 164827/178487 (executing program) 2022/02/25 18:24:43 fetching corpus: 10137, signal 165326/178487 (executing program) 2022/02/25 18:24:43 fetching corpus: 10187, signal 165634/178487 (executing program) 2022/02/25 18:24:43 fetching corpus: 10236, signal 165899/178488 (executing program) 2022/02/25 18:24:43 fetching corpus: 10286, signal 166101/178488 (executing program) 2022/02/25 18:24:43 fetching corpus: 10336, signal 166391/178488 (executing program) 2022/02/25 18:24:43 fetching corpus: 10385, signal 166684/178488 (executing program) 2022/02/25 18:24:43 fetching corpus: 10435, signal 166938/178488 (executing program) 2022/02/25 18:24:43 fetching corpus: 10485, signal 167238/178488 (executing program) 2022/02/25 18:24:43 fetching corpus: 10535, signal 167490/178488 (executing program) 2022/02/25 18:24:43 fetching corpus: 10585, signal 167922/178488 (executing program) 2022/02/25 18:24:44 fetching corpus: 10635, signal 168341/178488 (executing program) 2022/02/25 18:24:44 fetching corpus: 10684, signal 168601/178488 (executing program) 2022/02/25 18:24:44 fetching corpus: 10734, signal 168859/178488 (executing program) 2022/02/25 18:24:44 fetching corpus: 10784, signal 169181/178488 (executing program) 2022/02/25 18:24:44 fetching corpus: 10834, signal 169629/178488 (executing program) 2022/02/25 18:24:44 fetching corpus: 10884, signal 169813/178488 (executing program) 2022/02/25 18:24:44 fetching corpus: 10934, signal 170267/178488 (executing program) 2022/02/25 18:24:44 fetching corpus: 10984, signal 170539/178488 (executing program) 2022/02/25 18:24:44 fetching corpus: 11034, signal 170774/178488 (executing program) 2022/02/25 18:24:44 fetching corpus: 11084, signal 171008/178488 (executing program) 2022/02/25 18:24:44 fetching corpus: 11133, signal 171240/178488 (executing program) 2022/02/25 18:24:44 fetching corpus: 11183, signal 172337/178488 (executing program) 2022/02/25 18:24:44 fetching corpus: 11233, signal 172546/178488 (executing program) 2022/02/25 18:24:44 fetching corpus: 11283, signal 172856/178488 (executing program) 2022/02/25 18:24:44 fetching corpus: 11333, signal 173064/178488 (executing program) 2022/02/25 18:24:44 fetching corpus: 11383, signal 173357/178490 (executing program) 2022/02/25 18:24:44 fetching corpus: 11433, signal 173635/178491 (executing program) 2022/02/25 18:24:44 fetching corpus: 11483, signal 173877/178491 (executing program) 2022/02/25 18:24:44 fetching corpus: 11533, signal 174101/178491 (executing program) 2022/02/25 18:24:44 fetching corpus: 11583, signal 174316/178493 (executing program) 2022/02/25 18:24:44 fetching corpus: 11633, signal 174619/178493 (executing program) 2022/02/25 18:24:44 fetching corpus: 11683, signal 174937/178493 (executing program) 2022/02/25 18:24:44 fetching corpus: 11733, signal 175252/178493 (executing program) 2022/02/25 18:24:44 fetching corpus: 11783, signal 175540/178493 (executing program) 2022/02/25 18:24:45 fetching corpus: 11814, signal 175755/178493 (executing program) 2022/02/25 18:24:45 fetching corpus: 11814, signal 175755/178493 (executing program) 2022/02/25 18:24:46 starting 6 fuzzer processes 18:24:46 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x167f42) ioctl$HIDIOCGRAWNAME(r0, 0x40086607, &(0x7f0000000080)) 18:24:46 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0x32}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:24:46 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x3a, &(0x7f0000000140)={0x5, 0xf, 0x3a, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "6cd85e6fec6859d1668aef4cfb707dd1"}, @ext_cap={0x7}, @generic={0x3, 0x10, 0xb}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) 18:24:46 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x54, r0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x2, {{0x14, 0x1, @in={0x2, 0x4e21, @dev}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x54}}, 0x0) 18:24:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x271) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 18:24:46 executing program 1: chdir(0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) [ 32.160789][ T22] audit: type=1400 audit(1645813486.410:79): avc: denied { execmem } for pid=304 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.210529][ T22] audit: type=1400 audit(1645813486.470:80): avc: denied { mounton } for pid=309 comm="syz-executor.2" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 32.249288][ T22] audit: type=1400 audit(1645813486.470:81): avc: denied { mount } for pid=309 comm="syz-executor.2" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 32.322202][ T22] audit: type=1400 audit(1645813486.470:82): avc: denied { read } for pid=309 comm="syz-executor.2" dev="nsfs" ino=4026531999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.353326][ T22] audit: type=1400 audit(1645813486.470:83): avc: denied { open } for pid=309 comm="syz-executor.2" path="net:[4026531999]" dev="nsfs" ino=4026531999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.371850][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.379651][ T22] audit: type=1400 audit(1645813486.470:84): avc: denied { mounton } for pid=309 comm="syz-executor.2" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 32.385560][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.405665][ T22] audit: type=1400 audit(1645813486.470:85): avc: denied { module_request } for pid=309 comm="syz-executor.2" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 32.413036][ T309] device bridge_slave_0 entered promiscuous mode [ 32.441467][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.448473][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.455864][ T309] device bridge_slave_1 entered promiscuous mode [ 32.612876][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.620310][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.627852][ T312] device bridge_slave_0 entered promiscuous mode [ 32.634959][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.642190][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.649661][ T312] device bridge_slave_1 entered promiscuous mode [ 32.714871][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.722102][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.729642][ T316] device bridge_slave_0 entered promiscuous mode [ 32.739265][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.746563][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.754224][ T314] device bridge_slave_0 entered promiscuous mode [ 32.760983][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.768078][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.775545][ T321] device bridge_slave_0 entered promiscuous mode [ 32.790390][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.797402][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.804825][ T316] device bridge_slave_1 entered promiscuous mode [ 32.811632][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.818767][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.826248][ T314] device bridge_slave_1 entered promiscuous mode [ 32.832993][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.840380][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.847694][ T321] device bridge_slave_1 entered promiscuous mode [ 32.869265][ T22] audit: type=1400 audit(1645813487.130:86): avc: denied { create } for pid=309 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.892118][ T22] audit: type=1400 audit(1645813487.150:87): avc: denied { write } for pid=309 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.912682][ T22] audit: type=1400 audit(1645813487.150:88): avc: denied { read } for pid=309 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.916975][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.940291][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.947609][ T318] device bridge_slave_0 entered promiscuous mode [ 32.957909][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.965011][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.972430][ T318] device bridge_slave_1 entered promiscuous mode [ 33.013859][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.020915][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.028161][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.035196][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.059762][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.066795][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.074059][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.081094][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.159395][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.166427][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.173793][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.180830][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.190282][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.197332][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.204679][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.211823][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.220612][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.227795][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.235372][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.242555][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.250154][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.257263][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.264890][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.272834][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.280613][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.288083][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.320245][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.328847][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.335864][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.343202][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.351361][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.358394][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.378803][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.415239][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.423597][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.431887][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.440161][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.468938][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.476985][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.484554][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.493518][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.501801][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.508827][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.516160][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.524669][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.532832][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.539855][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.547172][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.555611][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.563760][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.570774][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.578085][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.585788][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.593259][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.601546][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.609722][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.616722][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.624087][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.632497][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.640688][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.647715][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.655062][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.663296][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.686657][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.695223][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.706026][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.714541][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.722177][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.730207][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.738445][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.770273][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.783863][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.793821][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.801712][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.809644][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.817163][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.824920][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.833329][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.841730][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.848759][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.856198][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.864913][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.873106][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.880133][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.887406][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.895742][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.911385][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.919902][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.941808][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.950544][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.958555][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.967172][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.975317][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.983779][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.999045][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.021516][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.031114][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.039620][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.048014][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.056065][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.064414][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.075489][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.083746][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.106490][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.115118][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.123392][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.131981][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.140448][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.148590][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.157351][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.187397][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.196359][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.204823][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.212421][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.239751][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.253729][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.263573][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.272791][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.279938][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.287732][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.297039][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 18:24:48 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x167f42) ioctl$HIDIOCGRAWNAME(r0, 0x40086607, &(0x7f0000000080)) [ 34.305627][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.312800][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.320803][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.329171][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.339381][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.347461][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:24:48 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x167f42) ioctl$HIDIOCGRAWNAME(r0, 0x40086607, &(0x7f0000000080)) [ 34.374833][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.384227][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.393778][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.402848][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:24:48 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0x32}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:24:48 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x167f42) ioctl$HIDIOCGRAWNAME(r0, 0x40086607, &(0x7f0000000080)) 18:24:48 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0x32}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 34.434859][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.450375][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.469473][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 18:24:48 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x167f42) ioctl$HIDIOCGRAWNAME(r0, 0x40086607, &(0x7f0000000080)) 18:24:48 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0x32}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:24:48 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x167f42) ioctl$HIDIOCGRAWNAME(r0, 0x40086607, &(0x7f0000000080)) [ 34.479358][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.487819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.496436][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.507100][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.517391][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.554398][ T352] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 34.563014][ T352] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 34.572250][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.586377][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.594950][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.603524][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.612171][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.620168][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.657806][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.675215][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.683821][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.692250][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.700891][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.709231][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.938736][ T337] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 35.178758][ T337] usb 6-1: Using ep0 maxpacket: 8 [ 35.378846][ T337] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 35.548930][ T337] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.557949][ T337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.566291][ T337] usb 6-1: Product: syz [ 35.570568][ T337] usb 6-1: Manufacturer: syz [ 35.575140][ T337] usb 6-1: SerialNumber: syz [ 35.619309][ T337] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 35.821058][ T342] usb 6-1: USB disconnect, device number 2 18:24:50 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x167f42) ioctl$HIDIOCGRAWNAME(r0, 0x40086607, &(0x7f0000000080)) 18:24:50 executing program 2: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000800)={0x0, 0x0, @start={0x0, 0x0, "f0446571833d0aaf90b5d0ca021df83778f02d70ca3327d6b7f170dfe36b3b7beec3487e00583feb3d70d5e12b845eda384a36cb199c44fc5141c9d40f932541335169c9595110726032f7d154708e91e119347a2993e5749b0f3f733e5b8d644c6b0da92ea070c1acb6f45a75855b8e5ccff33b5955ce640ba90dcbafd31e0ae51fa28bd5b2b2538d9cee0afd6304b1e6a3098bdd51d7fea7a2608d19d3c26183989d2b861f6a382fae44857dbfa83c5fe3ca2adf21eaaba2070fd4586102b2434cdcdec4f9668d76030054c578cf29b89cf2c47332ddfe4936859f65f3ebe2d98b22fab3539fc2921fae686c180abb89243d24f62889099dc2b904b3b420b97901f4dd9922239020bb4f80a00836d9cd7c1e27145f559f73d3124b6759052130048c719c59f2ed294212519cfecf70a82402700c4dddd16defa467abe8598930f83f3a3178fd737341511cbc68f09222f2300080dfeb843ca3892cb4bf8fb5d284e690b9704c058cdede22ee8be2353c909f8ae41034891bf0d7230cb378306b8b20625d98267ef9d4a780ebd85e8aad86281c73aaadedb75e73281e07aa2a599c0ac4ff00bea0a1fad10652835d1e1b65f102452500507b654af0f9c8e8656db6642c820d1b9bab16aeb21400398626c984d833ba7972f63afa58f31a1509878469c3d422132845fffff36b17fab7ae9ff99481890bcd06e2b60d37790cac5d15e3cf535713c5e51150b52b131cd0d145500db4675575ff75e87de79377f9bc8f3470eb391147643dc66558f62173b225a89ac8fc56792741c11c587dd093b508c77265fc5128bc7eaeb6a0c63917e4b4907d344737e5b3c03e3c87bcb5e0d68863b33e8b8f7b390c6e8c49acf707a5fff4b0c3e04603f7fcbec18e2a07d1f8840ea0e223fb72f9f1d102a76b8db17aa15639ffa29578c0c2a9b614101991dc174f826e841c0e20af30c799ac988c438e173357e4745ab0e16d0f61e0e7aa8a290e1fa2b5e7ac076fc0c0765456453461f1bd8150722644b9e25d86330a1fa6c954598ae50e070fe444f8bbf7cbfbad910f4715ab20bbcba58d18c72d797e504bca80b3ebc13b7c4a6733cce0b66b8f2840c2f03e02b6cdf5e5a8172ec55f1cae2415061af5cc7900c9adf6b6bc3096af53a7a3c9385a7deadc2c5844d8faffd4205bed67bfe899d6a92e3463385ab8f32dbe9bee06efeb7582626bc17fb319d89229a058d757a10241df44be95835cf5b07713932a034f4c58d5e64fce270c3271910ab6ce70460a4e5ac05d9bb0f5faf51aedbff569629e597deb00f4bda9b9db88b1fd1509ba11de661f05a23c830c18cf62590959b2a9dbe58728616b10291ed0a4a3ea01388e045b9b4415243a29b3f22fd73e039dde92cc73ef85c1d055c44f56a7cf6bfaeb3acd36e4bdb8a5cee6c80438d3c565820d62ff66222598", "47d34cc2b59cabe09c244c95e4414d10a6b43c3da1c63b60fbb5452421f454c2d00cd9aecc7ba7faa851b4ec28a18657d0808deb067358bdc70bc044b5ff7228cab7f27d5a7cde474353fc879af868a1e5f935c5cb4fe3e1a8400f96709bc28015afb3eb003b2bae75879251f96ae64690f5ced7cd89802873bcb7511391659cb124da8f4016b1b1cb07c2814db4cd398d6130f5b20826a7d891f150b8bc6d5b173fe8b1e81155f9432518d972393710cfe9e2c8caf84d6622d4e579c5e7c0575af1d54266203625927e30076b05dae2b1eaa7e1fef7509285a2150ea849ca96162b4a38f56fe13a3700a0ff62278ec3f1ec208f2ea4a24fde4f769ad0f450544d2146f375964aa60f98f265b3afebacf3bc2dfca322ab0dc084ced6bef260f0c68d6143ac6186b1b552fa7a8513b1d61343321d67afd92e2db3705ab57cfb103cde879cd04a6b14b592076dd5c54687d4ea72bd23e895a575bdd24cd265791c8da735b20f3283b0c15eab9fbfb05eb3bf176581e0e6e443dc3be7afff1d7fed6186c147d7963677df2fed4d0167390965e97f587a1d420af5a402c2566e10bba14c4ac9cb5c365a0a11eba943e57a09491d2ed3276a73c0bbc3d932b10463d869a74083cb0bd79124b858426e755fd4ea85f5248ebff51c7460a53d3adc96e4997f5bedeb4d5111f020530b099e64b8560b95add64eeccc3b2cbe49b93eaf40c006f5daa00c0ac154818cfaa7e8c3b3ae567af89d507bd1ce7004028fd2808f50debe668ba77e4751d6a8090072e590c80491fe223f2ef9a13a13cbcf4a63087de3ae2d09a27d0f13eb6b15299c45ff4910a4ed1fddac6b7ad7b89f242ad48e5b20ac2759cec831cac152b68d20751fd0cae4d6784b937f660782cd9314732ebf99c532fc88e08d9490270f508674506dee71c7bb3054fe829f74a24d738f03c05766dad55964865ef12b9dbbbf0ff6b5d7121519ae3dde9b1aa85b44056690b8fd082f0f5218e8484d15d29c984bf4cd377e0d0d4c344a4edc0a6bd3d41110f8c515353b4070c12437e2f2f107152446c9740df611f42aa2e1710cc877f97bf73ebd7ebe2b4830f254053183f14e7f29a3cfc0d3ee732c9539fa51e1683f1ea48399e019d3760d4fff786f0869b5317af8bfbc5edc3a04ea67e45052cb09fcbc123c876e047a66fa413a75f35e0d54f49d72ddd1abf15b5f89863c0a7af192208f0319836983bb046c3c6b4e10d7c84a891d504a05dc89b5999810a9ee113cad310e9138fffd49d1608108e145ea8671f2b72de1d5b60e4004eadd8c4b97b12ff58b411227450991890d4a6793fa63ed321589c26afeda43303dfe0234db9d9dea8921479d5fff3d47ba670ca3b926a71d7ee915f395f5232ffc15ef1c85ac7a8f7e55a444c3137a3b2a0bd20cdd77f9781e8f537d4a656527f9386102c3b771"}, [0x4, 0x90b0, 0x863, 0x100, 0xffffffff, 0x957, 0x6, 0x3, 0xfffffffffffffffe]}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000d80)) 18:24:50 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x54, r0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x2, {{0x14, 0x1, @in={0x2, 0x4e21, @dev}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x54}}, 0x0) 18:24:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x271) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 18:24:50 executing program 1: chdir(0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) 18:24:50 executing program 5: syz_open_dev$MSR(&(0x7f0000000180), 0x3, 0x0) 18:24:50 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c10000000000000000000", 0x58}], 0x1) 18:24:50 executing program 2: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000800)={0x0, 0x0, @start={0x0, 0x0, "f0446571833d0aaf90b5d0ca021df83778f02d70ca3327d6b7f170dfe36b3b7beec3487e00583feb3d70d5e12b845eda384a36cb199c44fc5141c9d40f932541335169c9595110726032f7d154708e91e119347a2993e5749b0f3f733e5b8d644c6b0da92ea070c1acb6f45a75855b8e5ccff33b5955ce640ba90dcbafd31e0ae51fa28bd5b2b2538d9cee0afd6304b1e6a3098bdd51d7fea7a2608d19d3c26183989d2b861f6a382fae44857dbfa83c5fe3ca2adf21eaaba2070fd4586102b2434cdcdec4f9668d76030054c578cf29b89cf2c47332ddfe4936859f65f3ebe2d98b22fab3539fc2921fae686c180abb89243d24f62889099dc2b904b3b420b97901f4dd9922239020bb4f80a00836d9cd7c1e27145f559f73d3124b6759052130048c719c59f2ed294212519cfecf70a82402700c4dddd16defa467abe8598930f83f3a3178fd737341511cbc68f09222f2300080dfeb843ca3892cb4bf8fb5d284e690b9704c058cdede22ee8be2353c909f8ae41034891bf0d7230cb378306b8b20625d98267ef9d4a780ebd85e8aad86281c73aaadedb75e73281e07aa2a599c0ac4ff00bea0a1fad10652835d1e1b65f102452500507b654af0f9c8e8656db6642c820d1b9bab16aeb21400398626c984d833ba7972f63afa58f31a1509878469c3d422132845fffff36b17fab7ae9ff99481890bcd06e2b60d37790cac5d15e3cf535713c5e51150b52b131cd0d145500db4675575ff75e87de79377f9bc8f3470eb391147643dc66558f62173b225a89ac8fc56792741c11c587dd093b508c77265fc5128bc7eaeb6a0c63917e4b4907d344737e5b3c03e3c87bcb5e0d68863b33e8b8f7b390c6e8c49acf707a5fff4b0c3e04603f7fcbec18e2a07d1f8840ea0e223fb72f9f1d102a76b8db17aa15639ffa29578c0c2a9b614101991dc174f826e841c0e20af30c799ac988c438e173357e4745ab0e16d0f61e0e7aa8a290e1fa2b5e7ac076fc0c0765456453461f1bd8150722644b9e25d86330a1fa6c954598ae50e070fe444f8bbf7cbfbad910f4715ab20bbcba58d18c72d797e504bca80b3ebc13b7c4a6733cce0b66b8f2840c2f03e02b6cdf5e5a8172ec55f1cae2415061af5cc7900c9adf6b6bc3096af53a7a3c9385a7deadc2c5844d8faffd4205bed67bfe899d6a92e3463385ab8f32dbe9bee06efeb7582626bc17fb319d89229a058d757a10241df44be95835cf5b07713932a034f4c58d5e64fce270c3271910ab6ce70460a4e5ac05d9bb0f5faf51aedbff569629e597deb00f4bda9b9db88b1fd1509ba11de661f05a23c830c18cf62590959b2a9dbe58728616b10291ed0a4a3ea01388e045b9b4415243a29b3f22fd73e039dde92cc73ef85c1d055c44f56a7cf6bfaeb3acd36e4bdb8a5cee6c80438d3c565820d62ff66222598", "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"}, [0x4, 0x90b0, 0x863, 0x100, 0xffffffff, 0x957, 0x6, 0x3, 0xfffffffffffffffe]}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000d80)) 18:24:50 executing program 0: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000800)={0x0, 0x0, @start={0x0, 0x0, "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", "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"}, [0x4, 0x90b0, 0x863, 0x100, 0xffffffff, 0x957, 0x6, 0x3, 0xfffffffffffffffe]}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000d80)) 18:24:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x271) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 18:24:50 executing program 1: chdir(0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) 18:24:50 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x54, r0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x2, {{0x14, 0x1, @in={0x2, 0x4e21, @dev}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x54}}, 0x0) [ 36.340468][ T376] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 36.348885][ T376] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 18:24:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x271) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 18:24:50 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c10000000000000000000", 0x58}], 0x1) 18:24:50 executing program 2: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000800)={0x0, 0x0, @start={0x0, 0x0, "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", "47d34cc2b59cabe09c244c95e4414d10a6b43c3da1c63b60fbb5452421f454c2d00cd9aecc7ba7faa851b4ec28a18657d0808deb067358bdc70bc044b5ff7228cab7f27d5a7cde474353fc879af868a1e5f935c5cb4fe3e1a8400f96709bc28015afb3eb003b2bae75879251f96ae64690f5ced7cd89802873bcb7511391659cb124da8f4016b1b1cb07c2814db4cd398d6130f5b20826a7d891f150b8bc6d5b173fe8b1e81155f9432518d972393710cfe9e2c8caf84d6622d4e579c5e7c0575af1d54266203625927e30076b05dae2b1eaa7e1fef7509285a2150ea849ca96162b4a38f56fe13a3700a0ff62278ec3f1ec208f2ea4a24fde4f769ad0f450544d2146f375964aa60f98f265b3afebacf3bc2dfca322ab0dc084ced6bef260f0c68d6143ac6186b1b552fa7a8513b1d61343321d67afd92e2db3705ab57cfb103cde879cd04a6b14b592076dd5c54687d4ea72bd23e895a575bdd24cd265791c8da735b20f3283b0c15eab9fbfb05eb3bf176581e0e6e443dc3be7afff1d7fed6186c147d7963677df2fed4d0167390965e97f587a1d420af5a402c2566e10bba14c4ac9cb5c365a0a11eba943e57a09491d2ed3276a73c0bbc3d932b10463d869a74083cb0bd79124b858426e755fd4ea85f5248ebff51c7460a53d3adc96e4997f5bedeb4d5111f020530b099e64b8560b95add64eeccc3b2cbe49b93eaf40c006f5daa00c0ac154818cfaa7e8c3b3ae567af89d507bd1ce7004028fd2808f50debe668ba77e4751d6a8090072e590c80491fe223f2ef9a13a13cbcf4a63087de3ae2d09a27d0f13eb6b15299c45ff4910a4ed1fddac6b7ad7b89f242ad48e5b20ac2759cec831cac152b68d20751fd0cae4d6784b937f660782cd9314732ebf99c532fc88e08d9490270f508674506dee71c7bb3054fe829f74a24d738f03c05766dad55964865ef12b9dbbbf0ff6b5d7121519ae3dde9b1aa85b44056690b8fd082f0f5218e8484d15d29c984bf4cd377e0d0d4c344a4edc0a6bd3d41110f8c515353b4070c12437e2f2f107152446c9740df611f42aa2e1710cc877f97bf73ebd7ebe2b4830f254053183f14e7f29a3cfc0d3ee732c9539fa51e1683f1ea48399e019d3760d4fff786f0869b5317af8bfbc5edc3a04ea67e45052cb09fcbc123c876e047a66fa413a75f35e0d54f49d72ddd1abf15b5f89863c0a7af192208f0319836983bb046c3c6b4e10d7c84a891d504a05dc89b5999810a9ee113cad310e9138fffd49d1608108e145ea8671f2b72de1d5b60e4004eadd8c4b97b12ff58b411227450991890d4a6793fa63ed321589c26afeda43303dfe0234db9d9dea8921479d5fff3d47ba670ca3b926a71d7ee915f395f5232ffc15ef1c85ac7a8f7e55a444c3137a3b2a0bd20cdd77f9781e8f537d4a656527f9386102c3b771"}, [0x4, 0x90b0, 0x863, 0x100, 0xffffffff, 0x957, 0x6, 0x3, 0xfffffffffffffffe]}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000d80)) 18:24:50 executing program 0: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000800)={0x0, 0x0, @start={0x0, 0x0, "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", "47d34cc2b59cabe09c244c95e4414d10a6b43c3da1c63b60fbb5452421f454c2d00cd9aecc7ba7faa851b4ec28a18657d0808deb067358bdc70bc044b5ff7228cab7f27d5a7cde474353fc879af868a1e5f935c5cb4fe3e1a8400f96709bc28015afb3eb003b2bae75879251f96ae64690f5ced7cd89802873bcb7511391659cb124da8f4016b1b1cb07c2814db4cd398d6130f5b20826a7d891f150b8bc6d5b173fe8b1e81155f9432518d972393710cfe9e2c8caf84d6622d4e579c5e7c0575af1d54266203625927e30076b05dae2b1eaa7e1fef7509285a2150ea849ca96162b4a38f56fe13a3700a0ff62278ec3f1ec208f2ea4a24fde4f769ad0f450544d2146f375964aa60f98f265b3afebacf3bc2dfca322ab0dc084ced6bef260f0c68d6143ac6186b1b552fa7a8513b1d61343321d67afd92e2db3705ab57cfb103cde879cd04a6b14b592076dd5c54687d4ea72bd23e895a575bdd24cd265791c8da735b20f3283b0c15eab9fbfb05eb3bf176581e0e6e443dc3be7afff1d7fed6186c147d7963677df2fed4d0167390965e97f587a1d420af5a402c2566e10bba14c4ac9cb5c365a0a11eba943e57a09491d2ed3276a73c0bbc3d932b10463d869a74083cb0bd79124b858426e755fd4ea85f5248ebff51c7460a53d3adc96e4997f5bedeb4d5111f020530b099e64b8560b95add64eeccc3b2cbe49b93eaf40c006f5daa00c0ac154818cfaa7e8c3b3ae567af89d507bd1ce7004028fd2808f50debe668ba77e4751d6a8090072e590c80491fe223f2ef9a13a13cbcf4a63087de3ae2d09a27d0f13eb6b15299c45ff4910a4ed1fddac6b7ad7b89f242ad48e5b20ac2759cec831cac152b68d20751fd0cae4d6784b937f660782cd9314732ebf99c532fc88e08d9490270f508674506dee71c7bb3054fe829f74a24d738f03c05766dad55964865ef12b9dbbbf0ff6b5d7121519ae3dde9b1aa85b44056690b8fd082f0f5218e8484d15d29c984bf4cd377e0d0d4c344a4edc0a6bd3d41110f8c515353b4070c12437e2f2f107152446c9740df611f42aa2e1710cc877f97bf73ebd7ebe2b4830f254053183f14e7f29a3cfc0d3ee732c9539fa51e1683f1ea48399e019d3760d4fff786f0869b5317af8bfbc5edc3a04ea67e45052cb09fcbc123c876e047a66fa413a75f35e0d54f49d72ddd1abf15b5f89863c0a7af192208f0319836983bb046c3c6b4e10d7c84a891d504a05dc89b5999810a9ee113cad310e9138fffd49d1608108e145ea8671f2b72de1d5b60e4004eadd8c4b97b12ff58b411227450991890d4a6793fa63ed321589c26afeda43303dfe0234db9d9dea8921479d5fff3d47ba670ca3b926a71d7ee915f395f5232ffc15ef1c85ac7a8f7e55a444c3137a3b2a0bd20cdd77f9781e8f537d4a656527f9386102c3b771"}, [0x4, 0x90b0, 0x863, 0x100, 0xffffffff, 0x957, 0x6, 0x3, 0xfffffffffffffffe]}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000d80)) 18:24:50 executing program 1: chdir(0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) 18:24:50 executing program 2: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000800)={0x0, 0x0, @start={0x0, 0x0, "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", "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"}, [0x4, 0x90b0, 0x863, 0x100, 0xffffffff, 0x957, 0x6, 0x3, 0xfffffffffffffffe]}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000d80)) 18:24:50 executing program 4: r0 = openat$tcp_mem(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 18:24:50 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c10000000000000000000", 0x58}], 0x1) 18:24:50 executing program 2: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x101, &(0x7f0000000280), 0x8) dup3(r0, r1, 0x0) 18:24:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x17}) 18:24:50 executing program 4: r0 = openat$tcp_mem(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 18:24:50 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x54, r0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x2, {{0x14, 0x1, @in={0x2, 0x4e21, @dev}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x54}}, 0x0) 18:24:50 executing program 0: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000800)={0x0, 0x0, @start={0x0, 0x0, "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", "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"}, [0x4, 0x90b0, 0x863, 0x100, 0xffffffff, 0x957, 0x6, 0x3, 0xfffffffffffffffe]}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000d80)) 18:24:50 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c10000000000000000000", 0x58}], 0x1) 18:24:50 executing program 4: r0 = openat$tcp_mem(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) [ 36.430202][ T394] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 36.462668][ T394] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 18:24:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x17}) 18:24:50 executing program 4: r0 = openat$tcp_mem(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 18:24:50 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x17}) 18:24:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x17}) 18:24:50 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @func={0xa}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000380)=""/4096, 0x3c, 0x1000, 0x1}, 0x20) [ 36.525273][ T420] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 36.551023][ T420] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 18:24:51 executing program 2: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x101, &(0x7f0000000280), 0x8) dup3(r0, r1, 0x0) 18:24:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x17}) 18:24:51 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145442, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ftruncate(r1, 0x208200) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) sendfile(r4, r0, 0x0, 0x800000000004) 18:24:51 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @func={0xa}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000380)=""/4096, 0x3c, 0x1000, 0x1}, 0x20) 18:24:51 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x17}) 18:24:51 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x12, 0x0, 0x0}, 0x14) write$tcp_congestion(r0, &(0x7f0000000280)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12}, 0x10) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 18:24:51 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x17}) 18:24:51 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @func={0xa}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000380)=""/4096, 0x3c, 0x1000, 0x1}, 0x20) 18:24:51 executing program 1: unshare(0x60040400) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x8}]}, 0x38}}, 0x0) 18:24:51 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x12, 0x0, 0x0}, 0x14) write$tcp_congestion(r0, &(0x7f0000000280)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12}, 0x10) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 18:24:51 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @func={0xa}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000380)=""/4096, 0x3c, 0x1000, 0x1}, 0x20) 18:24:51 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x12, 0x0, 0x0}, 0x14) write$tcp_congestion(r0, &(0x7f0000000280)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12}, 0x10) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 18:24:51 executing program 2: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x101, &(0x7f0000000280), 0x8) dup3(r0, r1, 0x0) 18:24:51 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x12, 0x0, 0x0}, 0x14) write$tcp_congestion(r0, &(0x7f0000000280)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12}, 0x10) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 18:24:51 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145442, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ftruncate(r1, 0x208200) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) sendfile(r4, r0, 0x0, 0x800000000004) 18:24:51 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145442, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ftruncate(r1, 0x208200) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) sendfile(r4, r0, 0x0, 0x800000000004) 18:24:51 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x12, 0x0, 0x0}, 0x14) write$tcp_congestion(r0, &(0x7f0000000280)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12}, 0x10) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 18:24:51 executing program 1: unshare(0x60040400) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x8}]}, 0x38}}, 0x0) 18:24:51 executing program 3: unshare(0x60040400) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x8}]}, 0x38}}, 0x0) 18:24:51 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x12, 0x0, 0x0}, 0x14) write$tcp_congestion(r0, &(0x7f0000000280)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12}, 0x10) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 18:24:51 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145442, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ftruncate(r1, 0x208200) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) sendfile(r4, r0, 0x0, 0x800000000004) 18:24:51 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x12, 0x0, 0x0}, 0x14) write$tcp_congestion(r0, &(0x7f0000000280)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12}, 0x10) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 18:24:51 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145442, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ftruncate(r1, 0x208200) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) sendfile(r4, r0, 0x0, 0x800000000004) 18:24:51 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x12, 0x0, 0x0}, 0x14) write$tcp_congestion(r0, &(0x7f0000000280)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12}, 0x10) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 18:24:51 executing program 2: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x101, &(0x7f0000000280), 0x8) dup3(r0, r1, 0x0) 18:24:51 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x12, 0x0, 0x0}, 0x14) write$tcp_congestion(r0, &(0x7f0000000280)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12}, 0x10) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 18:24:51 executing program 3: unshare(0x60040400) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x8}]}, 0x38}}, 0x0) 18:24:51 executing program 1: unshare(0x60040400) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x8}]}, 0x38}}, 0x0) 18:24:51 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145442, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ftruncate(r1, 0x208200) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) sendfile(r4, r0, 0x0, 0x800000000004) 18:24:51 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145442, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ftruncate(r1, 0x208200) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) sendfile(r4, r0, 0x0, 0x800000000004) 18:24:51 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x12, 0x0, 0x0}, 0x14) write$tcp_congestion(r0, &(0x7f0000000280)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12}, 0x10) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 18:24:51 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x10000, 0x0) llistxattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=""/183, 0xb7) 18:24:51 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x10000, 0x0) llistxattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=""/183, 0xb7) [ 37.378685][ T22] kauditd_printk_skb: 20 callbacks suppressed [ 37.378693][ T22] audit: type=1400 audit(1645813491.620:109): avc: denied { mounton } for pid=505 comm="syz-executor.5" path="/root/syzkaller-testdir209491258/syzkaller.mSh60k/15/file0" dev="sda1" ino=1183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 18:24:51 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x10000, 0x0) llistxattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=""/183, 0xb7) [ 37.413804][ T22] audit: type=1400 audit(1645813491.620:110): avc: denied { mount } for pid=505 comm="syz-executor.5" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 37.445543][ T22] audit: type=1400 audit(1645813491.640:111): avc: denied { unmount } for pid=316 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 18:24:51 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x10000, 0x0) llistxattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=""/183, 0xb7) 18:24:51 executing program 3: unshare(0x60040400) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x8}]}, 0x38}}, 0x0) 18:24:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x4004}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000002c0)) 18:24:51 executing program 0: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x10000, 0x0) llistxattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=""/183, 0xb7) 18:24:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x10}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)) 18:24:51 executing program 1: unshare(0x60040400) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x8}]}, 0x38}}, 0x0) 18:24:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 18:24:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x30}}, 0x0) [ 37.610747][ T22] audit: type=1400 audit(1645813491.870:112): avc: denied { map_create } for pid=523 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.613096][ T524] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:24:51 executing program 0: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x10000, 0x0) llistxattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=""/183, 0xb7) [ 37.653595][ T22] audit: type=1400 audit(1645813491.870:113): avc: denied { read } for pid=519 comm="syz-executor.5" name="kvm" dev="devtmpfs" ino=9294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 37.669826][ T529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.684511][ T529] IPv6: NLM_F_CREATE should be set when creating new route 18:24:51 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0x1, 0x9, 0x9dc}, 0x20) 18:24:52 executing program 0: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x10000, 0x0) llistxattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=""/183, 0xb7) 18:24:52 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0x1, 0x9, 0x9dc}, 0x20) 18:24:52 executing program 3: mremap(&(0x7f0000a76000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000b6b000/0x3000)=nil) mremap(&(0x7f0000b6c000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 18:24:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x30}}, 0x0) [ 37.687598][ T22] audit: type=1400 audit(1645813491.870:114): avc: denied { open } for pid=519 comm="syz-executor.5" path="/dev/kvm" dev="devtmpfs" ino=9294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 37.691859][ T529] IPv6: NLM_F_CREATE should be set when creating new route 18:24:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x41, 0x121041) sendfile(r1, r0, &(0x7f0000001080)=0x35, 0xfff0000000000) 18:24:52 executing program 3: mremap(&(0x7f0000a76000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000b6b000/0x3000)=nil) mremap(&(0x7f0000b6c000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 18:24:52 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0x1, 0x9, 0x9dc}, 0x20) 18:24:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0xbf22, 0x0, r0}, 0x76) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000200)=""/49}, 0x20) 18:24:52 executing program 3: mremap(&(0x7f0000a76000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000b6b000/0x3000)=nil) mremap(&(0x7f0000b6c000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 18:24:52 executing program 3: mremap(&(0x7f0000a76000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000b6b000/0x3000)=nil) mremap(&(0x7f0000b6c000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 18:24:52 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0x1, 0x9, 0x9dc}, 0x20) 18:24:52 executing program 1: r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000280)) 18:24:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0xbf22, 0x0, r0}, 0x76) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000200)=""/49}, 0x20) 18:24:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x41, 0x121041) sendfile(r1, r0, &(0x7f0000001080)=0x35, 0xfff0000000000) 18:24:52 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x41, 0x121041) sendfile(r1, r0, &(0x7f0000001080)=0x35, 0xfff0000000000) [ 37.803971][ T546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.821717][ T22] audit: type=1400 audit(1645813491.870:115): avc: denied { ioctl } for pid=519 comm="syz-executor.5" path="/dev/kvm" dev="devtmpfs" ino=9294 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 18:24:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x30}}, 0x0) 18:24:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x41, 0x121041) sendfile(r1, r0, &(0x7f0000001080)=0x35, 0xfff0000000000) 18:24:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 18:24:52 executing program 3: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x7fffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x0, 0x0, 0xffffffffffffff49) recvmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000280)=""/219, 0xdb}, {&(0x7f0000000380)=""/206, 0xce}, {&(0x7f0000000540)=""/152, 0x98}], 0x4, &(0x7f0000000480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}, 0x40000040) 18:24:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0xbf22, 0x0, r0}, 0x76) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000200)=""/49}, 0x20) 18:24:52 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x41, 0x121041) sendfile(r1, r0, &(0x7f0000001080)=0x35, 0xfff0000000000) 18:24:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x41, 0x121041) sendfile(r1, r0, &(0x7f0000001080)=0x35, 0xfff0000000000) 18:24:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 18:24:52 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x41, 0x121041) sendfile(r1, r0, &(0x7f0000001080)=0x35, 0xfff0000000000) 18:24:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0xbf22, 0x0, r0}, 0x76) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000200)=""/49}, 0x20) [ 37.921379][ T22] audit: type=1400 audit(1645813492.000:116): avc: denied { setopt } for pid=536 comm="syz-executor.4" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.924113][ T569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.961296][ T578] incfs: ino conflict with backing FS 3 18:24:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x30}}, 0x0) 18:24:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 18:24:52 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @volatile={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x7400, [{0x0, 0x2, 0x4}]}]}}, &(0x7f0000000040)=""/211, 0x4a, 0xd3, 0x8}, 0x20) 18:24:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005080)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="17", 0xffe2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000001940)="05", 0xfffffffffffffd89}], 0x1}}], 0x4000000000000ea, 0xc000) 18:24:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) [ 38.008369][ T583] incfs: ino conflict with backing FS 3 [ 38.062137][ T591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 38.070346][ T22] audit: type=1400 audit(1645813492.080:117): avc: denied { map_read map_write } for pid=552 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.080855][ T598] incfs: ino conflict with backing FS 3 [ 38.106441][ T594] incfs: ino conflict with backing FS 3 [ 38.132286][ T22] audit: type=1400 audit(1645813492.110:118): avc: denied { read } for pid=140 comm="acpid" name="event5" dev="devtmpfs" ino=13541 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 38.160187][ T594] ------------[ cut here ]------------ [ 38.165912][ T594] WARNING: CPU: 0 PID: 594 at fs/inode.c:303 drop_nlink+0xb9/0x100 [ 38.174174][ T594] Modules linked in: [ 38.178244][ T594] CPU: 0 PID: 594 Comm: syz-executor.1 Not tainted 5.4.161-syzkaller-00025-g961dd91cc692 #0 [ 38.188349][ T594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.198605][ T594] RIP: 0010:drop_nlink+0xb9/0x100 [ 38.203708][ T594] Code: 49 8b 1e 48 8d bb d0 04 00 00 be 08 00 00 00 e8 8d b4 f5 ff f0 48 ff 83 d0 04 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 e7 c6 c8 ff <0f> 0b eb 8a 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 63 ff ff ff 4c [ 38.223823][ T594] RSP: 0018:ffff8881dc8c7d30 EFLAGS: 00010283 [ 38.230094][ T594] RAX: ffffffff8197e079 RBX: 1ffff1103bda7236 RCX: 0000000000040000 [ 38.238058][ T594] RDX: ffffc90002b59000 RSI: 00000000000002ad RDI: 00000000000002ae [ 38.246108][ T594] RBP: 0000000000000000 R08: ffffffff8197dffe R09: ffffed103b918f9d [ 38.254172][ T594] R10: ffffed103b918f9d R11: 0000000000000000 R12: ffff8881ded391b0 [ 38.262330][ T594] R13: dffffc0000000000 R14: ffff8881ded39168 R15: dffffc0000000000 [ 38.270367][ T594] FS: 00007f6d3e846700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.279322][ T594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.286053][ T594] CR2: 00000000204be000 CR3: 00000001dbef0000 CR4: 00000000003406f0 [ 38.294444][ T594] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.302741][ T594] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.310778][ T594] Call Trace: [ 38.314048][ T594] shmem_rmdir+0x54/0x80 [ 38.318504][ T594] vfs_rmdir+0x20c/0x3e0 [ 38.323044][ T594] incfs_kill_sb+0x9b/0xe0 [ 38.327484][ T594] deactivate_locked_super+0xaf/0x100 [ 38.332837][ T594] deactivate_super+0x168/0x210 [ 38.337947][ T594] cleanup_mnt+0x432/0x4e0 [ 38.342392][ T594] task_work_run+0x186/0x1b0 [ 38.346995][ T594] prepare_exit_to_usermode+0x2b0/0x310 [ 38.352706][ T594] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 38.358592][ T594] RIP: 0033:0x7f6d3f6d0049 [ 38.363033][ T594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 38.383328][ T594] RSP: 002b:00007f6d3e846168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 38.391715][ T594] RAX: 0000000000000000 RBX: 00007f6d3f7e2f60 RCX: 00007f6d3f6d0049 [ 38.399781][ T594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 38.407761][ T594] RBP: 00007f6d3f72a08d R08: 0000000000000000 R09: 0000000000000000 [ 38.415735][ T594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.423868][ T594] R13: 00007fffb83c212f R14: 00007f6d3e846300 R15: 0000000000022000 [ 38.431816][ T594] ---[ end trace 191939e9a8a2f9b1 ]--- [ 38.446640][ T594] ================================================================== [ 38.454724][ T594] BUG: KASAN: null-ptr-deref in _raw_spin_lock+0x5f/0x170 [ 38.461822][ T594] Write of size 4 at addr 0000000000000088 by task syz-executor.1/594 [ 38.470132][ T594] [ 38.472512][ T594] CPU: 0 PID: 594 Comm: syz-executor.1 Tainted: G W 5.4.161-syzkaller-00025-g961dd91cc692 #0 18:24:52 executing program 3: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x7fffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x0, 0x0, 0xffffffffffffff49) recvmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000280)=""/219, 0xdb}, {&(0x7f0000000380)=""/206, 0xce}, {&(0x7f0000000540)=""/152, 0x98}], 0x4, &(0x7f0000000480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}, 0x40000040) 18:24:52 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @volatile={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x7400, [{0x0, 0x2, 0x4}]}]}}, &(0x7f0000000040)=""/211, 0x4a, 0xd3, 0x8}, 0x20) 18:24:52 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000000)=0x5, 0x4) splice(r0, 0x0, r2, 0x0, 0x6cc253fb, 0x0) close(r3) 18:24:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005080)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="17", 0xffe2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000001940)="05", 0xfffffffffffffd89}], 0x1}}], 0x4000000000000ea, 0xc000) 18:24:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 18:24:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005080)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="17", 0xffe2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000001940)="05", 0xfffffffffffffd89}], 0x1}}], 0x4000000000000ea, 0xc000) [ 38.483942][ T594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.493985][ T594] Call Trace: [ 38.497318][ T594] dump_stack+0x18e/0x1de [ 38.501644][ T594] __kasan_report+0x178/0x260 [ 38.508059][ T594] ? _raw_spin_lock+0x5f/0x170 [ 38.512846][ T594] kasan_report+0x30/0x60 [ 38.517401][ T594] check_memory_region+0x2a5/0x2e0 [ 38.522593][ T594] _raw_spin_lock+0x5f/0x170 [ 38.527262][ T594] d_delete+0x46/0x100 18:24:52 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @volatile={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x7400, [{0x0, 0x2, 0x4}]}]}}, &(0x7f0000000040)=""/211, 0x4a, 0xd3, 0x8}, 0x20) 18:24:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005080)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="17", 0xffe2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000001940)="05", 0xfffffffffffffd89}], 0x1}}], 0x4000000000000ea, 0xc000) [ 38.531326][ T594] vfs_rmdir+0x1c9/0x3e0 [ 38.535821][ T594] incfs_kill_sb+0x9b/0xe0 [ 38.540230][ T594] deactivate_locked_super+0xaf/0x100 [ 38.545860][ T594] deactivate_super+0x168/0x210 [ 38.550794][ T594] cleanup_mnt+0x432/0x4e0 [ 38.555225][ T594] task_work_run+0x186/0x1b0 [ 38.559821][ T594] prepare_exit_to_usermode+0x2b0/0x310 [ 38.565483][ T594] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 38.571386][ T594] RIP: 0033:0x7f6d3f6d0049 [ 38.573458][ T617] incfs: ino conflict with backing FS 3 [ 38.575824][ T594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 38.575829][ T594] RSP: 002b:00007f6d3e846168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 38.575839][ T594] RAX: 0000000000000000 RBX: 00007f6d3f7e2f60 RCX: 00007f6d3f6d0049 [ 38.575843][ T594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 38.575848][ T594] RBP: 00007f6d3f72a08d R08: 0000000000000000 R09: 0000000000000000 [ 38.575860][ T594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.641940][ T594] R13: 00007fffb83c212f R14: 00007f6d3e846300 R15: 0000000000022000 [ 38.650507][ T594] ================================================================== [ 38.658701][ T594] Disabling lock debugging due to kernel taint [ 38.665343][ T594] BUG: kernel NULL pointer dereference, address: 0000000000000088 [ 38.673132][ T594] #PF: supervisor write access in kernel mode [ 38.679306][ T594] #PF: error_code(0x0002) - not-present page [ 38.685330][ T594] PGD 1dd6df067 P4D 1dd6df067 PUD 1e0caa067 PMD 0 [ 38.692525][ T594] Oops: 0002 [#1] PREEMPT SMP KASAN [ 38.697716][ T594] CPU: 0 PID: 594 Comm: syz-executor.1 Tainted: G B W 5.4.161-syzkaller-00025-g961dd91cc692 #0 [ 38.709280][ T594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.719685][ T594] RIP: 0010:_raw_spin_lock+0x82/0x170 [ 38.725047][ T594] Code: 00 00 e8 21 6e 69 fd 48 89 df be 04 00 00 00 e8 14 6e 69 fd 42 8a 44 35 00 84 c0 0f 85 a0 00 00 00 8b 44 24 04 b9 01 00 00 00 41 0f b1 0c 24 75 21 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 [ 38.746546][ T594] RSP: 0018:ffff8881dc8c7d10 EFLAGS: 00010246 [ 38.752607][ T594] RAX: 0000000000000000 RBX: ffff8881dc8c7d14 RCX: 0000000000000001 [ 38.760604][ T594] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8881dc8c7d14 [ 38.768576][ T594] RBP: 1ffff1103b918fa2 R08: dffffc0000000000 R09: ffffed103b918fa3 [ 38.776540][ T594] R10: ffffed103b918fa3 R11: 0000000000000000 R12: 0000000000000088 [ 38.784941][ T594] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000200108 [ 38.792937][ T594] FS: 00007f6d3e846700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.801859][ T594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.808882][ T594] CR2: 0000000000000088 CR3: 00000001dbef0000 CR4: 00000000003406f0 [ 38.816850][ T594] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.824817][ T594] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.832778][ T594] Call Trace: [ 38.836061][ T594] d_delete+0x46/0x100 [ 38.840126][ T594] vfs_rmdir+0x1c9/0x3e0 [ 38.844362][ T594] incfs_kill_sb+0x9b/0xe0 [ 38.848955][ T594] deactivate_locked_super+0xaf/0x100 [ 38.854309][ T594] deactivate_super+0x168/0x210 [ 38.859138][ T594] cleanup_mnt+0x432/0x4e0 [ 38.863526][ T594] task_work_run+0x186/0x1b0 [ 38.868384][ T594] prepare_exit_to_usermode+0x2b0/0x310 [ 38.873903][ T594] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 38.879764][ T594] RIP: 0033:0x7f6d3f6d0049 [ 38.884167][ T594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 38.903843][ T594] RSP: 002b:00007f6d3e846168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 38.912248][ T594] RAX: 0000000000000000 RBX: 00007f6d3f7e2f60 RCX: 00007f6d3f6d0049 [ 38.920315][ T594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 38.928272][ T594] RBP: 00007f6d3f72a08d R08: 0000000000000000 R09: 0000000000000000 [ 38.936226][ T594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.944170][ T594] R13: 00007fffb83c212f R14: 00007f6d3e846300 R15: 0000000000022000 [ 38.952204][ T594] Modules linked in: [ 38.956075][ T594] CR2: 0000000000000088 [ 38.960204][ T594] ---[ end trace 191939e9a8a2f9b2 ]--- [ 38.965719][ T594] RIP: 0010:_raw_spin_lock+0x82/0x170 [ 38.971065][ T594] Code: 00 00 e8 21 6e 69 fd 48 89 df be 04 00 00 00 e8 14 6e 69 fd 42 8a 44 35 00 84 c0 0f 85 a0 00 00 00 8b 44 24 04 b9 01 00 00 00 41 0f b1 0c 24 75 21 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 [ 38.990659][ T594] RSP: 0018:ffff8881dc8c7d10 EFLAGS: 00010246 [ 38.996706][ T594] RAX: 0000000000000000 RBX: ffff8881dc8c7d14 RCX: 0000000000000001 [ 39.004671][ T594] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8881dc8c7d14 [ 39.012622][ T594] RBP: 1ffff1103b918fa2 R08: dffffc0000000000 R09: ffffed103b918fa3 [ 39.021106][ T594] R10: ffffed103b918fa3 R11: 0000000000000000 R12: 0000000000000088 [ 39.029154][ T594] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000200108 [ 39.037196][ T594] FS: 00007f6d3e846700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 39.046377][ T594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.052950][ T594] CR2: 0000000000000088 CR3: 00000001dbef0000 CR4: 00000000003406f0 [ 39.060918][ T594] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.068864][ T594] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.076827][ T594] Kernel panic - not syncing: Fatal exception [ 39.088057][ T594] Kernel Offset: disabled [ 39.092365][ T594] Rebooting in 86400 seconds..