last executing test programs: 2.253648963s ago: executing program 0 (id=28304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) 2.09845053s ago: executing program 0 (id=28310): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 1.812028532s ago: executing program 3 (id=28325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.791076383s ago: executing program 0 (id=28327): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) r4 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 1.780126674s ago: executing program 3 (id=28329): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = getpid() getpriority(0x2, r5) 1.738328275s ago: executing program 0 (id=28330): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r2, @ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0xa) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, r5, 0x0) 1.738020925s ago: executing program 3 (id=28331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) 1.685791718s ago: executing program 3 (id=28333): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000580)=""/174, 0xae) 1.685459598s ago: executing program 0 (id=28334): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r6, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='/dev/loop-control\x00', &(0x7f0000000240)='\x00', 0x0) tee(r5, r8, 0x53, 0x0) write$binfmt_script(r8, &(0x7f0000000800)={'#! ', './file0'}, 0xb) tee(r7, r6, 0x9, 0x8) 1.528134784s ago: executing program 1 (id=28341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x884) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 1.177909389s ago: executing program 1 (id=28343): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x181c800, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',w']) 1.177445209s ago: executing program 1 (id=28344): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000060006"], 0x4c}}, 0x0) 979.950258ms ago: executing program 4 (id=28353): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x1) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) 954.561729ms ago: executing program 4 (id=28354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 930.26994ms ago: executing program 4 (id=28355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) 910.154051ms ago: executing program 1 (id=28356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair(0x2, 0xa, 0x0, &(0x7f0000000080)) 885.875462ms ago: executing program 1 (id=28357): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 829.666594ms ago: executing program 1 (id=28360): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="f0", 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4044081) r4 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r4, 0x0, 0x0) 817.224785ms ago: executing program 4 (id=28361): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 793.660026ms ago: executing program 4 (id=28363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 709.7601ms ago: executing program 3 (id=28364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) 698.49414ms ago: executing program 0 (id=28365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) readv(r4, 0x0, 0x0) 664.756381ms ago: executing program 4 (id=28366): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r5 = syz_clone(0x26000, 0x0, 0x1e, 0x0, 0x0, 0x0) syz_open_procfs(r5, 0x0) 664.321331ms ago: executing program 3 (id=28367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0) 306.666927ms ago: executing program 2 (id=28373): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x300, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 270.159538ms ago: executing program 2 (id=28374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x5c, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) 235.27643ms ago: executing program 2 (id=28375): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 203.036651ms ago: executing program 2 (id=28376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) 324.38µs ago: executing program 2 (id=28377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$P9_RMKNOD(r2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet(r4, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x488d5) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB=',']) 0s ago: executing program 2 (id=28378): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x181c800, &(0x7f0000000440)=ANY=[@ANYBLOB='tra', @ANYRESHEX, @ANYBLOB=',w']) kernel console output (not intermixed with test programs): e=0x7ffc0000 [ 467.082675][T32716] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 467.100412][ T28] audit: type=1326 audit(1763588357.133:113368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32701 comm="syz.0.14618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 467.130696][T32716] overlayfs: missing 'lowerdir' [ 467.137175][ T28] audit: type=1326 audit(1763588357.133:113369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32701 comm="syz.0.14618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 467.161725][ T28] audit: type=1326 audit(1763588357.133:113370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32701 comm="syz.0.14618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 467.211278][ T28] audit: type=1326 audit(1763588357.133:113371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32701 comm="syz.0.14618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 467.257966][ T28] audit: type=1326 audit(1763588357.133:113372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32701 comm="syz.0.14618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 467.318155][ T28] audit: type=1326 audit(1763588357.133:113373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32701 comm="syz.0.14618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 467.354903][ T28] audit: type=1326 audit(1763588357.133:113374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32701 comm="syz.0.14618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 467.403635][ T28] audit: type=1326 audit(1763588357.133:113375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32701 comm="syz.0.14618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 467.455623][ T28] audit: type=1326 audit(1763588357.133:113376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32701 comm="syz.0.14618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 467.810583][ T39] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 467.897808][ T341] fuse: Bad value for 'fd' [ 467.940992][ T349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14665'. [ 467.990575][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 467.997335][ T39] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.010524][ T39] usb 3-1: config 0 has no interfaces? [ 468.022367][ T39] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 468.040576][ T39] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 468.048741][ T39] usb 3-1: Product: syz [ 468.053228][ T39] usb 3-1: Manufacturer: syz [ 468.057858][ T39] usb 3-1: SerialNumber: syz [ 468.070653][ T39] usb 3-1: config 0 descriptor?? [ 468.143305][ T377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14678'. [ 468.229994][ T390] 9pnet_fd: Insufficient options for proto=fd [ 468.277553][ T19] usb 3-1: USB disconnect, device number 13 [ 468.579068][ T403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14690'. [ 468.901612][ T424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14700'. [ 468.928021][ T427] 9pnet_fd: Insufficient options for proto=fd [ 468.949260][ T429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14702'. [ 469.373876][ T469] loop2: detected capacity change from 0 to 512 [ 469.423982][ T469] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 469.439559][ T469] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.14720: invalid indirect mapped block 2683928664 (level 1) [ 469.483648][ T469] EXT4-fs (loop2): Remounting filesystem read-only [ 469.503730][ T469] EXT4-fs (loop2): 1 truncate cleaned up [ 469.521539][ T469] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 469.566482][ T469] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.14720: Invalid block bitmap block 3 in block_group 0 [ 469.598725][ T469] EXT4-fs (loop2): Remounting filesystem read-only [ 469.611984][ T469] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 469.621103][ T469] EXT4-fs (loop2): Remounting filesystem read-only [ 469.640831][ T469] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.14720: invalid indirect mapped block 4294967295 (level 0) [ 469.670494][ T469] EXT4-fs (loop2): Remounting filesystem read-only [ 469.683671][ T469] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.14720: invalid indirect mapped block 65536 (level 1) [ 469.712719][ T469] EXT4-fs (loop2): Remounting filesystem read-only [ 469.740542][ T285] EXT4-fs (loop2): unmounting filesystem. [ 470.028135][ T495] __nla_validate_parse: 1 callbacks suppressed [ 470.028160][ T495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14732'. [ 470.080307][ T19] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 470.166148][ T518] netlink: 388 bytes leftover after parsing attributes in process `syz.4.14743'. [ 470.222522][ T524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14746'. [ 470.260316][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 470.273457][ T19] usb 3-1: unable to get BOS descriptor or descriptor too short [ 470.290797][ T19] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 470.298397][ T19] usb 3-1: can't read configurations, error -71 [ 471.682388][ T573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14762'. [ 472.112141][ T602] loop2: detected capacity change from 0 to 512 [ 472.176984][ T602] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 472.190712][ T602] ext4 filesystem being mounted at /2952/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 472.217419][ T285] EXT4-fs (loop2): unmounting filesystem. [ 472.606212][ T646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14797'. [ 472.699238][ T653] fuse: Bad value for 'fd' [ 473.075094][ T673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14809'. [ 473.149141][ T675] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 473.310253][ T687] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14817'. [ 473.334561][ T687] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14817'. [ 473.870922][ T749] TCP: TCP_TX_DELAY enabled [ 474.034030][ T769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14852'. [ 474.079050][ T777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14856'. [ 474.157156][ T790] 9p: Unknown access argument a: -22 [ 474.522556][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 474.522576][ T28] audit: type=1326 audit(1763588364.604:113399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=855 comm="syz.2.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 474.704513][ T28] audit: type=1326 audit(1763588364.644:113400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=855 comm="syz.2.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 474.774030][ T28] audit: type=1326 audit(1763588364.644:113401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=855 comm="syz.2.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 474.798305][ T28] audit: type=1326 audit(1763588364.644:113402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=855 comm="syz.2.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 474.823896][ T28] audit: type=1326 audit(1763588364.644:113403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=855 comm="syz.2.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 474.850552][ T28] audit: type=1326 audit(1763588364.644:113404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=855 comm="syz.2.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 474.875100][ T28] audit: type=1326 audit(1763588364.644:113405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=855 comm="syz.2.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 474.900092][ T28] audit: type=1326 audit(1763588364.644:113406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=855 comm="syz.2.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 474.925459][ T28] audit: type=1326 audit(1763588364.644:113407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=855 comm="syz.2.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 474.949688][ T28] audit: type=1326 audit(1763588364.644:113408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=855 comm="syz.2.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 475.232200][ T884] incfs: Backing dir is not set, filesystem can't be mounted. [ 475.240668][ T884] incfs: mount failed -2 [ 475.332624][ T891] __nla_validate_parse: 6 callbacks suppressed [ 475.332647][ T891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14909'. [ 475.680542][ T931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14926'. [ 476.038770][ T972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14945'. [ 476.407010][ T1000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14957'. [ 476.828415][ T1034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14973'. [ 477.407547][ T1048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14978'. [ 478.830716][ T1109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15003'. [ 479.512165][ T1139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15016'. [ 479.700126][ T1156] netlink: 'syz.4.15024': attribute type 4 has an invalid length. [ 479.709420][ T1156] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.15024'. [ 479.848131][ T1165] loop2: detected capacity change from 0 to 2048 [ 479.915118][ T1165] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 479.991602][ T285] EXT4-fs (loop2): unmounting filesystem. [ 480.778346][ T1206] fuse: Unknown parameter '0xffffffffffffffff' [ 484.225477][ T1298] fuse: Unknown parameter 'fd0x0000000000000005' [ 484.317071][ T1309] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15082'. [ 484.332230][ T1310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1310 comm=syz.4.15083 [ 484.409617][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 484.424457][ T1327] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 484.433918][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 484.508956][T27934] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 484.509098][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 484.516812][T27934] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 484.578358][T27934] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 484.603659][T27934] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 484.626414][ T1339] netlink: 'syz.2.15095': attribute type 8 has an invalid length. [ 484.634482][ T1339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15095'. [ 484.644402][T27934] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 484.652568][T27934] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 484.678703][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 484.942687][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 484.942705][ T28] audit: type=1326 audit(1763588375.025:113436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.4.15108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 485.039761][ T28] audit: type=1326 audit(1763588375.025:113437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.4.15108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 485.186965][ T28] audit: type=1326 audit(1763588375.025:113438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.4.15108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 485.457892][ T28] audit: type=1326 audit(1763588375.025:113439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.4.15108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 485.498560][ T28] audit: type=1326 audit(1763588375.025:113440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.4.15108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 485.584308][ T28] audit: type=1326 audit(1763588375.025:113441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.4.15108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 485.688416][ T28] audit: type=1326 audit(1763588375.025:113442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.4.15108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 485.819025][ T28] audit: type=1326 audit(1763588375.025:113443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.4.15108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 487.565943][ T28] audit: type=1326 audit(1763588375.025:113444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.4.15108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 487.591593][ T28] audit: type=1326 audit(1763588375.025:113445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.4.15108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 491.780975][ T1516] 9pnet_fd: p9_fd_create_tcp (1516): problem connecting socket to 127.0.0.1 [ 493.850764][ T1582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15201'. [ 497.007255][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 497.578684][ T1671] loop2: detected capacity change from 0 to 256 [ 497.590267][ T1671] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 497.600973][ T1671] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 497.624703][ T1671] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x44ede5da, utbl_chksum : 0xe619d30d) [ 498.641003][ T1694] netlink: 84 bytes leftover after parsing attributes in process `syz.2.15246'. [ 499.327141][ T1705] netlink: 'syz.4.15250': attribute type 8 has an invalid length. [ 499.335097][ T1705] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15250'. [ 499.533281][ T1721] overlayfs: unrecognized mount option "appraise" or missing value [ 500.120886][ T1729] netlink: 'syz.1.15262': attribute type 8 has an invalid length. [ 500.129207][ T1729] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15262'. [ 500.156152][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 500.156169][ T28] audit: type=1400 audit(1763588390.237:113492): avc: denied { bind } for pid=1730 comm="syz.1.15263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 500.483557][ T1767] netlink: 'syz.2.15281': attribute type 8 has an invalid length. [ 500.493733][ T1767] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15281'. [ 500.977503][ T19] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 501.166620][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 501.181822][ T19] usb 3-1: unable to get BOS descriptor or descriptor too short [ 501.193256][ T19] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 501.209148][ T19] usb 3-1: can't read configurations, error -71 [ 501.388412][ T28] audit: type=1326 audit(1763588391.477:113493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1832 comm="syz.1.15312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae18f749 code=0x7ffc0000 [ 501.427475][ T28] audit: type=1326 audit(1763588391.477:113494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1832 comm="syz.1.15312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae18f749 code=0x7ffc0000 [ 501.453485][ T28] audit: type=1326 audit(1763588391.477:113495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1832 comm="syz.1.15312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9dae18f749 code=0x7ffc0000 [ 501.478985][ T28] audit: type=1326 audit(1763588391.477:113496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1832 comm="syz.1.15312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae18f749 code=0x7ffc0000 [ 501.502998][ T28] audit: type=1326 audit(1763588391.477:113497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1832 comm="syz.1.15312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae18f749 code=0x7ffc0000 [ 501.527786][ T1846] netlink: 'syz.1.15317': attribute type 4 has an invalid length. [ 501.534869][ T28] audit: type=1326 audit(1763588391.477:113498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1832 comm="syz.1.15312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9dae18f749 code=0x7ffc0000 [ 501.535636][ T1846] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.15317'. [ 501.569092][ T28] audit: type=1326 audit(1763588391.477:113499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1832 comm="syz.1.15312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae18f749 code=0x7ffc0000 [ 501.593428][ T28] audit: type=1326 audit(1763588391.477:113500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1832 comm="syz.1.15312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae18f749 code=0x7ffc0000 [ 501.634767][ T28] audit: type=1326 audit(1763588391.477:113501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1832 comm="syz.1.15312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9dae18f749 code=0x7ffc0000 [ 502.476444][ T19] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 502.676419][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 502.684746][ T19] usb 3-1: unable to get BOS descriptor or descriptor too short [ 502.709541][ T19] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 502.721827][ T19] usb 3-1: can't read configurations, error -71 [ 502.736503][ T19] usb usb3-port1: attempt power cycle [ 503.293582][ T1961] 9pnet_fd: Insufficient options for proto=fd [ 504.196758][ T1995] 9pnet_fd: Insufficient options for proto=fd [ 504.374046][ T2021] 9pnet_fd: Insufficient options for proto=fd [ 504.902226][ T2052] 9pnet_fd: Insufficient options for proto=fd [ 505.072033][ T2071] netlink: 'syz.0.15418': attribute type 4 has an invalid length. [ 505.080127][ T2071] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.15418'. [ 505.109203][ T2077] incfs: Backing dir is not set, filesystem can't be mounted. [ 505.116981][ T2077] incfs: mount failed -2 [ 505.139374][ T2080] 9pnet_fd: Insufficient options for proto=fd [ 505.141240][ T2081] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15423'. [ 505.227614][ T2095] netlink: 'syz.1.15430': attribute type 4 has an invalid length. [ 505.235639][ T2095] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.15430'. [ 505.314464][ T2102] 9pnet_fd: Insufficient options for proto=fd [ 505.391094][ T2119] netlink: 'syz.0.15442': attribute type 4 has an invalid length. [ 505.401043][ T2119] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.15442'. [ 506.023898][ T2182] netlink: 'syz.0.15472': attribute type 4 has an invalid length. [ 506.031863][ T2182] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.15472'. [ 506.111134][ T2200] netlink: 'syz.2.15478': attribute type 8 has an invalid length. [ 506.119405][ T2200] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15478'. [ 507.571364][ T2364] netlink: 'syz.4.15553': attribute type 8 has an invalid length. [ 507.580236][ T2364] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15553'. [ 507.720875][ T2381] netlink: 'syz.0.15562': attribute type 4 has an invalid length. [ 507.729546][ T2381] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.15562'. [ 507.792777][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 507.792796][ T28] audit: type=1326 audit(1763588397.878:113571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.0.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 507.852582][ T28] audit: type=1326 audit(1763588397.878:113572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.0.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 507.899558][ T28] audit: type=1326 audit(1763588397.878:113573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.0.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 507.925283][ T28] audit: type=1326 audit(1763588397.878:113574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.0.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 507.976820][ T28] audit: type=1326 audit(1763588397.878:113575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.0.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 508.031259][ T28] audit: type=1326 audit(1763588397.878:113576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.0.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 508.080107][ T28] audit: type=1326 audit(1763588397.878:113577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.0.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 508.129941][ T28] audit: type=1326 audit(1763588397.878:113578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.0.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 508.189297][ T28] audit: type=1326 audit(1763588397.878:113579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.0.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 508.251781][ T28] audit: type=1326 audit(1763588397.878:113580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.0.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 509.177394][ T2531] netlink: 'syz.2.15631': attribute type 8 has an invalid length. [ 509.207727][ T2531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15631'. [ 509.309558][ T2548] netlink: 'syz.2.15638': attribute type 4 has an invalid length. [ 510.312936][ T2629] netlink: 'syz.2.15674': attribute type 8 has an invalid length. [ 510.322891][ T2629] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15674'. [ 510.370918][ T2639] netlink: 'syz.1.15679': attribute type 4 has an invalid length. [ 510.391789][ T2639] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.15679'. [ 510.830063][ T2675] netlink: 'syz.1.15696': attribute type 4 has an invalid length. [ 510.838370][ T2675] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.15696'. [ 510.883137][ T2677] incfs: Backing dir is not set, filesystem can't be mounted. [ 510.901096][ T2677] incfs: mount failed -2 [ 511.289810][ T2700] netlink: 'syz.0.15708': attribute type 4 has an invalid length. [ 511.299166][ T2700] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.15708'. [ 511.448359][ T2734] netlink: 'syz.2.15724': attribute type 4 has an invalid length. [ 511.462698][ T2734] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.15724'. [ 511.651267][ T2765] netlink: 'syz.1.15738': attribute type 4 has an invalid length. [ 511.659234][ T2765] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.15738'. [ 511.786460][ T2795] netlink: 'syz.4.15751': attribute type 4 has an invalid length. [ 511.797116][ T2795] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.15751'. [ 511.942431][ T2829] netlink: 'syz.4.15768': attribute type 4 has an invalid length. [ 511.955322][ T2829] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.15768'. [ 512.120436][ T2856] netlink: 'syz.0.15780': attribute type 4 has an invalid length. [ 512.128469][ T2856] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.15780'. [ 512.304464][ T2879] netlink: 'syz.0.15791': attribute type 4 has an invalid length. [ 512.317854][ T2879] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.15791'. [ 514.245963][ T3076] loop2: detected capacity change from 0 to 1024 [ 514.273999][ T3076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 514.297966][ T3076] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 514.335288][ T3076] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 514.372809][ T285] EXT4-fs (loop2): unmounting filesystem. [ 514.745050][ T39] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 514.945031][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 514.960301][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 514.978028][ T39] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 515.018114][ T39] usb 3-1: can't read configurations, error -71 [ 517.101856][ T3198] devpts: called with bogus options [ 517.872616][ T3223] __nla_validate_parse: 8 callbacks suppressed [ 517.872798][ T3223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15946'. [ 518.787230][ T3290] netlink: 2 bytes leftover after parsing attributes in process `syz.3.15977'. [ 518.799159][ T3289] cgroup: Setting release_agent not allowed [ 518.933369][ T3295] 9pnet_fd: Insufficient options for proto=fd [ 519.591320][ T3327] netlink: 2 bytes leftover after parsing attributes in process `syz.3.15991'. [ 520.122878][ T3390] fuse: Bad value for 'fd' [ 520.324040][ T3417] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16032'. [ 521.495265][ T3515] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16075'. [ 522.715366][ T3606] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16114'. [ 522.843052][ T3622] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16121'. [ 524.256574][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 524.256592][ T28] audit: type=1400 audit(1763588414.350:113629): avc: denied { read } for pid=3674 comm="syz.4.16147" name="file0" dev="tmpfs" ino=18739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 524.507954][ T3707] loop2: detected capacity change from 0 to 512 [ 524.559981][ T3707] EXT4-fs: Ignoring removed mblk_io_submit option [ 524.618042][ T3707] EXT4-fs: Ignoring removed oldalloc option [ 524.666589][ T3707] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 524.753049][ T3707] EXT4-fs (loop2): failed to initialize system zone (-117) [ 524.791529][ T3707] EXT4-fs (loop2): mount failed [ 525.071995][ T3723] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3723 comm=syz.2.16166 [ 525.984738][ T3749] cgroup: Setting release_agent not allowed [ 526.652272][ T3784] 9pnet: Unknown protocol version 9 [ 527.241246][ T3853] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16226'. [ 527.349445][ T3866] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16233'. [ 527.471708][ T3868] syz.3.16232[3868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.471794][ T3868] syz.3.16232[3868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.613503][ T3897] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16246'. [ 527.967202][ T3935] 9pnet: Could not find request transport: 0xffffffffffffffff [ 528.597943][ T4004] validate_nla: 6 callbacks suppressed [ 528.598033][ T4004] netlink: 'syz.2.16295': attribute type 4 has an invalid length. [ 528.611944][ T4004] netlink: 'syz.2.16295': attribute type 5 has an invalid length. [ 528.619969][ T4004] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.16295'. [ 528.658990][ T4011] netlink: 'syz.3.16299': attribute type 19 has an invalid length. [ 529.198629][ T4061] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16322'. [ 530.196708][ T4099] netlink: 68 bytes leftover after parsing attributes in process `syz.2.16341'. [ 530.928054][ T4125] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16353'. [ 531.183160][ T4146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16363'. [ 532.860710][ T4236] cgroup: Setting release_agent not allowed [ 534.091958][ T4289] cgroup: Setting release_agent not allowed [ 534.274470][ T4303] syz.3.16423[4303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 534.274850][ T4303] syz.3.16423[4303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 535.571450][ T4326] cgroup: Setting release_agent not allowed [ 536.662764][ T4344] cgroup: Setting release_agent not allowed [ 536.753916][ T4356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16451'. [ 536.807285][ T4359] cgroup: Setting release_agent not allowed [ 537.018046][ T4376] cgroup: Setting release_agent not allowed [ 537.112942][ T4388] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16465'. [ 537.562271][ T4407] loop2: detected capacity change from 0 to 1024 [ 537.571157][ T4407] ext4: Unknown parameter 'nouser_xattr' [ 538.524671][ T3518] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 540.294244][ T4514] cgroup: Setting release_agent not allowed [ 540.803921][ T4532] cgroup: Setting release_agent not allowed [ 541.068508][ T4553] 9pnet_fd: Insufficient options for proto=fd [ 541.514953][ T4576] cgroup: Setting release_agent not allowed [ 542.977959][ T4640] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16576'. [ 543.031207][ T4642] cgroup: Setting release_agent not allowed [ 543.055392][ T4648] 9pnet_fd: Insufficient options for proto=fd [ 545.321825][ T4685] 9pnet_fd: Insufficient options for proto=fd [ 545.696424][ T4705] cgroup: Setting release_agent not allowed [ 545.857919][ T4719] cgroup: Setting release_agent not allowed [ 547.211114][ T4788] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16639'. [ 548.191131][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 548.191131][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 551.229910][ T4895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4895 comm=syz.4.16682 [ 551.243581][ T4898] No source specified [ 551.316123][ T28] audit: type=1326 audit(1763588441.413:113630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.3.16684" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49d6b8f749 code=0x0 [ 552.444670][ T4982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4982 comm=syz.2.16720 [ 552.967921][ T5053] overlayfs: missing 'lowerdir' [ 553.087364][ T5069] netlink: 836 bytes leftover after parsing attributes in process `syz.4.16761'. [ 553.722162][ T5098] 9pnet: Could not find request transport: 0xffffffffffffffff [ 554.751110][ T5139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16792'. [ 554.760979][ T5139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16792'. [ 555.668415][ T5154] cgroup: Setting release_agent not allowed [ 555.672299][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 555.689527][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 555.718021][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 555.780835][ T5007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 555.860381][ T5007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 558.429918][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 559.344146][ T5290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5290 comm=syz.4.16854 [ 560.010176][ T28] audit: type=1326 audit(1763588450.104:113631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 560.044191][ T28] audit: type=1326 audit(1763588450.124:113632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 560.163738][ T28] audit: type=1326 audit(1763588450.124:113633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 560.336836][ T28] audit: type=1326 audit(1763588450.124:113634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 560.438982][ T28] audit: type=1326 audit(1763588450.124:113635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 560.569797][ T28] audit: type=1326 audit(1763588450.124:113636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 560.650048][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16905'. [ 560.704786][ T28] audit: type=1326 audit(1763588450.124:113637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 560.839587][ T28] audit: type=1326 audit(1763588450.124:113638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 560.932371][ T28] audit: type=1326 audit(1763588450.124:113639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 561.289742][ T28] audit: type=1326 audit(1763588450.124:113640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 563.455677][ T5472] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16935'. [ 563.549414][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 566.107610][ T5566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16975'. [ 566.583493][ T5607] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16994'. [ 566.976513][ T5664] netlink: 2 bytes leftover after parsing attributes in process `syz.1.17007'. [ 568.202984][ T5680] netem: change failed [ 568.892810][ T5813] netem: change failed [ 569.149773][ T5866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17117'. [ 569.523592][ T5939] netlink: 'syz.2.17151': attribute type 8 has an invalid length. [ 569.542062][ T5939] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17151'. [ 569.649638][ T5960] incfs: Backing dir is not set, filesystem can't be mounted. [ 569.657201][ T5960] incfs: mount failed -2 [ 569.812955][ T5975] 9pnet_fd: Insufficient options for proto=fd [ 569.880780][ T5985] netlink: 'syz.0.17172': attribute type 4 has an invalid length. [ 569.898918][ T5985] netlink: 'syz.0.17172': attribute type 5 has an invalid length. [ 569.914460][ T5985] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.17172'. [ 570.022106][ T6003] 9pnet_fd: Insufficient options for proto=fd [ 570.071412][ T6008] loop2: detected capacity change from 0 to 256 [ 570.086956][ T6008] FAT-fs (loop2): Directory bread(block 64) failed [ 570.102941][ T6008] FAT-fs (loop2): Directory bread(block 65) failed [ 570.109960][ T6008] FAT-fs (loop2): Directory bread(block 66) failed [ 570.116513][ T6008] FAT-fs (loop2): Directory bread(block 67) failed [ 570.123391][ T6008] FAT-fs (loop2): Directory bread(block 68) failed [ 570.130596][ T6008] FAT-fs (loop2): Directory bread(block 69) failed [ 570.137691][ T6008] FAT-fs (loop2): Directory bread(block 70) failed [ 570.145279][ T6008] FAT-fs (loop2): Directory bread(block 71) failed [ 570.152094][ T6008] FAT-fs (loop2): Directory bread(block 72) failed [ 570.158822][ T6008] FAT-fs (loop2): Directory bread(block 73) failed [ 570.174399][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 570.174415][ T28] audit: type=1400 audit(1763588460.265:113666): avc: denied { mount } for pid=6006 comm="syz.2.17184" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 570.228575][ T28] audit: type=1400 audit(1763588460.315:113667): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 570.238671][T10528] kworker/u4:249: attempt to access beyond end of device [ 570.238671][T10528] loop2: rw=1, sector=1800, nr_sectors = 76 limit=256 [ 570.305159][ T6025] 9pnet_fd: Insufficient options for proto=fd [ 570.800358][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17221'. [ 570.992760][ T6106] loop2: detected capacity change from 0 to 512 [ 571.001766][ T6106] EXT4-fs: Ignoring removed i_version option [ 571.009653][ T6106] EXT4-fs: Ignoring removed bh option [ 571.039862][ T6106] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 571.050324][ T6106] ext4 filesystem being mounted at /3427/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 571.107898][ T285] EXT4-fs (loop2): unmounting filesystem. [ 571.266145][ T28] audit: type=1326 audit(1763588461.355:113668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6152 comm="syz.3.17250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49d6b8f749 code=0x0 [ 572.030136][ T6253] netlink: 393 bytes leftover after parsing attributes in process `syz.4.17294'. [ 572.075597][ T6257] 9pnet_fd: Insufficient options for proto=fd [ 572.162432][ T6272] netlink: 536 bytes leftover after parsing attributes in process `syz.4.17305'. [ 572.173201][ T6272] netlink: 124 bytes leftover after parsing attributes in process `syz.4.17305'. [ 572.244640][ T6282] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17309'. [ 572.260227][ T6282] netlink: 48 bytes leftover after parsing attributes in process `syz.4.17309'. [ 572.275057][ T6284] 9pnet_fd: Insufficient options for proto=fd [ 572.334725][ T6293] incfs: Backing dir is not set, filesystem can't be mounted. [ 572.342981][ T6293] incfs: mount failed -2 [ 572.979456][ T6326] incfs: Backing dir is not set, filesystem can't be mounted. [ 572.999341][ T6326] incfs: mount failed -2 [ 573.150393][ T6343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17337'. [ 573.164917][ T6343] netlink: 180 bytes leftover after parsing attributes in process `syz.3.17337'. [ 576.134957][ T6495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17403'. [ 576.599299][ T6570] 9pnet: Unknown protocol version 9 [ 577.498557][ T6657] 9pnet_fd: Insufficient options for proto=fd [ 577.543120][ T6667] overlayfs: missing 'lowerdir' [ 579.309673][ T6729] device batadv_slave_1 entered promiscuous mode [ 579.341000][ T6727] device batadv_slave_1 left promiscuous mode [ 579.453586][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17528'. [ 579.464203][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17528'. [ 579.478785][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17528'. [ 579.521537][ T6770] 9pnet_fd: Insufficient options for proto=fd [ 579.684562][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17544'. [ 579.701385][ T6803] 9pnet_fd: Insufficient options for proto=fd [ 579.703900][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17544'. [ 579.736936][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17544'. [ 579.956616][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17561'. [ 579.970873][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17561'. [ 579.990527][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17561'. [ 580.448916][ T6850] 9pnet_fd: Insufficient options for proto=fd [ 580.508674][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17576'. [ 580.663703][ T6880] 9pnet_fd: Insufficient options for proto=fd [ 580.807917][ T6904] netem: change failed [ 581.135534][ T6939] 9pnet_fd: Insufficient options for proto=fd [ 581.626035][ T6964] 9pnet_fd: Insufficient options for proto=fd [ 582.001369][ T6990] 9pnet_fd: Insufficient options for proto=fd [ 582.058135][ T7003] netem: change failed [ 582.280619][ T7034] device batadv_slave_1 entered promiscuous mode [ 582.312649][ T7031] device batadv_slave_1 left promiscuous mode [ 582.372486][ T7047] 9pnet_fd: Insufficient options for proto=fd [ 582.472633][ T7066] device batadv_slave_1 entered promiscuous mode [ 582.479383][ T7065] device batadv_slave_1 left promiscuous mode [ 583.136249][ T7102] device batadv_slave_1 entered promiscuous mode [ 583.150053][ T7100] device batadv_slave_1 left promiscuous mode [ 583.191789][ T7106] 9pnet_fd: Insufficient options for proto=fd [ 583.704391][ T7127] device batadv_slave_1 entered promiscuous mode [ 583.711250][ T7126] device batadv_slave_1 left promiscuous mode [ 583.799292][ T7132] 9pnet_fd: Insufficient options for proto=fd [ 583.902965][ T7143] netlink: 'syz.0.17703': attribute type 4 has an invalid length. [ 583.914345][ T7143] netlink: 'syz.0.17703': attribute type 4 has an invalid length. [ 583.970325][ T7151] device batadv_slave_1 entered promiscuous mode [ 583.976050][ T7155] 9pnet_fd: Insufficient options for proto=fd [ 583.983786][ T7150] device batadv_slave_1 left promiscuous mode [ 584.194666][ T7180] 9pnet_fd: Insufficient options for proto=fd [ 585.420328][ T7212] xt_bpf: check failed: parse error [ 585.562076][ T7235] netem: change failed [ 585.911498][ T7283] fuse: Bad value for 'fd' [ 586.032630][ T7296] __nla_validate_parse: 15 callbacks suppressed [ 586.032652][ T7296] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17770'. [ 586.133786][ T7310] 9pnet_fd: Insufficient options for proto=fd [ 586.295740][ T7332] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17789'. [ 590.239961][ T7521] netlink: 'syz.4.17871': attribute type 4 has an invalid length. [ 590.424470][ T7518] netlink: 268 bytes leftover after parsing attributes in process `syz.3.17870'. [ 590.454692][ T7523] netlink: 'syz.4.17871': attribute type 4 has an invalid length. [ 591.537692][ T7548] netlink: 268 bytes leftover after parsing attributes in process `syz.1.17879'. [ 591.830449][ T7593] netlink: 388 bytes leftover after parsing attributes in process `syz.2.17904'. [ 592.670984][ T7636] netlink: 'syz.3.17915': attribute type 32 has an invalid length. [ 593.226619][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17938'. [ 593.277118][ T7675] netlink: 'syz.4.17941': attribute type 10 has an invalid length. [ 594.095399][ T7733] incfs: Error accessing: ./file0. [ 594.100708][ T7733] incfs: mount failed -20 [ 594.478147][ T7758] futex_wake_op: syz.3.17977 tries to shift op by -1; fix this program [ 594.522378][ T28] audit: type=1326 audit(1763588484.618:113669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.3.17977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 594.602974][ T28] audit: type=1326 audit(1763588484.618:113670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.3.17977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 594.677219][ T28] audit: type=1326 audit(1763588484.618:113671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.3.17977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 594.735484][ T28] audit: type=1326 audit(1763588484.618:113672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.3.17977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 594.795701][ T28] audit: type=1326 audit(1763588484.618:113673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.3.17977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 594.861076][ T28] audit: type=1326 audit(1763588484.628:113674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.3.17977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 594.911917][ T28] audit: type=1326 audit(1763588484.628:113675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.3.17977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49d6b865e7 code=0x7ffc0000 [ 594.975661][ T28] audit: type=1326 audit(1763588484.628:113676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.3.17977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49d6b2b829 code=0x7ffc0000 [ 595.044245][ T28] audit: type=1326 audit(1763588484.628:113677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.3.17977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 595.099009][ T28] audit: type=1326 audit(1763588484.638:113678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.3.17977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49d6b865e7 code=0x7ffc0000 [ 595.214928][ T7799] netem: change failed [ 595.272208][ T7804] cgroup: Invalid name [ 598.493017][ T7911] 9pnet_fd: Insufficient options for proto=fd [ 598.570628][ T7927] overlayfs: missing 'lowerdir' [ 598.694816][ T7942] device batadv_slave_1 entered promiscuous mode [ 598.715081][ T7940] device batadv_slave_1 left promiscuous mode [ 598.977058][ T7978] device batadv_slave_1 entered promiscuous mode [ 599.007382][ T7977] device batadv_slave_1 left promiscuous mode [ 599.024801][ T7982] netlink: 'syz.0.18079': attribute type 6 has an invalid length. [ 600.121078][ T8078] overlayfs: missing 'lowerdir' [ 602.510353][ T8175] netlink: 'syz.3.18170': attribute type 4 has an invalid length. [ 602.548188][ T8175] netlink: 'syz.3.18170': attribute type 4 has an invalid length. [ 602.593589][ T8188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18176'. [ 602.643642][ T28] kauditd_printk_skb: 116 callbacks suppressed [ 602.643661][ T28] audit: type=1400 audit(1763588492.739:113795): avc: denied { append } for pid=8195 comm="syz.2.18180" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 602.950776][ T8229] syz.3.18186[8229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 602.951130][ T8229] syz.3.18186[8229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.266138][ T8226] loop2: detected capacity change from 0 to 2048 [ 603.463197][ T8226] EXT4-fs: Ignoring removed bh option [ 604.082705][ T8226] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 604.104127][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18198'. [ 604.114202][ T285] EXT4-fs (loop2): unmounting filesystem. [ 604.257356][ T8264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18211'. [ 604.315353][ T8278] netlink: 96 bytes leftover after parsing attributes in process `syz.3.18218'. [ 604.480960][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18229'. [ 605.460782][ T8372] device batadv_slave_1 entered promiscuous mode [ 606.464927][ T8371] device batadv_slave_1 left promiscuous mode [ 606.598447][ T8395] netlink: 'syz.3.18274': attribute type 4 has an invalid length. [ 606.612594][ T8395] netlink: 'syz.3.18274': attribute type 5 has an invalid length. [ 606.621834][ T8395] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.18274'. [ 606.831004][ T8430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18291'. [ 606.967906][ T8450] loop2: detected capacity change from 0 to 128 [ 607.004789][ T8450] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 607.038197][ T8450] ext4 filesystem being mounted at /3659/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 607.041508][ T8455] netlink: 'syz.3.18303': attribute type 4 has an invalid length. [ 607.098880][ T8458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18304'. [ 607.335108][ T8484] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18316'. [ 607.805672][ T285] EXT4-fs (loop2): unmounting filesystem. [ 608.941473][ T8570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18355'. [ 609.091754][ T8598] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18369'. [ 609.327677][ T8622] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18381'. [ 609.362131][ T8625] tipc: Enabling of bearer rejected, media not registered [ 609.756751][ T8648] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18392'. [ 610.169269][ T8676] netlink: 'syz.2.18405': attribute type 16 has an invalid length. [ 610.187580][ T8676] netlink: 64130 bytes leftover after parsing attributes in process `syz.2.18405'. [ 612.145865][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18435'. [ 612.493818][ T8785] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18453'. [ 612.753846][ T8814] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18466'. [ 614.242788][ T8851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18484'. [ 614.282959][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18484'. [ 614.384505][ T8861] loop2: detected capacity change from 0 to 2048 [ 614.424429][ T8861] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 614.454265][ T285] EXT4-fs (loop2): unmounting filesystem. [ 614.770332][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18511'. [ 614.779800][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18511'. [ 614.894039][ T8922] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18516'. [ 614.932520][ T8927] netlink: 'syz.2.18518': attribute type 4 has an invalid length. [ 614.989241][ T8935] netlink: 'syz.2.18521': attribute type 4 has an invalid length. [ 615.954758][ T9006] netlink: 'syz.3.18552': attribute type 4 has an invalid length. [ 616.509093][ T9051] netlink: 'syz.0.18573': attribute type 4 has an invalid length. [ 616.632395][ T9080] netlink: 'syz.4.18586': attribute type 4 has an invalid length. [ 618.079261][ T9148] overlayfs: missing 'lowerdir' [ 618.153903][ T9145] netlink: 'syz.4.18611': attribute type 4 has an invalid length. [ 618.214224][ T9174] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18617'. [ 618.537035][ T9301] netlink: 112 bytes leftover after parsing attributes in process `syz.2.18649'. [ 618.728472][ T9330] loop2: detected capacity change from 0 to 1024 [ 618.739442][ T9330] ext4: Unknown parameter 'hash' [ 618.956582][ T9357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18675'. [ 619.279938][ T9396] netlink: 'syz.3.18693': attribute type 4 has an invalid length. [ 619.374943][ T9411] incfs: Backing dir is not set, filesystem can't be mounted. [ 619.389732][ T9411] incfs: mount failed -2 [ 619.749341][ T9500] netlink: 'syz.0.18746': attribute type 4 has an invalid length. [ 619.893711][ T9532] netlink: 'syz.3.18761': attribute type 4 has an invalid length. [ 620.070086][ T9560] netlink: 'syz.2.18774': attribute type 4 has an invalid length. [ 622.466533][ T9758] netlink: 'syz.1.18843': attribute type 4 has an invalid length. [ 623.036752][ T9843] netlink: 'syz.1.18888': attribute type 4 has an invalid length. [ 623.090535][ T9857] netlink: 'syz.0.18895': attribute type 4 has an invalid length. [ 623.235247][ T9879] netlink: 'syz.2.18906': attribute type 4 has an invalid length. [ 624.146520][ T9959] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 624.155400][ T9959] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 624.456208][ T9985] xt_CT: No such helper "netbios-ns" [ 625.265061][T10034] input: syz0 as /devices/virtual/input/input5 [ 625.438382][T10060] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18987'. [ 625.516136][T10072] loop2: detected capacity change from 0 to 2048 [ 626.309330][T10072] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 626.638215][ T285] EXT4-fs (loop2): unmounting filesystem. [ 628.298221][T10179] loop2: detected capacity change from 0 to 2048 [ 628.363033][T10179] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 628.391948][ T285] EXT4-fs (loop2): unmounting filesystem. [ 628.640771][T10195] loop2: detected capacity change from 0 to 2048 [ 628.673883][T10195] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 628.708850][ T285] EXT4-fs (loop2): unmounting filesystem. [ 629.117453][T10219] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10219 comm=syz.2.19053 [ 629.153914][T10223] netlink: 'syz.2.19055': attribute type 4 has an invalid length. [ 629.390070][T10227] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 629.637299][T10226] netlink: 'syz.0.19051': attribute type 3 has an invalid length. [ 630.578301][T10229] overlayfs: missing 'lowerdir' [ 630.639672][T10242] netlink: 'syz.4.19064': attribute type 4 has an invalid length. [ 631.687016][T10277] futex_wake_op: syz.4.19075 tries to shift op by -1; fix this program [ 631.768965][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19083'. [ 632.601325][T10403] overlayfs: failed to clone upperpath [ 632.741681][T10535] 9pnet: Unknown protocol version 9 [ 633.348327][T10622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19180'. [ 634.209841][T10702] netlink: 'syz.0.19218': attribute type 4 has an invalid length. [ 635.058229][T10735] loop2: detected capacity change from 0 to 4096 [ 635.079809][T10735] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 635.221076][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 635.233428][ T285] EXT4-fs (loop2): unmounting filesystem. [ 635.444202][T10787] netlink: 'syz.4.19258': attribute type 4 has an invalid length. [ 635.622679][T10811] netlink: 'syz.0.19270': attribute type 4 has an invalid length. [ 635.940829][T10829] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19265'. [ 636.617871][T10848] netlink: 'syz.4.19284': attribute type 4 has an invalid length. [ 636.862776][T10880] netlink: 'syz.4.19300': attribute type 4 has an invalid length. [ 637.916888][T10925] netlink: 'syz.0.19317': attribute type 4 has an invalid length. [ 638.051547][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19325'. [ 638.596476][T10989] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 640.469037][T11038] loop2: detected capacity change from 0 to 512 [ 640.476041][T11038] EXT4-fs (loop2): unable to read superblock [ 640.727041][T11075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=11075 comm=syz.3.19387 [ 640.752537][T11075] netlink: 72 bytes leftover after parsing attributes in process `syz.3.19387'. [ 641.146245][T11106] fuse: Bad value for 'fd' [ 641.953958][ T28] audit: type=1326 audit(1763588532.053:113796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.3.19399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d6b8f749 code=0x7fc00000 [ 643.436101][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19485'. [ 643.884940][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19510'. [ 644.173327][T11349] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19514'. [ 644.251002][T11363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1279 sclass=netlink_route_socket pid=11363 comm=syz.4.19520 [ 644.454619][T11374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19522'. [ 645.530607][T11418] loop2: detected capacity change from 0 to 2048 [ 645.546071][T11423] fuseblk: Bad value for 'fd' [ 645.558017][T11418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 645.575116][ T285] EXT4-fs (loop2): unmounting filesystem. [ 648.363278][T11533] loop2: detected capacity change from 0 to 4096 [ 648.397782][T11533] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 648.496715][ T285] EXT4-fs (loop2): unmounting filesystem. [ 649.764071][T11564] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19605'. [ 649.773326][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19605'. [ 649.782851][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19605'. [ 649.792045][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19605'. [ 649.958613][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19616'. [ 650.434820][T11623] netlink: 'syz.2.19632': attribute type 13 has an invalid length. [ 650.442967][T11623] netlink: 'syz.2.19632': attribute type 17 has an invalid length. [ 650.452323][T11623] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 650.519714][ T1387] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 651.129573][ T1387] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 651.697993][T10514] tipc: Subscription rejected, illegal request [ 652.406850][ T28] audit: type=1326 audit(1763588542.505:113797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.0.19697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 652.440763][ T28] audit: type=1326 audit(1763588542.505:113798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.0.19697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 652.465150][ T28] audit: type=1326 audit(1763588542.505:113799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.0.19697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 652.496186][ T28] audit: type=1326 audit(1763588542.505:113800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.0.19697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 652.524499][ T28] audit: type=1326 audit(1763588542.515:113801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.0.19697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 652.553221][ T28] audit: type=1326 audit(1763588542.515:113802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.0.19697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 652.577387][ T28] audit: type=1326 audit(1763588542.515:113803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.0.19697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 652.608361][ T28] audit: type=1326 audit(1763588542.515:113804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.0.19697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 652.632899][ T28] audit: type=1326 audit(1763588542.515:113805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.0.19697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 652.653851][T11780] netlink: 96 bytes leftover after parsing attributes in process `syz.1.19703'. [ 652.670783][ T28] audit: type=1326 audit(1763588542.515:113806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.0.19697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 652.896267][T11819] netlink: 84 bytes leftover after parsing attributes in process `syz.0.19721'. [ 652.905732][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19721'. [ 653.021265][T11832] netlink: 'syz.0.19727': attribute type 13 has an invalid length. [ 653.030095][T11832] netlink: 'syz.0.19727': attribute type 17 has an invalid length. [ 653.047003][T11832] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 653.088586][ T5007] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 653.100661][ T5007] ip6_tunnel: K xmit: Local address not yet configured! [ 653.147978][T11842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19731'. [ 653.553974][ T19] ip6_tunnel: K xmit: Local address not yet configured! [ 655.816800][T11940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11940 comm=syz.3.19779 [ 656.630314][T11955] loop2: detected capacity change from 0 to 4096 [ 656.644067][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19784'. [ 656.653268][T11957] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19784'. [ 656.662849][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19784'. [ 656.769105][T11957] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19784'. [ 656.797570][T11955] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 656.817698][T11967] netlink: 'syz.3.19789': attribute type 13 has an invalid length. [ 656.825694][T11967] netlink: 'syz.3.19789': attribute type 17 has an invalid length. [ 656.835455][T11967] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 656.950206][ T285] EXT4-fs (loop2): unmounting filesystem. [ 656.967190][T11967] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 656.978616][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 657.025845][ T1387] ip6_tunnel: K xmit: Local address not yet configured! [ 657.049781][ T9274] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 657.057485][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.065701][ T9274] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 657.076089][ T9274] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 657.086127][ T9274] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 657.103747][ T9274] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 657.112065][ T9274] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 657.159719][ T1387] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 659.321663][ T1387] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 660.071787][T12093] netlink: 96 bytes leftover after parsing attributes in process `syz.4.19844'. [ 661.298162][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 661.354790][T12130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19859'. [ 661.404823][T12120] loop2: detected capacity change from 0 to 40427 [ 661.407412][T12137] netlink: 96 bytes leftover after parsing attributes in process `syz.3.19858'. [ 661.420838][T12120] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 661.428679][T12120] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 661.441266][T12120] F2FS-fs (loop2): invalid crc value [ 661.458119][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 661.578993][T12120] F2FS-fs (loop2): Found nat_bits in checkpoint [ 661.987328][T12120] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 661.994554][T12120] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 662.082138][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19871'. [ 662.109001][T12173] netlink: 96 bytes leftover after parsing attributes in process `syz.3.19874'. [ 662.438162][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 662.438614][ T28] audit: type=1400 audit(1763588552.496:113835): avc: denied { mounton } for pid=12119 comm="syz.2.19853" path="/3952/bus/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 662.613998][ T28] audit: type=1400 audit(1763588552.496:113836): avc: denied { setattr } for pid=12119 comm="syz.2.19853" name="work" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 662.639872][ T28] audit: type=1400 audit(1763588552.496:113837): avc: denied { remove_name } for pid=12119 comm="syz.2.19853" name="#1d" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 662.693093][ T28] audit: type=1400 audit(1763588552.496:113838): avc: denied { rename } for pid=12119 comm="syz.2.19853" name="#1d" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 662.716482][ T28] audit: type=1400 audit(1763588552.496:113839): avc: denied { unlink } for pid=12119 comm="syz.2.19853" name="#1d" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 662.742635][ T28] audit: type=1400 audit(1763588552.496:113840): avc: denied { unlink } for pid=12119 comm="syz.2.19853" name="#1e" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 662.773395][ T28] audit: type=1400 audit(1763588552.876:113841): avc: denied { rmdir } for pid=285 comm="syz-executor" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 662.871578][T12207] overlayfs: missing 'workdir' [ 662.999190][T12228] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19900'. [ 663.095292][T12242] netlink: 96 bytes leftover after parsing attributes in process `syz.4.19904'. [ 663.252660][T12267] netlink: 96 bytes leftover after parsing attributes in process `syz.2.19916'. [ 664.245576][T12321] netlink: 96 bytes leftover after parsing attributes in process `syz.4.19936'. [ 664.400694][T12348] netlink: 96 bytes leftover after parsing attributes in process `syz.4.19949'. [ 664.462433][T12356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19953'. [ 664.575154][ T28] audit: type=1400 audit(1763588554.676:113842): avc: denied { module_request } for pid=12377 comm="syz.2.19962" kmod="net-pf-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 664.729106][T12408] netlink: 96 bytes leftover after parsing attributes in process `syz.4.19976'. [ 664.797216][T12421] netlink: 388 bytes leftover after parsing attributes in process `syz.2.19983'. [ 665.297652][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 667.054248][T12570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12570 comm=syz.0.20049 [ 667.430144][T12594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12594 comm=syz.4.20060 [ 667.491375][T12596] __nla_validate_parse: 10 callbacks suppressed [ 667.491395][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20062'. [ 667.565578][T12609] netlink: 96 bytes leftover after parsing attributes in process `syz.2.20067'. [ 667.806306][T12621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12621 comm=syz.4.20073 [ 667.959680][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20077'. [ 668.174126][T12647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12647 comm=syz.4.20084 [ 668.234387][T12656] netlink: 96 bytes leftover after parsing attributes in process `syz.0.20088'. [ 668.336597][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20091'. [ 668.367046][T12679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12679 comm=syz.1.20097 [ 668.572098][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20108'. [ 668.618033][T12711] netlink: 'syz.2.20111': attribute type 13 has an invalid length. [ 668.633208][T12711] netlink: 'syz.2.20111': attribute type 17 has an invalid length. [ 668.651234][T12711] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 668.697466][ T5007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 668.917644][ T5007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 669.081626][T12740] netlink: 96 bytes leftover after parsing attributes in process `syz.2.20123'. [ 669.160342][T12745] netlink: 'syz.2.20124': attribute type 13 has an invalid length. [ 669.169581][T12745] netlink: 'syz.2.20124': attribute type 17 has an invalid length. [ 669.179319][T12745] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 669.217505][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 669.241151][T12750] netlink: 96 bytes leftover after parsing attributes in process `syz.1.20126'. [ 669.477818][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 669.759710][T12772] netlink: 96 bytes leftover after parsing attributes in process `syz.3.20134'. [ 669.776006][T12771] tipc: Failed to remove unknown binding: 66,1,1/3665240403:4014034204/4014034206 [ 669.790760][T12771] tipc: Failed to remove unknown binding: 66,1,1/3665240403:4014034204/4014034206 [ 669.805528][T12780] tipc: Failed to remove unknown binding: 66,1,1/345992562:2168607209/2168607211 [ 669.818641][T12778] netlink: 96 bytes leftover after parsing attributes in process `syz.0.20137'. [ 670.131451][T12836] tipc: Failed to remove unknown binding: 66,1,1/4:979519496/979519498 [ 670.145525][T12836] tipc: Failed to remove unknown binding: 66,1,1/4:979519496/979519498 [ 670.417145][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 670.424793][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 672.469738][T13148] tipc: Failed to remove unknown binding: 66,1,1/345992562:4217583979/4217583981 [ 672.480879][T13148] tipc: Failed to remove unknown binding: 66,1,1/345992562:4217583979/4217583981 [ 672.490451][T13148] tipc: Failed to remove unknown binding: 66,1,1/345992562:4217583979/4217583981 [ 672.891402][T13180] __nla_validate_parse: 8 callbacks suppressed [ 672.891433][T13180] netlink: 96 bytes leftover after parsing attributes in process `syz.3.20311'. [ 673.368275][T13193] netlink: 'syz.2.20315': attribute type 13 has an invalid length. [ 673.376336][T13193] netlink: 'syz.2.20315': attribute type 17 has an invalid length. [ 673.384537][T13193] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 673.427025][ T5007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 673.471209][T13211] netlink: 96 bytes leftover after parsing attributes in process `syz.4.20323'. [ 673.565719][T13222] overlayfs: failed to clone upperpath [ 673.853040][T13242] netlink: 'syz.3.20336': attribute type 13 has an invalid length. [ 673.861399][T13242] netlink: 'syz.3.20336': attribute type 17 has an invalid length. [ 673.869955][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 673.894134][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 673.926977][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 673.976187][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20340'. [ 673.996958][ T5007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 674.023182][T13259] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20342'. [ 674.373650][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20353'. [ 674.577598][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20368'. [ 674.624437][T13321] netlink: 44 bytes leftover after parsing attributes in process `syz.3.20366'. [ 674.656858][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 674.697132][T13341] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20375'. [ 674.813760][T13353] device lo left promiscuous mode [ 674.821017][T13353] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 674.829923][T13353] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 674.839260][T13353] device tunl0 left promiscuous mode [ 674.848180][T13353] device gre0 left promiscuous mode [ 674.857522][T13353] device gretap0 left promiscuous mode [ 674.873480][T13353] device ip_vti0 left promiscuous mode [ 674.882014][T13353] device ip6_vti0 left promiscuous mode [ 674.890980][T13353] device sit0 left promiscuous mode [ 674.906258][T13353] device ip6tnl0 left promiscuous mode [ 674.915106][T13353] device ip6gre0 left promiscuous mode [ 674.923748][T13353] device ip6gretap0 left promiscuous mode [ 674.932793][T13353] device dummy0 left promiscuous mode [ 674.941170][T13353] device veth0 left promiscuous mode [ 674.948565][T13353] device veth1 left promiscuous mode [ 674.957524][T13353] device wg0 left promiscuous mode [ 674.965478][T13353] device veth1_to_bridge left promiscuous mode [ 674.974089][T13353] device bridge_slave_1 left promiscuous mode [ 674.981659][T13353] device veth0_to_bond left promiscuous mode [ 674.990398][T13353] device bond_slave_0 left promiscuous mode [ 674.997721][T13353] device veth1_to_bond left promiscuous mode [ 675.006278][T13353] device bond_slave_1 left promiscuous mode [ 675.013753][T13353] device veth0_to_team left promiscuous mode [ 675.022605][T13353] device team_slave_0 left promiscuous mode [ 675.029872][T13353] device veth1_to_team left promiscuous mode [ 675.038375][T13353] device team_slave_1 left promiscuous mode [ 675.045677][T13353] device veth1_to_batadv left promiscuous mode [ 675.054442][T13353] device batadv_slave_1 left promiscuous mode [ 675.062960][T13353] device xfrm0 left promiscuous mode [ 675.071486][T13353] device veth0_to_hsr left promiscuous mode [ 675.080203][T13353] device hsr_slave_0 left promiscuous mode [ 675.087310][T13353] device veth1_to_hsr left promiscuous mode [ 675.095457][T13353] device hsr_slave_1 left promiscuous mode [ 675.134948][T13353] device veth1_virt_wifi left promiscuous mode [ 675.143682][T13353] device veth0_virt_wifi left promiscuous mode [ 675.152057][T13353] device veth1_vlan left promiscuous mode [ 675.168421][T13353] device vlan0 left promiscuous mode [ 675.175438][T13353] device vlan1 left promiscuous mode [ 675.182198][T13353] device veth1_macvtap left promiscuous mode [ 675.190850][T13353] device veth0_macvtap left promiscuous mode [ 675.202082][T13353] device veth1_macvtap entered promiscuous mode [ 675.208947][T13353] device macsec0 left promiscuous mode [ 675.217470][T13353] device bridge1 left promiscuous mode [ 675.225748][T13353] device bridge2 left promiscuous mode [ 675.233596][T13353] device veth2 left promiscuous mode [ 675.240640][T13353] device veth3 left promiscuous mode [ 675.247695][T13353] device bridge3 left promiscuous mode [ 675.255590][T13353] device bridge4 left promiscuous mode [ 675.263954][T13353] device veth4 left promiscuous mode [ 675.270969][T13353] device veth5 left promiscuous mode [ 675.277982][T13353] device bridge5 left promiscuous mode [ 675.286162][T13353] device bridge6 left promiscuous mode [ 675.294271][T13353] device veth6 left promiscuous mode [ 675.301348][T13353] device veth7 left promiscuous mode [ 675.308105][T13353] device veth8 left promiscuous mode [ 675.315086][T13353] device veth9 left promiscuous mode [ 675.321793][T13353] device veth10 left promiscuous mode [ 675.328872][T13353] device veth11 left promiscuous mode [ 675.335768][T13353] device bridge7 left promiscuous mode [ 675.343874][T13353] device gre1 left promiscuous mode [ 675.363041][T13353] device gretap1 left promiscuous mode [ 675.369475][T13353] device sit1 left promiscuous mode [ 675.380364][T13353] device syztnl1 left promiscuous mode [ 675.386663][T13353] device ip6erspan0 left promiscuous mode [ 675.393124][T13353] device bridge8 left promiscuous mode [ 675.399451][T13353] device virt_wifi0 left promiscuous mode [ 675.405867][T13353] device erspan0.768 left promiscuous mode [ 675.412163][T13353] device erspan0 left promiscuous mode [ 675.418633][T13353] device syztnl2 left promiscuous mode [ 675.424820][T13353] device syztnl0 left promiscuous mode [ 675.431424][T13353] device veth12 left promiscuous mode [ 675.437578][T13353] device veth13 left promiscuous mode [ 675.443432][T13353] device ip6gre1 left promiscuous mode [ 675.449645][T13353] device ip6gre2 left promiscuous mode [ 675.456085][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 675.476705][ T1387] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 675.486079][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 675.494898][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 675.503442][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 675.513834][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 675.523879][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 675.532376][ T1387] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 675.540438][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 675.549145][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 675.562053][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 675.574914][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 675.583548][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 675.602848][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 675.611939][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 675.620555][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 675.629670][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 675.649437][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 675.666920][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 675.685349][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 675.702514][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 675.726999][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 675.735634][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 675.744150][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 675.752320][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 675.760487][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 675.768871][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 675.777503][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 675.785911][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 675.793765][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 675.801362][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 675.809313][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 675.817009][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 675.824689][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 675.832647][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 675.840452][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 675.848232][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 675.855749][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 675.863745][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 675.871589][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 675.879700][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 675.889680][T13350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20379'. [ 675.900310][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 675.908016][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 675.916094][T13367] netlink: 96 bytes leftover after parsing attributes in process `syz.2.20387'. [ 676.035281][T13402] tipc: Failed to remove unknown binding: 66,1,1/4:3878024380/3878024382 [ 676.044921][T13402] tipc: Failed to remove unknown binding: 66,1,1/4:3878024380/3878024382 [ 676.054047][T13402] tipc: Failed to remove unknown binding: 66,1,1/4:3878024380/3878024382 [ 676.056813][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 676.194903][T13414] tipc: Failed to remove unknown binding: 66,1,1/3665240403:218079244/218079246 [ 676.204968][T13414] tipc: Failed to remove unknown binding: 66,1,1/3665240403:218079244/218079246 [ 676.214953][T13414] tipc: Failed to remove unknown binding: 66,1,1/3665240403:218079244/218079246 [ 676.702345][T13439] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 676.757640][ T5007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 677.905260][ T19] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 677.938667][T13443] __nla_validate_parse: 3 callbacks suppressed [ 677.938689][T13443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20416'. [ 678.051404][T13471] netlink: 96 bytes leftover after parsing attributes in process `syz.4.20428'. [ 678.104116][T13476] netlink: 'syz.3.20430': attribute type 13 has an invalid length. [ 678.113356][T13476] netlink: 'syz.3.20430': attribute type 17 has an invalid length. [ 678.123080][T13476] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 678.150991][T13476] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 678.197118][ T5007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 678.513104][T13490] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20437'. [ 678.649643][T13519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20448'. [ 678.768778][T13538] netlink: 96 bytes leftover after parsing attributes in process `syz.2.20457'. [ 678.884454][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20461'. [ 678.940804][T13536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20456'. [ 678.986977][ T5007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 679.163174][T13560] netlink: 44 bytes leftover after parsing attributes in process `syz.2.20468'. [ 679.253278][T13575] tipc: Failed to remove unknown binding: 66,1,1/3665240403:3472551092/3472551094 [ 679.319007][T13576] tipc: Failed to remove unknown binding: 66,1,1/3665240403:3472551092/3472551094 [ 679.371299][T13576] tipc: Failed to remove unknown binding: 66,1,1/3665240403:3472551092/3472551094 [ 679.575463][T13596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13596 comm=syz.4.20482 [ 679.578147][T13592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20481'. [ 679.776020][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 680.655927][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 680.971665][T13608] netlink: 44 bytes leftover after parsing attributes in process `syz.1.20486'. [ 680.983617][T13631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13631 comm=syz.2.20493 [ 681.069394][T13647] netlink: 'syz.2.20501': attribute type 13 has an invalid length. [ 681.078182][T13647] netlink: 'syz.2.20501': attribute type 17 has an invalid length. [ 681.087435][T13647] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 681.155962][ T5007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 682.234152][ T5007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 682.728117][T13683] netlink: 'syz.1.20514': attribute type 13 has an invalid length. [ 682.736254][T13683] netlink: 'syz.1.20514': attribute type 17 has an invalid length. [ 682.744214][T13683] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 682.766742][T13686] tipc: Failed to remove unknown binding: 66,1,1/3665240403:370805110/370805112 [ 682.777840][T13686] tipc: Failed to remove unknown binding: 66,1,1/3665240403:370805110/370805112 [ 682.790452][T13686] tipc: Failed to remove unknown binding: 66,1,1/3665240403:370805110/370805112 [ 682.855794][ T5007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 682.921388][ T28] audit: type=1400 audit(1763588573.028:113843): avc: denied { mount } for pid=13700 comm="syz.4.20522" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 682.961559][T13712] tipc: Failed to remove unknown binding: 66,1,1/4:1590676292/1590676294 [ 682.973638][T13712] tipc: Failed to remove unknown binding: 66,1,1/4:1590676292/1590676294 [ 682.990130][T13712] tipc: Failed to remove unknown binding: 66,1,1/4:1590676292/1590676294 [ 683.025997][T13726] netlink: 'syz.2.20532': attribute type 13 has an invalid length. [ 683.034104][T13726] netlink: 'syz.2.20532': attribute type 17 has an invalid length. [ 683.042836][T13726] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 683.086589][ T5007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 683.093605][T13723] __nla_validate_parse: 1 callbacks suppressed [ 683.093631][T13723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20531'. [ 683.134850][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20534'. [ 683.205963][ T5007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 683.218339][T13746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13746 comm=syz.4.20540 [ 683.273864][T13758] netlink: 'syz.2.20544': attribute type 13 has an invalid length. [ 683.282122][T13758] netlink: 'syz.2.20544': attribute type 17 has an invalid length. [ 683.293109][T13758] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 683.315232][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20547'. [ 683.336121][ T1387] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 683.473346][T13768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20549'. [ 684.153301][ T1387] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 684.502179][T13779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13779 comm=syz.2.20551 [ 684.536149][ T28] audit: type=1326 audit(1763588574.648:113844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13784 comm="syz.4.20555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 684.561372][ T28] audit: type=1326 audit(1763588574.668:113845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13784 comm="syz.4.20555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 684.587639][ T28] audit: type=1326 audit(1763588574.688:113846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13784 comm="syz.4.20555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 684.619151][T13793] Invalid ELF header type: 2 != 1 [ 684.638190][ T28] audit: type=1326 audit(1763588574.698:113847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13784 comm="syz.4.20555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 684.678717][ T28] audit: type=1326 audit(1763588574.698:113848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13784 comm="syz.4.20555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 684.720842][T13804] netlink: 204 bytes leftover after parsing attributes in process `syz.3.20563'. [ 684.761923][ T28] audit: type=1326 audit(1763588574.698:113849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13784 comm="syz.4.20555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 684.797238][ T28] audit: type=1326 audit(1763588574.698:113850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13784 comm="syz.4.20555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 684.804503][T13815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13815 comm=syz.4.20568 [ 684.833722][ T28] audit: type=1326 audit(1763588574.698:113851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13784 comm="syz.4.20555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 684.858130][ T28] audit: type=1326 audit(1763588574.718:113852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13784 comm="syz.4.20555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 684.887203][T13813] netlink: 68 bytes leftover after parsing attributes in process `syz.3.20567'. [ 685.238110][T13842] xt_CT: No such helper "pptp" [ 685.702112][T13872] netlink: 96 bytes leftover after parsing attributes in process `syz.3.20594'. [ 685.904562][T13895] tipc: Failed to remove unknown binding: 66,1,1/3665240403:1237099875/1237099877 [ 685.918272][T13895] tipc: Failed to remove unknown binding: 66,1,1/3665240403:1237099875/1237099877 [ 685.934574][T13895] tipc: Failed to remove unknown binding: 66,1,1/3665240403:1237099875/1237099877 [ 685.967549][T13900] netlink: 96 bytes leftover after parsing attributes in process `syz.0.20606'. [ 686.641145][T13941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13941 comm=syz.0.20624 [ 686.659112][T13933] tipc: Failed to remove unknown binding: 66,1,1/2799130081:2909798180/2909798182 [ 686.671952][T13933] tipc: Failed to remove unknown binding: 66,1,1/2799130081:2909798180/2909798182 [ 686.685282][T13933] tipc: Failed to remove unknown binding: 66,1,1/2799130081:2909798180/2909798182 [ 686.697639][T13945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20626'. [ 687.102715][T13995] /dev/loop0: Can't open blockdev [ 687.117537][T14000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20652'. [ 687.126628][T13998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13998 comm=syz.2.20651 [ 687.401379][T14052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14052 comm=syz.4.20675 [ 687.695258][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 687.945130][T14083] xt_hashlimit: max too large, truncated to 1048576 [ 688.335197][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 688.712030][T14095] __nla_validate_parse: 5 callbacks suppressed [ 688.712100][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20694'. [ 688.975388][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 689.148366][T14113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20701'. [ 689.548800][T14167] xt_CT: No such helper "pptp" [ 690.029919][T14201] netlink: 104 bytes leftover after parsing attributes in process `syz.3.20740'. [ 690.092581][T14210] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 690.147320][ T5007] ip6_tunnel: K xmit: Local address not yet configured! [ 690.194923][ T5007] ip6_tunnel: K xmit: Local address not yet configured! [ 690.646097][T14254] netlink: 'syz.4.20765': attribute type 13 has an invalid length. [ 690.654249][T14254] netlink: 'syz.4.20765': attribute type 17 has an invalid length. [ 690.662491][T14254] netlink: 'syz.4.20765': attribute type 27 has an invalid length. [ 690.992104][T14299] netlink: 'syz.1.20778': attribute type 13 has an invalid length. [ 691.006010][T14299] netlink: 'syz.1.20778': attribute type 17 has an invalid length. [ 691.185288][T14299] netlink: 'syz.1.20778': attribute type 27 has an invalid length. [ 691.193883][T14309] netlink: 44 bytes leftover after parsing attributes in process `syz.3.20790'. [ 691.993420][T14349] netlink: 96 bytes leftover after parsing attributes in process `syz.0.20807'. [ 692.086913][T14366] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 692.096039][T14366] overlayfs: missing 'lowerdir' [ 692.217767][T14378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14378 comm=syz.3.20818 [ 692.254940][T14380] netlink: 96 bytes leftover after parsing attributes in process `syz.3.20819'. [ 692.463811][T14399] tipc: Failed to remove unknown binding: 66,1,1/345992562:460642478/460642480 [ 692.473668][T14399] tipc: Failed to remove unknown binding: 66,1,1/345992562:460642478/460642480 [ 692.483138][T14399] tipc: Failed to remove unknown binding: 66,1,1/345992562:460642478/460642480 [ 692.518663][T14403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14403 comm=syz.3.20829 [ 692.518913][T14405] netlink: 96 bytes leftover after parsing attributes in process `syz.4.20830'. [ 692.572217][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20833'. [ 692.767197][T14427] tipc: Failed to remove unknown binding: 66,1,1/345992562:3995264479/3995264481 [ 692.777560][T14427] tipc: Failed to remove unknown binding: 66,1,1/345992562:3995264479/3995264481 [ 692.787285][T14427] tipc: Failed to remove unknown binding: 66,1,1/345992562:3995264479/3995264481 [ 693.326243][T14454] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3523112891/3523112893 [ 693.403687][T14454] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3523112891/3523112893 [ 693.413289][T14454] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3523112891/3523112893 [ 694.817882][T14471] netlink: 96 bytes leftover after parsing attributes in process `syz.3.20857'. [ 694.984061][T14498] netlink: 96 bytes leftover after parsing attributes in process `syz.1.20868'. [ 695.843159][T14534] netlink: 96 bytes leftover after parsing attributes in process `syz.1.20884'. [ 698.275174][T14569] netlink: 96 bytes leftover after parsing attributes in process `syz.4.20899'. [ 698.555875][T14584] IPv6: NLM_F_CREATE should be specified when creating new route [ 698.910615][T14593] netlink: 100 bytes leftover after parsing attributes in process `syz.4.20909'. [ 698.941250][T14595] fuse: Bad value for 'fd' [ 698.951615][T14591] netlink: 44 bytes leftover after parsing attributes in process `syz.3.20908'. [ 699.034317][T14604] netlink: 96 bytes leftover after parsing attributes in process `syz.3.20914'. [ 699.247340][T14626] netlink: 44 bytes leftover after parsing attributes in process `syz.4.20925'. [ 699.262063][T14632] netlink: 96 bytes leftover after parsing attributes in process `syz.3.20927'. [ 699.704615][T14664] netlink: 96 bytes leftover after parsing attributes in process `syz.0.20940'. [ 699.896693][T14669] netlink: 96 bytes leftover after parsing attributes in process `syz.3.20942'. [ 700.066105][T14675] netlink: 44 bytes leftover after parsing attributes in process `syz.3.20945'. [ 700.076594][T14688] netlink: 96 bytes leftover after parsing attributes in process `syz.2.20951'. [ 700.100391][T14693] netlink: 96 bytes leftover after parsing attributes in process `syz.0.20953'. [ 700.127227][T14696] netlink: 96 bytes leftover after parsing attributes in process `syz.2.20954'. [ 700.148861][T14697] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20955'. [ 700.158560][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20955'. [ 700.381046][T14719] netlink: 96 bytes leftover after parsing attributes in process `syz.3.20965'. [ 700.440938][T14725] netlink: 96 bytes leftover after parsing attributes in process `syz.4.20967'. [ 700.466054][T14718] netlink: 96 bytes leftover after parsing attributes in process `syz.1.20964'. [ 700.700512][T14757] 9pnet: Could not find request transport: f [ 700.737475][T14764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14764 comm=syz.0.20985 [ 700.909318][T14796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14796 comm=syz.4.21000 [ 701.079435][T14824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14824 comm=syz.4.21015 [ 701.654686][T14869] overlayfs: failed to clone upperpath [ 701.928579][T14921] overlayfs: failed to clone upperpath [ 702.605382][T14969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14969 comm=syz.3.21080 [ 702.667008][T14978] overlayfs: failed to clone upperpath [ 702.737289][T14993] fuse: Bad value for 'user_id' [ 702.925391][T15023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15023 comm=syz.3.21106 [ 703.053461][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 703.116763][T15055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15055 comm=syz.2.21120 [ 704.059114][T15123] 9pnet: Could not find request transport: 0xffffffffffffffff [ 704.159932][T15137] fuse: Invalid rootmode [ 704.367726][T15169] netlink: 'syz.4.21172': attribute type 11 has an invalid length. [ 705.620131][T15234] overlayfs: failed to clone upperpath [ 705.667117][T15239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15239 comm=syz.3.21203 [ 705.886716][T15255] __nla_validate_parse: 26 callbacks suppressed [ 705.886739][T15255] netlink: 96 bytes leftover after parsing attributes in process `syz.0.21210'. [ 705.965163][T15264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15264 comm=syz.3.21215 [ 706.294806][T15285] netlink: 112 bytes leftover after parsing attributes in process `syz.0.21224'. [ 706.388166][T15296] netlink: 96 bytes leftover after parsing attributes in process `syz.2.21229'. [ 706.719427][T15323] netlink: 96 bytes leftover after parsing attributes in process `syz.0.21242'. [ 706.875424][T15335] netlink: 104 bytes leftover after parsing attributes in process `syz.4.21248'. [ 707.605619][T15354] netlink: 96 bytes leftover after parsing attributes in process `syz.1.21253'. [ 707.643953][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21259'. [ 707.653050][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21259'. [ 707.775897][T15373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15373 comm=syz.0.21266 [ 707.845764][T15379] netlink: 96 bytes leftover after parsing attributes in process `syz.0.21268'. [ 707.898749][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 707.898766][ T28] audit: type=1326 audit(1763588597.657:113865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15381 comm="syz.3.21270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 707.936126][ T28] audit: type=1326 audit(1763588597.657:113866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15381 comm="syz.3.21270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d6b8f749 code=0x7ffc0000 [ 711.265209][T15516] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 711.278425][T15516] overlayfs: missing 'lowerdir' [ 711.442097][T15539] bridge0: port 1(gretap0) entered blocking state [ 711.461584][T15539] bridge0: port 1(gretap0) entered disabled state [ 711.468781][T15539] device gretap0 entered promiscuous mode [ 711.475662][T15539] bridge0: port 1(gretap0) entered blocking state [ 711.482150][T15539] bridge0: port 1(gretap0) entered forwarding state [ 711.497491][T15539] device gretap0 left promiscuous mode [ 711.505480][T15539] bridge0: port 1(gretap0) entered disabled state [ 711.692991][T15553] xt_hashlimit: max too large, truncated to 1048576 [ 712.537942][T15628] overlayfs: failed to clone upperpath [ 712.609069][ T28] audit: type=1400 audit(1763588601.995:113867): avc: denied { execute_no_trans } for pid=15636 comm="syz.2.21375" path="/file0" dev="ramfs" ino=216425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 712.764949][T15664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=15664 comm=syz.3.21388 [ 713.041031][T15694] netlink: 132 bytes leftover after parsing attributes in process `syz.0.21402'. [ 713.149043][T15710] netlink: 96 bytes leftover after parsing attributes in process `syz.1.21409'. [ 713.433108][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 713.685582][T15740] netlink: 96 bytes leftover after parsing attributes in process `syz.4.21421'. [ 713.819100][T15755] overlayfs: failed to clone upperpath [ 714.048095][T15759] xt_hashlimit: max too large, truncated to 1048576 [ 714.347196][T15768] netlink: 96 bytes leftover after parsing attributes in process `syz.0.21433'. [ 715.084517][T15863] mmap: syz.2.21476 (15863): VmData 38735872 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 715.202656][T15864] xt_hashlimit: max too large, truncated to 1048576 [ 715.844234][T15877] 9pnet: Could not find request transport: f [ 716.764185][T15915] overlayfs: failed to clone lowerpath [ 718.756637][T15994] overlayfs: failed to clone upperpath [ 719.019914][T16018] overlayfs: failed to clone upperpath [ 720.477726][T16083] overlayfs: failed to clone upperpath [ 720.746199][T16113] overlayfs: failed to clone upperpath [ 722.524467][T16160] 9p: Unknown access argument 00000000000000000000›b“: -22 [ 722.990285][T16212] IPv6: sit2: Disabled Multicast RS [ 723.294034][ T28] audit: type=1326 audit(1763588611.873:113868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.21634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 723.344769][ T28] audit: type=1326 audit(1763588611.873:113869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.21634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 723.400759][ T28] audit: type=1326 audit(1763588611.873:113870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.21634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 723.435525][ T28] audit: type=1326 audit(1763588611.873:113871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.21634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 723.500340][ T28] audit: type=1326 audit(1763588611.873:113872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.21634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 723.580932][ T28] audit: type=1326 audit(1763588611.873:113873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.21634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 723.623756][T16240] overlayfs: failed to clone upperpath [ 723.667260][ T28] audit: type=1326 audit(1763588611.873:113874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.21634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 723.769283][ T28] audit: type=1326 audit(1763588611.873:113875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.21634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 723.825125][ T28] audit: type=1326 audit(1763588612.002:113876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.21634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 723.852739][ T28] audit: type=1326 audit(1763588612.002:113877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.21634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 723.854468][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 724.046175][T16288] netlink: 'syz.0.21664': attribute type 25 has an invalid length. [ 724.071695][T16293] netlink: 'syz.1.21666': attribute type 10 has an invalid length. [ 724.086002][T16296] 9pnet: Could not find request transport: f [ 724.367573][T16336] overlayfs: failed to clone upperpath [ 724.420996][T16343] overlayfs: failed to clone upperpath [ 724.447158][T16344] overlayfs: failed to resolve './file1': -2 [ 725.784587][T16410] overlayfs: failed to clone upperpath [ 725.841037][T16417] tipc: Enabling of bearer rejected, failed to enable media [ 725.954601][T16436] overlayfs: failed to clone upperpath [ 726.605997][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 726.682584][T16490] netlink: 104 bytes leftover after parsing attributes in process `syz.4.21755'. [ 727.110172][T16514] SELinux: Context system_u:object_r:usr_t:s0 is not valid (left unmapped). [ 727.558709][T16573] 9p: Unknown access argument a: -22 [ 727.600306][T16581] syz.0.21799[16581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 727.600446][T16581] syz.0.21799[16581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 728.367280][T16630] syz.4.21819[16630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 728.379565][T16630] syz.4.21819[16630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 730.668119][T16689] netlink: 56 bytes leftover after parsing attributes in process `syz.4.21841'. [ 732.720333][T16787] netlink: 900 bytes leftover after parsing attributes in process `syz.1.21862'. [ 733.845375][T16799] netlink: 9 bytes leftover after parsing attributes in process `syz.4.21863'. [ 733.856644][T16799] device gretap0 entered promiscuous mode [ 734.718585][T16809] cgroup: Invalid name [ 735.848641][T16920] netlink: 'syz.1.21922': attribute type 11 has an invalid length. [ 735.872345][T16920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21922'. [ 735.900832][T16938] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 736.787656][T16987] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21949'. [ 737.698964][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 738.175499][T17022] netlink: 44 bytes leftover after parsing attributes in process `syz.3.21963'. [ 740.029688][T17041] netlink: 256 bytes leftover after parsing attributes in process `syz.3.21973'. [ 740.886729][T17079] overlayfs: missing 'workdir' [ 741.178158][T17103] overlayfs: missing 'workdir' [ 743.924843][T17224] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 743.944132][T17224] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 744.528324][T17243] device veth1 entered promiscuous mode [ 747.233667][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 747.233686][ T28] audit: type=1400 audit(1763588633.972:113897): avc: denied { getopt } for pid=17283 comm="syz.3.22078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 747.828917][T17303] 9pnet_fd: Insufficient options for proto=fd [ 748.493717][T17328] 9pnet_fd: Insufficient options for proto=fd [ 748.571970][T17336] 9pnet_fd: Insufficient options for proto=fd [ 749.288655][T17359] 9pnet_fd: Insufficient options for proto=fd [ 749.673833][T17388] 9pnet_fd: Insufficient options for proto=fd [ 751.248640][T17455] 9pnet_fd: Insufficient options for proto=fd [ 751.355439][T17469] netlink: 'syz.0.22158': attribute type 4 has an invalid length. [ 751.438609][T17482] netlink: 'syz.0.22163': attribute type 4 has an invalid length. [ 751.450031][T17483] 9pnet_fd: Insufficient options for proto=fd [ 756.937645][T17705] netlink: 256 bytes leftover after parsing attributes in process `syz.4.22258'. [ 757.363636][T17713] overlayfs: missing 'lowerdir' [ 758.034991][T17784] netlink: 'syz.0.22294': attribute type 4 has an invalid length. [ 758.732430][T17833] netlink: 140 bytes leftover after parsing attributes in process `syz.3.22317'. [ 758.855869][T17838] xt_CT: You must specify a L4 protocol and not use inversions on it [ 759.324294][T17877] overlayfs: failed to clone upperpath [ 759.529933][T17902] 9pnet: Could not find request transport: f [ 760.023566][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22361'. [ 760.562510][T17975] netlink: 84 bytes leftover after parsing attributes in process `syz.3.22381'. [ 760.578119][T17975] netlink: 72 bytes leftover after parsing attributes in process `syz.3.22381'. [ 763.005292][T18031] incfs: Options parsing error. -22 [ 763.010894][T18031] incfs: mount failed -22 [ 763.129629][T18045] netlink: 120 bytes leftover after parsing attributes in process `syz.2.22406'. [ 763.143775][T18045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22406'. [ 763.153654][T18045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22406'. [ 763.163384][T18045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22406'. [ 764.278247][T18114] netlink: 'syz.0.22438': attribute type 4 has an invalid length. [ 764.574265][T18158] netlink: 120 bytes leftover after parsing attributes in process `syz.4.22460'. [ 764.586974][T18158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22460'. [ 764.608243][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22460'. [ 764.625154][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22460'. [ 764.795763][T18194] netlink: 'syz.3.22477': attribute type 4 has an invalid length. [ 765.093972][T18224] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22491'. [ 766.458253][T18322] netlink: 'syz.3.22537': attribute type 4 has an invalid length. [ 767.138338][T18342] overlayfs: missing 'workdir' [ 768.116416][T18409] netlink: 'syz.4.22578': attribute type 4 has an invalid length. [ 768.437544][T18467] netlink: 256 bytes leftover after parsing attributes in process `syz.0.22607'. [ 769.109135][T18503] netlink: 256 bytes leftover after parsing attributes in process `syz.2.22622'. [ 769.700366][T18521] tmpfs: Unknown parameter 'no' [ 769.850389][T18531] netlink: 256 bytes leftover after parsing attributes in process `syz.1.22635'. [ 770.048021][T18555] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 770.067480][T18561] netlink: 256 bytes leftover after parsing attributes in process `syz.2.22646'. [ 771.849296][T18702] netlink: 'syz.1.22703': attribute type 4 has an invalid length. [ 772.403957][T18769] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 772.411985][T18770] netlink: 256 bytes leftover after parsing attributes in process `syz.2.22747'. [ 773.447832][ T28] audit: type=1400 audit(1763588658.167:113898): avc: denied { listen } for pid=18852 comm="syz.3.22788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 773.467112][T18855] overlayfs: missing 'lowerdir' [ 773.672377][T18871] netlink: 'syz.3.22796': attribute type 4 has an invalid length. [ 774.877057][T18960] netlink: 256 bytes leftover after parsing attributes in process `syz.1.22836'. [ 775.167648][T18986] netlink: 256 bytes leftover after parsing attributes in process `syz.0.22848'. [ 775.359917][T19009] 9pnet_fd: Insufficient options for proto=fd [ 775.404899][T19011] netlink: 256 bytes leftover after parsing attributes in process `syz.3.22860'. [ 775.607345][T19037] netlink: 256 bytes leftover after parsing attributes in process `syz.3.22874'. [ 775.812824][T19069] netlink: 256 bytes leftover after parsing attributes in process `syz.4.22889'. [ 776.069122][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22895'. [ 776.483022][T19115] netlink: 256 bytes leftover after parsing attributes in process `syz.3.22909'. [ 777.946425][T19143] 9pnet_fd: Insufficient options for proto=fd [ 777.950304][T19147] overlayfs: missing 'lowerdir' [ 778.056557][T19165] 9pnet_fd: Insufficient options for proto=fd [ 778.104645][T19175] 9pnet_fd: Insufficient options for proto=fd [ 778.270847][T19196] 9pnet_fd: Insufficient options for proto=fd [ 778.795008][T19294] netlink: 'syz.2.22994': attribute type 4 has an invalid length. [ 778.808216][T19294] netlink: 'syz.2.22994': attribute type 4 has an invalid length. [ 781.428516][T19341] fuse: Bad value for 'rootmode' [ 781.573619][T19381] netlink: 44 bytes leftover after parsing attributes in process `syz.1.23033'. [ 781.582864][T19381] netlink: 43 bytes leftover after parsing attributes in process `syz.1.23033'. [ 781.592459][T19381] netlink: 'syz.1.23033': attribute type 5 has an invalid length. [ 781.601205][T19381] netlink: 43 bytes leftover after parsing attributes in process `syz.1.23033'. [ 782.124410][T19409] netlink: 'syz.4.23046': attribute type 4 has an invalid length. [ 782.255580][T19427] overlayfs: failed to resolve './file1': -2 [ 782.780604][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23059'. [ 782.898124][T19456] fuse: Bad value for 'group_id' [ 783.231190][T19476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23077'. [ 783.277802][T19482] netlink: 'syz.2.23079': attribute type 4 has an invalid length. [ 784.146439][T19513] netlink: 'syz.4.23091': attribute type 4 has an invalid length. [ 784.165542][T19515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23094'. [ 784.634214][T19542] netlink: 'syz.0.23105': attribute type 4 has an invalid length. [ 784.843770][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 784.940485][T19567] netlink: 'syz.3.23117': attribute type 4 has an invalid length. [ 785.336981][T19604] netlink: 76 bytes leftover after parsing attributes in process `syz.2.23134'. [ 785.800568][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23151'. [ 785.942074][T19671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23165'. [ 786.065905][T19674] syz.2.23161[19674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.065995][T19674] syz.2.23161[19674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 787.592120][T19720] fuse: Bad value for 'rootmode' [ 787.772090][T19744] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 787.790469][T19744] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 788.145967][T19759] overlayfs: missing 'workdir' [ 788.413232][T19805] VFS: Mount too revealing [ 788.715349][T19827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19827 comm=syz.1.23232 [ 788.873607][T19840] fuse: Bad value for 'rootmode' [ 789.049928][T19862] tmpfs: Unknown parameter 'no' [ 789.148279][T19868] fuse: Bad value for 'rootmode' [ 789.162437][T19871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23255'. [ 789.393700][T19898] fuse: Bad value for 'rootmode' [ 790.390566][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 790.941427][T19926] fuse: Bad value for 'rootmode' [ 791.034224][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23284'. [ 791.765163][T19974] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 791.774115][T19974] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 792.111468][T19992] netlink: 'syz.4.23310': attribute type 4 has an invalid length. [ 792.123874][T19992] netlink: 'syz.4.23310': attribute type 5 has an invalid length. [ 792.141531][T19992] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.23310'. [ 793.012656][T20045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23334'. [ 793.131947][T20058] netlink: 268 bytes leftover after parsing attributes in process `syz.4.23340'. [ 793.248244][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23345'. [ 793.429833][T20079] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.23350'. [ 793.452333][T20081] netlink: 268 bytes leftover after parsing attributes in process `syz.4.23351'. [ 793.486140][T20083] tipc: Failed to remove unknown binding: 66,1,1/345992562:3755565374/3755565376 [ 793.500913][T20083] tipc: Failed to remove unknown binding: 66,1,1/345992562:3755565374/3755565376 [ 793.511221][T20087] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1279 sclass=netlink_xfrm_socket pid=20087 comm=syz.4.23354 [ 793.525955][T20083] tipc: Failed to remove unknown binding: 66,1,1/345992562:3755565374/3755565376 [ 793.566949][T20093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23357'. [ 793.738228][T20107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23363'. [ 793.977143][T20133] tmpfs: Bad value for 'mpol' [ 797.521357][T20303] __nla_validate_parse: 1 callbacks suppressed [ 797.521377][T20303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23452'. [ 798.330672][T20321] overlayfs: failed to clone upperpath [ 799.112446][T20374] netlink: 268 bytes leftover after parsing attributes in process `syz.3.23485'. [ 799.274543][T20401] netlink: 268 bytes leftover after parsing attributes in process `syz.4.23498'. [ 799.336203][T20397] fuse: Bad value for 'rootmode' [ 799.464775][T20428] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 799.490726][ T1387] ip6_tunnel: K xmit: Local address not yet configured! [ 800.897625][ T1387] ip6_tunnel: K xmit: Local address not yet configured! [ 801.137234][T20462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23523'. [ 801.150426][T20466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20466 comm=syz.0.23525 [ 801.319303][T20482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23534'. [ 801.330158][T20486] tipc: Enabling of bearer rejected, failed to enable media [ 801.370394][T20489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23536'. [ 801.391680][T20492] netlink: 84 bytes leftover after parsing attributes in process `syz.0.23538'. [ 801.408233][T20492] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23538'. [ 801.483479][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 801.494471][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 801.601321][T20515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23549'. [ 802.282560][T20554] netlink: 116 bytes leftover after parsing attributes in process `syz.1.23560'. [ 804.230114][T20626] __nla_validate_parse: 3 callbacks suppressed [ 804.230137][T20626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23600'. [ 804.449458][T20652] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23612'. [ 805.684602][T20770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23668'. [ 806.370208][T20869] tipc: Failed to remove unknown binding: 66,1,1/3665240403:3691628307/3691628309 [ 806.381052][T20869] tipc: Failed to remove unknown binding: 66,1,1/3665240403:3691628307/3691628309 [ 806.390731][T20869] tipc: Failed to remove unknown binding: 66,1,1/3665240403:3691628307/3691628309 [ 806.693426][T20920] overlayfs: missing 'lowerdir' [ 807.029783][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 807.029908][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 807.548346][T20944] tipc: Failed to remove unknown binding: 66,1,1/3665240403:180008176/180008178 [ 807.561040][T20944] tipc: Failed to remove unknown binding: 66,1,1/3665240403:180008176/180008178 [ 807.570344][T20944] tipc: Failed to remove unknown binding: 66,1,1/3665240403:180008176/180008178 [ 809.543116][T21065] fuse: Bad value for 'rootmode' [ 810.480518][T21197] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1849859440/1849859442 [ 810.490244][T21197] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1849859440/1849859442 [ 810.499555][T21197] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1849859440/1849859442 [ 811.732716][T21222] tipc: Failed to remove unknown binding: 66,1,1/3665240403:2637419761/2637419763 [ 811.784333][T21222] tipc: Failed to remove unknown binding: 66,1,1/3665240403:2637419761/2637419763 [ 811.810597][T21222] tipc: Failed to remove unknown binding: 66,1,1/3665240403:2637419761/2637419763 [ 812.576817][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 812.903555][T21310] 9pnet_fd: Insufficient options for proto=fd [ 813.189025][T21346] tipc: Failed to remove unknown binding: 66,1,1/3665240403:3644889992/3644889994 [ 813.198976][T21346] tipc: Failed to remove unknown binding: 66,1,1/3665240403:3644889992/3644889994 [ 813.208763][T21346] tipc: Failed to remove unknown binding: 66,1,1/3665240403:3644889992/3644889994 [ 813.682587][T21376] tipc: Failed to remove unknown binding: 66,1,1/2799130081:1938182168/1938182170 [ 813.692484][T21376] tipc: Failed to remove unknown binding: 66,1,1/2799130081:1938182168/1938182170 [ 813.701767][T21376] tipc: Failed to remove unknown binding: 66,1,1/2799130081:1938182168/1938182170 [ 813.894957][T21399] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3009158807/3009158809 [ 813.904835][T21399] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3009158807/3009158809 [ 813.914231][T21399] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3009158807/3009158809 [ 814.033123][T21420] tipc: Failed to remove unknown binding: 66,1,1/345992562:714933239/714933241 [ 814.042877][T21420] tipc: Failed to remove unknown binding: 66,1,1/345992562:714933239/714933241 [ 814.052314][T21420] tipc: Failed to remove unknown binding: 66,1,1/345992562:714933239/714933241 [ 814.938577][T21466] fuse: Bad value for 'rootmode' [ 815.631022][T21527] fuse: Bad value for 'rootmode' [ 815.861844][T21575] fuse: Bad value for 'rootmode' [ 817.128874][T21608] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 817.374565][T21618] fuse: Bad value for 'rootmode' [ 817.381013][T21625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24060'. [ 817.830237][T21655] fuse: Bad value for 'rootmode' [ 817.910023][T21685] overlayfs: failed to resolve './file1': -2 [ 817.928497][T21689] netlink: 32 bytes leftover after parsing attributes in process `syz.3.24089'. [ 818.308037][T21754] 9pnet_fd: Insufficient options for proto=fd [ 818.420279][ T28] audit: type=1400 audit(1763588699.679:113899): avc: denied { map } for pid=21774 comm="syz.3.24130" path="socket:[279193]" dev="sockfs" ino=279193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 818.556894][T21804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21804 comm=syz.1.24142 [ 818.689691][T21812] fuse: Bad value for 'rootmode' [ 818.786745][T21846] overlayfs: missing 'lowerdir' [ 818.936130][T21862] fuse: Bad value for 'rootmode' [ 819.024336][T21864] xt_CT: You must specify a L4 protocol and not use inversions on it [ 819.094858][T21865] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 819.375710][T21877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24178'. [ 819.405478][T21881] 9pnet_fd: Insufficient options for proto=fd [ 819.446821][T21891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24184'. [ 819.532444][T21902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24190'. [ 819.571056][T21912] 9pnet: Could not find request transport: 00000000000000000004 [ 819.593790][T21916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24197'. [ 819.685090][T21936] 9pnet_fd: Insufficient options for proto=fd [ 819.799609][T21957] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 820.014233][T21991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24233'. [ 820.435193][T22004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24238'. [ 820.920547][T22036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24250'. [ 820.927089][T22040] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 822.087248][T22078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24272'. [ 822.637930][T22130] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 822.753869][T22136] netlink: 'syz.0.24298': attribute type 13 has an invalid length. [ 822.763352][T22136] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 822.902748][T22149] netlink: 'syz.4.24303': attribute type 4 has an invalid length. [ 824.002225][T22196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24325'. [ 824.213733][T22208] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 824.335541][T22220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24337'. [ 825.302421][T22295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24369'. [ 825.656252][T22311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24374'. [ 827.112817][T22349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24394'. [ 827.222486][T22360] netlink: 'syz.0.24399': attribute type 4 has an invalid length. [ 827.243562][T22363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24401'. [ 827.518565][T22391] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24415'. [ 827.548522][T22397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24416'. [ 827.922488][T22444] netlink: 'syz.3.24439': attribute type 4 has an invalid length. [ 828.007045][T22459] 9pnet_fd: Insufficient options for proto=fd [ 828.800043][T22487] 9pnet_fd: Insufficient options for proto=fd [ 829.133548][T22516] 9pnet_fd: Insufficient options for proto=fd [ 829.249755][T22530] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 829.366776][T22540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24481'. [ 829.460107][T22546] 9pnet_fd: Insufficient options for proto=fd [ 829.498870][T22547] netlink: 268 bytes leftover after parsing attributes in process `syz.0.24483'. [ 829.714814][T22559] incfs: Backing dir is not set, filesystem can't be mounted. [ 829.744264][T22559] incfs: mount failed -2 [ 830.289203][T22571] 9pnet_fd: Insufficient options for proto=fd [ 830.335951][T22575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24497'. [ 830.392686][T22577] netlink: 188 bytes leftover after parsing attributes in process `syz.0.24498'. [ 830.643241][T22596] 9pnet_fd: Insufficient options for proto=fd [ 830.857309][T22604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24511'. [ 830.954908][T22609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24513'. [ 831.037254][T22613] device veth0 entered promiscuous mode [ 831.075744][T22613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24515'. [ 831.130248][T22613] device veth0 left promiscuous mode [ 831.268667][T22622] 9pnet_fd: Insufficient options for proto=fd [ 831.588878][T22649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24530'. [ 831.685793][T22655] 9pnet_fd: Insufficient options for proto=fd [ 832.957417][T22699] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 832.982836][T22699] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 833.008589][ T1387] ip6_tunnel: K xmit: Local address not yet configured! [ 833.330154][T22718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24558'. [ 833.901857][T22736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24566'. [ 834.039075][ T1387] ip6_tunnel: K xmit: Local address not yet configured! [ 834.381190][T22745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24568'. [ 835.903406][T22847] 9pnet_fd: Insufficient options for proto=fd [ 835.948392][T22852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24615'. [ 835.975902][T22859] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 836.001317][T22864] device veth0 entered promiscuous mode [ 836.013714][T22861] device veth0 left promiscuous mode [ 836.123064][T22882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24630'. [ 836.149207][T22886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24632'. [ 836.175283][T22885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24631'. [ 836.595004][T22929] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 836.668430][T22934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24656'. [ 836.849383][T22956] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 837.545454][T23023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24699'. [ 837.670518][T23039] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 837.829584][T23052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24712'. [ 837.903656][T23065] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 838.101394][T23088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24730'. [ 838.107928][T23091] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 838.425102][T23122] netlink: 'syz.3.24745': attribute type 4 has an invalid length. [ 838.520304][T23132] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 838.739306][T23150] netlink: 'syz.1.24757': attribute type 4 has an invalid length. [ 838.999476][T23169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24766'. [ 839.049712][T23175] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 839.317071][T23188] syz.4.24772[23188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 839.317551][T23188] syz.4.24772[23188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 840.863091][T23231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24795'. [ 841.022906][T23244] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 841.123792][T23255] netlink: 'syz.1.24806': attribute type 4 has an invalid length. [ 841.148828][T23257] device veth0 entered promiscuous mode [ 841.158563][T23257] device veth0 left promiscuous mode [ 841.402433][T23281] __nla_validate_parse: 1 callbacks suppressed [ 841.402455][T23281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24818'. [ 841.817690][T23325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24839'. [ 841.875874][T23333] 9pnet: Could not find request transport: fd0x0000000000000007 [ 841.899305][T23335] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 841.967999][T23339] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24846'. [ 842.015436][T23347] netlink: 'syz.4.24850': attribute type 4 has an invalid length. [ 842.054255][T23351] device veth0 entered promiscuous mode [ 842.060210][T23351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24852'. [ 842.070350][T23351] device veth0 left promiscuous mode [ 842.176662][T23355] 9pnet: Could not find request transport: fd0x0000000000000007 [ 842.196534][T23357] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 842.266228][T23369] netlink: 'syz.4.24861': attribute type 4 has an invalid length. [ 842.289346][T23375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24864'. [ 842.327553][T23379] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 842.716485][T23425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24888'. [ 843.312371][T23472] netlink: 'syz.2.24908': attribute type 4 has an invalid length. [ 843.338331][T23474] device veth0 entered promiscuous mode [ 843.344416][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24909'. [ 843.356921][T23474] device veth0 left promiscuous mode [ 843.634639][T23500] netlink: 'syz.4.24920': attribute type 4 has an invalid length. [ 843.898590][T23539] netlink: 368 bytes leftover after parsing attributes in process `syz.4.24938'. [ 843.898737][T23538] 9pnet_fd: Insufficient options for proto=fd [ 844.523811][T23564] syz.3.24944[23564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 844.524590][T23564] syz.3.24944[23564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 845.528540][T23576] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 846.332473][T23614] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 846.552070][T23631] syz.0.24969[23631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 846.552559][T23631] syz.0.24969[23631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 847.022893][T23635] netlink: 'syz.3.24976': attribute type 4 has an invalid length. [ 847.820202][T23660] netlink: 120 bytes leftover after parsing attributes in process `syz.1.24987'. [ 847.829792][T23660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24987'. [ 847.839855][T23660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24987'. [ 847.849074][T23660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24987'. [ 847.885672][T23667] netlink: 'syz.2.24990': attribute type 4 has an invalid length. [ 848.465382][T23693] syz.2.24997[23693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.465647][T23693] syz.2.24997[23693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 849.517051][T23704] netlink: 'syz.3.25005': attribute type 4 has an invalid length. [ 849.845604][T23730] 9pnet_fd: Insufficient options for proto=fd [ 849.923946][T23737] syz.4.25012[23737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 849.924371][T23737] syz.4.25012[23737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 850.381809][T23738] netlink: 'syz.2.25019': attribute type 4 has an invalid length. [ 851.213032][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25031'. [ 851.287796][T23774] netlink: 'syz.3.25033': attribute type 4 has an invalid length. [ 851.373748][T23777] syz.1.25020[23777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 851.374300][T23777] syz.1.25020[23777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 852.601680][ T28] audit: type=1400 audit(1763588731.231:113900): avc: denied { write } for pid=23781 comm="syz.2.25036" name="/" dev="configfs" ino=13472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 852.970630][T23832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25057'. [ 853.122603][T23844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25063'. [ 853.203885][T23857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25068'. [ 853.701928][T23898] device veth0 entered promiscuous mode [ 853.752867][T23898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25084'. [ 853.806915][T23898] device veth0 left promiscuous mode [ 854.368273][T23910] syz.3.25089 (23910) used greatest stack depth: 19200 bytes left [ 854.443231][T23921] netlink: 128 bytes leftover after parsing attributes in process `syz.0.25091'. [ 854.452542][T23921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.25091'. [ 854.461737][T23921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.25091'. [ 854.816112][T23926] netlink: 104 bytes leftover after parsing attributes in process `syz.3.25093'. [ 854.849953][T23928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25095'. [ 855.401393][T23800] syz.3.25044 (23800) used greatest stack depth: 15616 bytes left [ 855.518650][T23821] syz.3.25050 (23821) used greatest stack depth: 14144 bytes left [ 857.771607][T24021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.25132'. [ 859.061829][T24075] device veth1 left promiscuous mode [ 859.067593][T24075] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 859.148821][ T39] ip6_tunnel: K xmit: Local address not yet configured! [ 859.666658][T24109] netlink: 40 bytes leftover after parsing attributes in process `syz.4.25167'. [ 859.715538][T24115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25169'. [ 860.068320][ T39] ip6_tunnel: K xmit: Local address not yet configured! [ 860.175251][T24146] device veth0 entered promiscuous mode [ 860.209213][T24146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25183'. [ 860.266683][T24146] device veth0 left promiscuous mode [ 860.349290][T24156] netlink: 120 bytes leftover after parsing attributes in process `syz.4.25187'. [ 860.402228][T24156] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25187'. [ 860.777190][T24191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25200'. [ 860.810822][T24195] netlink: 'syz.0.25202': attribute type 4 has an invalid length. [ 860.847793][T24195] netlink: 'syz.0.25202': attribute type 5 has an invalid length. [ 860.855786][T24195] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.25202'. [ 861.239493][T24217] netlink: 120 bytes leftover after parsing attributes in process `syz.2.25210'. [ 861.265661][T24217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25210'. [ 861.320861][T24217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25210'. [ 862.848242][T24269] 9pnet_fd: Insufficient options for proto=fd [ 863.259202][T24291] syz.3.25234[24291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 863.259614][T24291] syz.3.25234[24291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 864.505887][T24298] 9pnet_fd: Insufficient options for proto=fd [ 865.481060][T24345] __nla_validate_parse: 1 callbacks suppressed [ 865.481082][T24345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25260'. [ 866.319142][T24412] 9pnet: Could not find request transport: fd0x0000000000000005 [ 866.708218][T24428] netlink: 68 bytes leftover after parsing attributes in process `syz.3.25296'. [ 866.926993][T24431] device gretap0 left promiscuous mode [ 866.936069][T24431] device sit0 left promiscuous mode [ 866.943893][T24431] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 866.966227][T24431] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 866.974099][T24431] device veth2 left promiscuous mode [ 866.984324][T24431] device veth4 left promiscuous mode [ 866.993452][T24431] device veth6 left promiscuous mode [ 867.001154][T24431] device veth9 left promiscuous mode [ 867.012592][T24431] device ip6gre1 left promiscuous mode [ 867.019182][T24431] device ip6gre2 left promiscuous mode [ 867.025787][T24431] device ip6gre3 left promiscuous mode [ 867.040409][T24431] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 867.214148][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 867.282601][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 867.291043][T24442] 9pnet: Could not find request transport: fd0x0000000000000005 [ 870.031927][T24481] 9pnet: Could not find request transport: fd0x0000000000000005 [ 870.103873][T24485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25311'. [ 870.121977][T24490] overlayfs: missing 'lowerdir' [ 870.357699][T24516] 9pnet_fd: Insufficient options for proto=fd [ 870.668407][T24524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25330'. [ 870.840126][T24543] netlink: 84 bytes leftover after parsing attributes in process `syz.1.25338'. [ 871.186353][T24551] netlink: 40 bytes leftover after parsing attributes in process `syz.1.25341'. [ 871.237826][T24559] 9pnet_fd: Insufficient options for proto=fd [ 872.324777][T24607] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25364'. [ 872.384303][T24613] tipc: Can't bind to reserved service type 0 [ 872.492585][T24632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25375'. [ 872.557540][T24641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25379'. [ 872.780438][T24649] xt_CT: No such helper "pptp" [ 873.880087][T24670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.25390'. [ 874.540300][T24697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25401'. [ 874.762650][T24706] netlink: 104 bytes leftover after parsing attributes in process `syz.2.25405'. [ 875.639604][ T28] audit: type=1401 audit(1763588752.481:113901): op=setxattr invalid_context="system_u:object_r:usr_t:s0" [ 877.469149][ T28] audit: type=1400 audit(1763588754.188:113902): avc: denied { accept } for pid=24827 comm="syz.3.25450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 877.509970][T24830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25451'. [ 877.853622][T24862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25467'. [ 878.129071][T24891] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25479'. [ 878.616934][T24960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25508'. [ 879.088922][T25007] xt_policy: neither incoming nor outgoing policy selected [ 879.536979][T25031] netlink: 'syz.1.25539': attribute type 4 has an invalid length. [ 880.460329][T25090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25565'. [ 880.483697][T25092] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 880.492622][T25092] overlayfs: missing 'lowerdir' [ 880.539035][T25098] netlink: 208 bytes leftover after parsing attributes in process `syz.0.25570'. [ 882.250036][T25236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25631'. [ 882.261212][T25240] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 883.428169][T25318] netlink: 'syz.4.25666': attribute type 4 has an invalid length. [ 883.478664][T25318] netlink: 'syz.4.25666': attribute type 5 has an invalid length. [ 883.486544][T25318] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.25666'. [ 884.497256][T25384] overlayfs: missing 'workdir' [ 885.611958][T25428] netlink: 40 bytes leftover after parsing attributes in process `syz.4.25716'. [ 886.578560][T25481] netlink: 720 bytes leftover after parsing attributes in process `syz.0.25739'. [ 886.772763][ T28] audit: type=1326 audit(1763588762.783:113903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.4.25750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 886.817103][ T28] audit: type=1326 audit(1763588762.801:113904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.4.25750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 886.867507][ T28] audit: type=1326 audit(1763588762.801:113905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.4.25750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 886.892381][ T28] audit: type=1326 audit(1763588762.801:113906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.4.25750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 886.923948][ T28] audit: type=1326 audit(1763588762.801:113907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.4.25750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 886.948178][ T28] audit: type=1326 audit(1763588762.801:113908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.4.25750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 886.986125][ T28] audit: type=1326 audit(1763588762.801:113909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.4.25750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 887.026179][ T28] audit: type=1326 audit(1763588762.801:113910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.4.25750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 887.054772][ T28] audit: type=1326 audit(1763588762.801:113911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.4.25750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 887.078847][ T28] audit: type=1326 audit(1763588762.801:113912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.4.25750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 887.217214][T25561] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25777'. [ 887.226426][T25561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25777'. [ 887.235778][T25561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25777'. [ 887.246076][T25561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25777'. [ 887.379864][T25588] netlink: 64 bytes leftover after parsing attributes in process `syz.4.25790'. [ 888.089269][T25661] netlink: 208 bytes leftover after parsing attributes in process `syz.1.25824'. [ 888.235066][T25679] netlink: 'syz.0.25832': attribute type 8 has an invalid length. [ 888.243126][T25679] netlink: 60 bytes leftover after parsing attributes in process `syz.0.25832'. [ 890.138822][T25786] netlink: 84 bytes leftover after parsing attributes in process `syz.2.25867'. [ 890.174500][T25791] netlink: 208 bytes leftover after parsing attributes in process `syz.2.25869'. [ 890.773738][T25839] 9pnet: Could not find request transport: 0xffffffffffffffff [ 890.978517][T25853] netlink: 'syz.1.25899': attribute type 16 has an invalid length. [ 890.987032][T25853] netlink: 64130 bytes leftover after parsing attributes in process `syz.1.25899'. [ 891.023161][T25858] netlink: 84 bytes leftover after parsing attributes in process `syz.1.25900'. [ 891.046668][T25862] fuse: Unknown parameter 'f' [ 891.261001][T25889] 9pnet_fd: Insufficient options for proto=fd [ 891.292542][T25897] netlink: 'syz.1.25919': attribute type 4 has an invalid length. [ 891.301980][T25897] netlink: 'syz.1.25919': attribute type 5 has an invalid length. [ 891.309958][T25897] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.25919'. [ 892.633655][T25945] netlink: 96 bytes leftover after parsing attributes in process `syz.4.25941'. [ 892.984247][T25983] netlink: 208 bytes leftover after parsing attributes in process `syz.2.25957'. [ 893.273701][T26009] netlink: 208 bytes leftover after parsing attributes in process `syz.4.25970'. [ 893.557773][T26038] netlink: 208 bytes leftover after parsing attributes in process `syz.3.25983'. [ 893.684695][T26059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25993'. [ 894.428877][T26118] syz.1.26021[26118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 894.428992][T26118] syz.1.26021[26118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 894.443057][T26118] syz.1.26021[26118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 894.455202][T26118] syz.1.26021[26118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 895.727063][T26179] __nla_validate_parse: 5 callbacks suppressed [ 895.727100][T26179] netlink: 208 bytes leftover after parsing attributes in process `syz.0.26046'. [ 895.772784][T26182] wireguard: wg1: Could not create IPv4 socket [ 895.920831][T26195] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 895.935453][T26195] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 897.046415][T26240] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 897.055827][T26240] FAT-fs (loop1): unable to read boot sector [ 897.337596][T26244] netlink: 'syz.2.26074': attribute type 4 has an invalid length. [ 898.506422][T26314] netlink: 44 bytes leftover after parsing attributes in process `syz.3.26106'. [ 899.744007][T26395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.26134'. [ 901.970045][T26431] syz.0.26156[26431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 901.970139][T26431] syz.0.26156[26431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 904.025066][T26472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26472 comm=syz.2.26174 [ 904.105674][T26480] netlink: 108 bytes leftover after parsing attributes in process `syz.2.26178'. [ 904.593844][T26508] overlayfs: missing 'workdir' [ 904.608832][T26509] netlink: 108 bytes leftover after parsing attributes in process `syz.4.26190'. [ 904.687271][T26523] netlink: 208 bytes leftover after parsing attributes in process `syz.1.26197'. [ 904.900762][T26541] overlayfs: missing 'lowerdir' [ 905.288958][T26559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26213'. [ 907.429783][T26642] netlink: 116 bytes leftover after parsing attributes in process `syz.3.26249'. [ 907.444807][T26642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26249'. [ 907.471174][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 907.471192][ T28] audit: type=1400 audit(1763588781.882:113919): avc: denied { setattr } for pid=26650 comm="syz.3.26253" name="/" dev="configfs" ino=13472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 907.745528][T26682] netlink: 'syz.4.26268': attribute type 4 has an invalid length. [ 908.764036][T26719] netlink: 276 bytes leftover after parsing attributes in process `syz.0.26283'. [ 909.627733][T26743] netlink: 'syz.2.26297': attribute type 4 has an invalid length. [ 909.801057][T26755] x_tables: duplicate underflow at hook 1 [ 911.169654][T26786] fuse: Invalid rootmode [ 912.324716][T26829] netlink: 44 bytes leftover after parsing attributes in process `syz.1.26333'. [ 912.333985][T26829] netlink: 32 bytes leftover after parsing attributes in process `syz.1.26333'. [ 913.197639][T26890] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 913.207169][T26890] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 914.203938][T26918] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 914.213092][T26918] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 917.558746][T27005] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 917.568175][T27005] overlayfs: missing 'lowerdir' [ 917.716894][T27028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26421'. [ 917.726860][T27028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26421'. [ 917.750649][T27034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26424'. [ 919.823318][T27084] 9pnet_fd: Insufficient options for proto=fd [ 920.002742][T27088] netlink: 72 bytes leftover after parsing attributes in process `syz.0.26446'. [ 920.021220][T27076] netlink: 'syz.1.26442': attribute type 1 has an invalid length. [ 920.078122][T27094] netlink: 116 bytes leftover after parsing attributes in process `syz.0.26449'. [ 920.087572][T27094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26449'. [ 920.118452][T27096] netlink: 208 bytes leftover after parsing attributes in process `syz.2.26450'. [ 920.299013][T27122] netlink: 208 bytes leftover after parsing attributes in process `syz.3.26462'. [ 921.533527][T27155] netlink: 208 bytes leftover after parsing attributes in process `syz.1.26475'. [ 921.617245][T27164] 9pnet_fd: Insufficient options for proto=fd [ 921.864433][T27181] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 923.505932][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 923.731192][T27197] netlink: 208 bytes leftover after parsing attributes in process `syz.3.26491'. [ 924.755371][T27252] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pid=27252 comm=syz.2.26515 [ 925.019772][T27263] netlink: 'syz.0.26520': attribute type 4 has an invalid length. [ 926.793531][T27289] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 926.806745][T27289] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 927.766486][ T28] audit: type=1326 audit(1763588800.621:113920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27306 comm="syz.0.26539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 927.794183][ T28] audit: type=1326 audit(1763588800.639:113921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27306 comm="syz.0.26539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 927.830149][ T28] audit: type=1326 audit(1763588800.648:113922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27310 comm="syz.0.26539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8c021c2005 code=0x7ffc0000 [ 927.921979][T27323] netlink: 72 bytes leftover after parsing attributes in process `syz.2.26546'. [ 927.963560][ T28] audit: type=1326 audit(1763588800.796:113923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27310 comm="syz.0.26539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 928.004716][ T28] audit: type=1326 audit(1763588800.815:113924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27306 comm="syz.0.26539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 928.039533][ T28] audit: type=1326 audit(1763588800.815:113925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27306 comm="syz.0.26539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x7ffc0000 [ 928.111298][T27332] netlink: 'syz.4.26550': attribute type 4 has an invalid length. [ 928.197102][T27336] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 928.205924][T27336] overlayfs: missing 'lowerdir' [ 928.937389][T27357] netlink: 72 bytes leftover after parsing attributes in process `syz.3.26561'. [ 929.052430][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 929.263532][T27387] overlayfs: failed to clone lowerpath [ 929.280321][T27389] netlink: 'syz.4.26575': attribute type 4 has an invalid length. [ 929.921101][T27417] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 929.930437][T27417] FAT-fs (loop1): unable to read boot sector [ 931.419580][T27448] netlink: 'syz.3.26598': attribute type 4 has an invalid length. [ 933.226484][T27485] netlink: 72 bytes leftover after parsing attributes in process `syz.2.26614'. [ 933.400233][T27497] netlink: 'syz.2.26619': attribute type 4 has an invalid length. [ 933.777468][T27509] syz.3.26623[27509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 933.777941][T27509] syz.3.26623[27509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 935.009266][T27518] netlink: 72 bytes leftover after parsing attributes in process `syz.2.26627'. [ 935.066358][T27524] netlink: 72 bytes leftover after parsing attributes in process `syz.2.26630'. [ 935.233813][T27543] netlink: 128 bytes leftover after parsing attributes in process `syz.0.26638'. [ 935.311242][T27549] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 935.320137][T27549] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 935.341103][T27551] netlink: 72 bytes leftover after parsing attributes in process `syz.1.26641'. [ 935.666031][T27574] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 935.675065][T27574] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 935.699917][T27576] netlink: 72 bytes leftover after parsing attributes in process `syz.0.26653'. [ 936.165086][T27596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26662'. [ 936.187720][T27600] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 936.192151][T27602] netlink: 72 bytes leftover after parsing attributes in process `syz.2.26665'. [ 936.196683][T27600] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 937.713092][T27633] netlink: 72 bytes leftover after parsing attributes in process `syz.3.26677'. [ 937.823539][T27648] netlink: 72 bytes leftover after parsing attributes in process `syz.1.26685'. [ 938.794913][T27690] __nla_validate_parse: 1 callbacks suppressed [ 938.794938][T27690] netlink: 72 bytes leftover after parsing attributes in process `syz.3.26703'. [ 939.320413][T27720] netlink: 72 bytes leftover after parsing attributes in process `syz.1.26717'. [ 939.842417][T27733] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 939.851370][T27733] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 940.167108][T27751] netlink: 'syz.2.26730': attribute type 4 has an invalid length. [ 940.500794][T27762] netlink: 72 bytes leftover after parsing attributes in process `syz.1.26735'. [ 940.547087][T27767] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.26737'. [ 940.556503][T27767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26737'. [ 940.712351][T27771] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 940.721172][T27771] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 941.964387][ T28] audit: type=1326 audit(1763588813.720:113926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27791 comm="syz.2.26747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x0 [ 942.043536][T27798] netlink: 72 bytes leftover after parsing attributes in process `syz.2.26749'. [ 942.328171][T27835] netlink: 72 bytes leftover after parsing attributes in process `syz.3.26765'. [ 943.143026][T27869] netlink: 72 bytes leftover after parsing attributes in process `syz.1.26779'. [ 945.692101][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 945.908618][T27898] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 945.917833][T27898] FAT-fs (loop3): unable to read boot sector [ 946.343221][T27936] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 946.352055][T27936] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 947.460492][T27985] 9pnet_fd: Insufficient options for proto=fd [ 949.934577][T28044] netlink: 72 bytes leftover after parsing attributes in process `syz.4.26848'. [ 950.767029][T28088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26864'. [ 951.238936][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 952.057852][T28117] netlink: 72 bytes leftover after parsing attributes in process `syz.3.26878'. [ 953.212777][T28197] syz.0.26905[28197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 953.213186][T28197] syz.0.26905[28197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 954.721511][T28241] syz.4.26928[28241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 954.733698][T28241] syz.4.26928[28241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 955.878571][T28246] 9pnet: p9_errstr2errno: server reported unknown error [ 957.133099][ T28] audit: type=1326 audit(1763588827.726:113927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28307 comm="syz.2.26958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 957.167770][ T28] audit: type=1326 audit(1763588827.735:113928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28307 comm="syz.2.26958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 957.192303][ T28] audit: type=1326 audit(1763588827.735:113929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28307 comm="syz.2.26958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 957.217551][ T28] audit: type=1326 audit(1763588827.735:113930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28307 comm="syz.2.26958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 957.243396][ T28] audit: type=1326 audit(1763588827.735:113931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28307 comm="syz.2.26958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 957.280370][ T28] audit: type=1326 audit(1763588827.735:113932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28307 comm="syz.2.26958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 957.338773][ T28] audit: type=1326 audit(1763588827.735:113933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28307 comm="syz.2.26958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 957.362719][ T28] audit: type=1326 audit(1763588827.735:113934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28307 comm="syz.2.26958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 957.388685][ T28] audit: type=1326 audit(1763588827.735:113935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28307 comm="syz.2.26958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 957.996542][ T28] audit: type=1326 audit(1763588827.735:113936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28307 comm="syz.2.26958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418f749 code=0x7ffc0000 [ 958.020584][T28319] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 958.029630][T28319] overlayfs: missing 'lowerdir' [ 958.632766][T28352] netlink: 72 bytes leftover after parsing attributes in process `syz.4.26977'. [ 959.134014][T28360] netlink: 72 bytes leftover after parsing attributes in process `syz.3.26980'. [ 960.456810][T28414] 9pnet_fd: Insufficient options for proto=fd [ 960.975785][T28430] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.27006'. [ 960.993716][T28430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27006'. [ 961.482810][T28456] netlink: 72 bytes leftover after parsing attributes in process `syz.1.27017'. [ 961.955361][T28466] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.27021'. [ 961.964785][T28466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27021'. [ 962.873995][T28515] 9pnet_fd: Insufficient options for proto=fd [ 963.146253][T28544] 9pnet_fd: Insufficient options for proto=fd [ 963.721099][T28572] 9pnet_fd: Insufficient options for proto=fd [ 964.240464][T28600] 9pnet_fd: Insufficient options for proto=fd [ 964.484101][T28620] netlink: 72 bytes leftover after parsing attributes in process `syz.0.27087'. [ 964.504973][T28622] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.27088'. [ 964.514438][T28622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.27088'. [ 964.996471][T28636] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.27094'. [ 965.005815][T28636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27094'. [ 965.130031][T28645] 9pnet_fd: Insufficient options for proto=fd [ 965.147450][T28647] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.27099'. [ 965.156880][T28647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27099'. [ 965.357048][T28651] netlink: 72 bytes leftover after parsing attributes in process `syz.1.27101'. [ 966.070831][T28677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27112'. [ 966.093582][T28677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27112'. [ 966.114114][T28677] device veth19 entered promiscuous mode [ 966.150433][T28685] 9pnet_fd: Insufficient options for proto=fd [ 968.846301][T28808] 9pnet_fd: Insufficient options for proto=fd [ 969.580099][T28871] 9pnet_fd: Insufficient options for proto=fd [ 969.978917][T28907] 9pnet_fd: Insufficient options for proto=fd [ 970.303161][T28932] 9pnet_fd: Insufficient options for proto=fd [ 970.310517][T28933] 9pnet: Could not find request transport: fd0x0000000000000008 [ 970.471819][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 970.471847][ T28] audit: type=1326 audit(1763588840.038:113958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.4.27219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 970.597908][ T28] audit: type=1326 audit(1763588840.085:113959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.4.27219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 970.623837][ T28] audit: type=1326 audit(1763588840.085:113960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.4.27219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 970.648540][ T28] audit: type=1326 audit(1763588840.103:113961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.4.27219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 970.672531][ T28] audit: type=1326 audit(1763588840.103:113962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.4.27219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 970.697318][ T28] audit: type=1326 audit(1763588840.103:113963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.4.27219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 970.732947][ T28] audit: type=1326 audit(1763588840.103:113964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.4.27219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 970.762486][ T28] audit: type=1326 audit(1763588840.103:113965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.4.27219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 970.787211][ T28] audit: type=1326 audit(1763588840.112:113966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.4.27219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 970.812457][ T28] audit: type=1326 audit(1763588840.112:113967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.4.27219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7cc018f749 code=0x7ffc0000 [ 971.167200][T28969] netlink: 'syz.1.27232': attribute type 4 has an invalid length. [ 971.674033][T28980] __nla_validate_parse: 13 callbacks suppressed [ 971.674063][T28980] netlink: 72 bytes leftover after parsing attributes in process `syz.4.27236'. [ 972.500182][T29027] overlayfs: failed to resolve './file1': -2 [ 973.422004][T29073] netlink: 72 bytes leftover after parsing attributes in process `syz.0.27276'. [ 973.431342][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 973.537277][T29086] netlink: 'syz.0.27281': attribute type 11 has an invalid length. [ 973.577775][T29090] netlink: 72 bytes leftover after parsing attributes in process `syz.2.27283'. [ 973.653300][T29101] netlink: 72 bytes leftover after parsing attributes in process `syz.1.27288'. [ 974.393032][T29120] netlink: 72 bytes leftover after parsing attributes in process `syz.3.27295'. [ 974.415320][T29122] overlayfs: failed to clone lowerpath [ 974.471967][T29130] 9pnet_fd: Insufficient options for proto=fd [ 974.511859][T29140] netlink: 72 bytes leftover after parsing attributes in process `syz.3.27305'. [ 974.638284][T29145] netlink: 72 bytes leftover after parsing attributes in process `syz.4.27307'. [ 976.305798][T29211] 9pnet: Could not find request transport: 0xffffffffffffffff [ 976.677536][T29229] netlink: 72 bytes leftover after parsing attributes in process `syz.0.27344'. [ 979.900762][T29376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27405'. [ 980.017002][T29379] netlink: 9 bytes leftover after parsing attributes in process `syz.4.27397'. [ 980.027565][T29379] device gretap0 entered promiscuous mode [ 981.217155][T29386] netlink: 72 bytes leftover after parsing attributes in process `syz.2.27409'. [ 981.256718][T29388] 9pnet: Could not find request transport: 0xffffffffffffffff [ 981.365810][T29413] netlink: 72 bytes leftover after parsing attributes in process `syz.2.27422'. [ 981.635147][T29439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27431'. [ 981.655897][T29440] device sit0 entered promiscuous mode [ 981.663734][T29442] netlink: 72 bytes leftover after parsing attributes in process `syz.3.27433'. [ 981.670455][T29440] netlink: 'syz.0.27432': attribute type 1 has an invalid length. [ 981.728942][T29447] syz.1.27429[29447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 981.729369][T29447] syz.1.27429[29447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 981.848305][T29440] netlink: 1 bytes leftover after parsing attributes in process `syz.0.27432'. [ 981.939072][T29448] netlink: 84 bytes leftover after parsing attributes in process `syz.2.27434'. [ 981.954472][T29448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.27434'. [ 982.991962][T29465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27444'. [ 983.191174][T29504] 9pnet: Could not find request transport: 0xffffffffffffffff [ 983.367364][T29531] 9pnet: Could not find request transport: 0xffffffffffffffff [ 983.894871][T29559] 9pnet: Could not find request transport: 0xffffffffffffffff [ 988.004314][T29597] 9pnet: Could not find request transport: 0xffffffffffffffff [ 988.027081][T29601] __nla_validate_parse: 11 callbacks suppressed [ 988.027115][T29601] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.27503'. [ 988.043391][T29601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27503'. [ 988.910845][ T28] kauditd_printk_skb: 211 callbacks suppressed [ 988.910947][ T28] audit: type=1326 audit(1763588857.059:114179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29633 comm="syz.0.27514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c0218f749 code=0x0 [ 989.853416][T29643] 9pnet: Could not find request transport: 0xffffffffffffffff [ 989.998151][T29652] 9pnet: Could not find request transport: 0xffffffffffffffff [ 990.500365][T29684] netlink: 44 bytes leftover after parsing attributes in process `syz.0.27537'. [ 990.530801][T29687] 9pnet: Could not find request transport: 0xffffffffffffffff [ 991.487810][T29706] netlink: 96 bytes leftover after parsing attributes in process `syz.0.27540'. [ 992.210306][T29731] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.27558'. [ 992.221215][T29731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27558'. [ 992.487985][T29754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27569'. [ 992.513247][T29775] netlink: 72 bytes leftover after parsing attributes in process `syz.2.27578'. [ 992.653850][T29795] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.27587'. [ 992.663333][T29795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27587'. [ 993.509800][T29833] __nla_validate_parse: 1 callbacks suppressed [ 993.509877][T29833] netlink: 72 bytes leftover after parsing attributes in process `syz.4.27603'. [ 994.300756][T29839] netlink: 84 bytes leftover after parsing attributes in process `syz.1.27602'. [ 994.310018][T29839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27602'. [ 995.213900][T29870] 9pnet: Could not find request transport: 0xffffffffffffffff [ 995.336074][T29876] netlink: 76 bytes leftover after parsing attributes in process `syz.2.27619'. [ 995.347019][T29876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27619'. [ 995.356857][T29876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.27619'. [ 995.365971][T29876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.27619'. [ 996.108803][T29896] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.27628'. [ 996.175916][T29896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27628'. [ 996.596072][T29905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27633'. [ 997.343420][T29953] overlayfs: missing 'lowerdir' [ 997.894543][T29979] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29979 comm=syz.0.27662 [ 998.008045][T29994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29994 comm=syz.2.27669 [ 998.044734][T29994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29994 comm=syz.2.27669 [ 998.608624][T30023] 9pnet: Could not find request transport: 0xffffffffffffffff [ 998.829949][T30038] overlayfs: failed to clone upperpath [ 999.155401][T30041] __nla_validate_parse: 9 callbacks suppressed [ 999.155422][T30041] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.27687'. [ 999.171566][T30041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27687'. [ 999.296716][T30051] netlink: 72 bytes leftover after parsing attributes in process `syz.2.27692'. [ 999.337481][T30059] 9pnet_fd: Insufficient options for proto=fd [ 999.649686][ T28] audit: type=1400 audit(1763588866.962:114180): avc: denied { ioctl } for pid=30065 comm="syz.1.27698" path="socket:[310749]" dev="sockfs" ino=310749 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 999.836525][T30082] netlink: 72 bytes leftover after parsing attributes in process `syz.1.27705'. [ 999.987249][T30092] overlayfs: failed to clone upperpath [ 1000.306951][T30112] netlink: 72 bytes leftover after parsing attributes in process `syz.0.27717'. [ 1000.310068][T30114] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1000.333133][T30116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27719'. [ 1000.887353][T30139] netlink: 72 bytes leftover after parsing attributes in process `syz.3.27728'. [ 1001.328764][T30162] netlink: 72 bytes leftover after parsing attributes in process `syz.4.27739'. [ 1001.355474][T30165] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.27740'. [ 1001.365081][T30165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27740'. [ 1003.543985][T30259] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1003.600844][T30263] 9pnet_fd: Insufficient options for proto=fd [ 1003.935000][T30305] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1004.363405][T30333] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1005.404239][T30382] __nla_validate_parse: 6 callbacks suppressed [ 1005.404285][T30382] netlink: 72 bytes leftover after parsing attributes in process `syz.2.27833'. [ 1005.601770][T30388] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1006.524525][ T28] audit: type=1326 audit(1763588873.313:114181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.4.27841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cc018f749 code=0x0 [ 1006.604725][T30412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.27846'. [ 1006.640291][T30416] netlink: 72 bytes leftover after parsing attributes in process `syz.4.27847'. [ 1006.702649][T30429] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1006.717363][T30431] netlink: 44 bytes leftover after parsing attributes in process `syz.1.27854'. [ 1006.742663][T30437] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1006.765511][T30441] netlink: 72 bytes leftover after parsing attributes in process `syz.1.27858'. [ 1006.972288][T30457] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1006.981495][T30452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27864'. [ 1006.997131][T30460] netlink: 44 bytes leftover after parsing attributes in process `syz.1.27867'. [ 1007.050887][T30468] netlink: 72 bytes leftover after parsing attributes in process `syz.4.27871'. [ 1007.062663][T30470] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1279 sclass=netlink_xfrm_socket pid=30470 comm=syz.1.27872 [ 1007.095363][T30476] netlink: 84 bytes leftover after parsing attributes in process `syz.4.27875'. [ 1007.104553][T30476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27875'. [ 1008.672020][T30539] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1010.145957][T30618] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30618 comm=syz.1.27938 [ 1010.226401][T30628] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1010.754023][T30664] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1011.024778][T30671] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1011.034440][T30671] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1011.088756][T30671] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1011.096416][T30671] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1011.107181][T30671] device veth2 left promiscuous mode [ 1011.117178][T30671] device veth4 left promiscuous mode [ 1011.126011][T30671] device veth7 left promiscuous mode [ 1011.143763][T30671] device ip6gre1 left promiscuous mode [ 1011.152035][T30671] device ip6gre2 left promiscuous mode [ 1011.213477][T10499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1011.242179][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1011.263681][T10499] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 1011.271811][T10499] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1011.279969][T10499] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 1011.289672][T10499] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 1011.297933][T10499] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 1011.306325][T10499] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 1011.314566][T10499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1011.322433][T10499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1011.330457][T10499] IPv6: ADDRCONF(NETDEV_CHANGE): veth21: link becomes ready [ 1011.338934][T10499] IPv6: ADDRCONF(NETDEV_CHANGE): veth20: link becomes ready [ 1011.348103][T10499] IPv6: ADDRCONF(NETDEV_CHANGE): veth23: link becomes ready [ 1011.356598][T10499] IPv6: ADDRCONF(NETDEV_CHANGE): veth22: link becomes ready [ 1011.364384][T30676] __nla_validate_parse: 8 callbacks suppressed [ 1011.364399][T30676] netlink: 44 bytes leftover after parsing attributes in process `syz.1.27964'. [ 1011.381542][T30321] ip6_tunnel: K xmit: Local address not yet configured! [ 1011.403055][T30321] ip6_tunnel: K xmit: Local address not yet configured! [ 1011.419898][T30321] ip6_tunnel: K xmit: Local address not yet configured! [ 1011.445413][T30321] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1011.466370][T30321] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1011.475845][T30681] netlink: 84 bytes leftover after parsing attributes in process `syz.4.27968'. [ 1011.486798][ T39] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1011.498798][T30681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27968'. [ 1011.546730][T30688] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1011.747850][T30321] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1011.799195][T30702] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.27975'. [ 1011.904743][T30718] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1011.913647][T30321] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1011.966573][T30729] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.27989'. [ 1011.997328][T30321] ip6_tunnel: K xmit: Local address not yet configured! [ 1012.133229][T30752] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1012.172905][T30755] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.28000'. [ 1012.296038][T30772] netlink: 52 bytes leftover after parsing attributes in process `syz.2.28009'. [ 1012.356908][T30780] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1012.413974][T30786] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.28015'. [ 1012.577179][T30793] xt_hashlimit: max too large, truncated to 1048576 [ 1014.435640][T30838] netlink: 72 bytes leftover after parsing attributes in process `syz.2.28036'. [ 1014.540019][T30841] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.28038'. [ 1016.950063][T30889] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1017.016888][T30896] __nla_validate_parse: 2 callbacks suppressed [ 1017.016910][T30896] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.28062'. [ 1017.034658][T30897] netlink: 268 bytes leftover after parsing attributes in process `syz.0.28060'. [ 1017.046003][T30899] netlink: 72 bytes leftover after parsing attributes in process `syz.4.28063'. [ 1017.094577][T30903] netlink: 'syz.4.28065': attribute type 4 has an invalid length. [ 1017.110730][T30903] netlink: 'syz.4.28065': attribute type 5 has an invalid length. [ 1017.118615][T30903] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.28065'. [ 1017.261112][T30918] overlayfs: missing 'lowerdir' [ 1020.210006][T30937] netlink: 72 bytes leftover after parsing attributes in process `syz.0.28077'. [ 1020.975093][T30957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28086'. [ 1021.070191][T30969] netlink: 72 bytes leftover after parsing attributes in process `syz.2.28092'. [ 1021.771587][T30986] netlink: 2076 bytes leftover after parsing attributes in process `syz.3.28099'. [ 1022.008391][T31008] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1022.543160][T31014] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1022.621509][T28721] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 1022.647753][T28721] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1022.739828][T28721] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 1022.743265][ T19] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 1022.743320][ T19] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1023.017097][T28721] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 1023.026888][T28721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1023.034959][T28721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1023.042718][T28721] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 1023.056391][T28721] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 1023.070924][T28721] IPv6: ADDRCONF(NETDEV_CHANGE): veth21: link becomes ready [ 1023.079047][T28721] IPv6: ADDRCONF(NETDEV_CHANGE): veth20: link becomes ready [ 1023.111470][T31022] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1023.424473][ T19] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1024.044703][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1025.057217][T31102] syz.0.28144[31102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1025.057709][T31102] syz.0.28144[31102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1025.431408][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1026.323378][ T28] audit: type=1400 audit(1763588891.588:114182): avc: denied { read } for pid=31112 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1027.465768][T31141] netlink: 84 bytes leftover after parsing attributes in process `syz.4.28163'. [ 1027.490248][T31141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.28163'. [ 1028.035631][T31179] device bridge9 entered promiscuous mode [ 1028.950564][T31191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28182'. Stopping sshd: stopped /usr/sbin/sshd (pid 193) OK Stopping crond: stopped /usr/sbin/crond (pid 185) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 140) Stopping network: [ 1029.683324][ T28] audit: type=1400 audit(1763588894.689:114183): avc: denied { unlink } for pid=141 comm="dhcpcd" name="sock" dev="tmpfs" ino=491 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 1029.744739][T31264] netlink: 84 bytes leftover after parsing attributes in process `syz.3.28206'. [ 1029.765130][ T28] audit: type=1400 audit(1763588894.698:114184): avc: denied { read write } for pid=31260 comm="ip" path="/dev/console" dev="rootfs" ino=924 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 1029.775781][T31264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28206'. OK [ 1029.835549][T31276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28210'. Stopping iptables: [ 1029.856743][ T28] audit: type=1400 audit(1763588894.846:114185): avc: denied { read write } for pid=31279 comm="iptables" path="/dev/console" dev="rootfs" ino=924 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK Stopping system message bus: [ 1029.900036][ T28] audit: type=1400 audit(1763588894.855:114186): avc: denied { search } for pid=31279 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.934536][ T28] audit: type=1400 audit(1763588894.855:114187): avc: denied { write } for pid=31279 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.001544][ T28] audit: type=1400 audit(1763588894.855:114188): avc: denied { add_name } for pid=31279 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.067154][ T28] audit: type=1400 audit(1763588894.855:114189): avc: denied { create } for pid=31279 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1030.116147][T31310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28223'. [ 1030.126157][ T28] audit: type=1400 audit(1763588894.855:114190): avc: denied { read open } for pid=31279 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=31977 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1030.135406][T31313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28226'. [ 1030.151153][ T28] audit: type=1400 audit(1763588894.855:114191): avc: denied { lock } for pid=31279 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=31977 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 done [ 1030.621835][T31336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28234'. [ 1030.722042][T31343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28237'. Stopping klogd: OK Stopping acpid: [ 1031.003254][T31370] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=31370 comm=syz.4.28247 [ 1031.134239][T31383] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1031.494553][T31436] 9pnet_fd: Insufficient options for proto=fd OK [ 1034.027806][T31490] device gretap0 entered promiscuous mode [ 1034.036522][T31491] __nla_validate_parse: 9 callbacks suppressed [ 1034.036541][T31491] netlink: 5 bytes leftover after parsing attributes in process `syz.0.28293'. [ 1034.051791][T31491] 0ªX¹¦D: renamed from gretap0 [ 1034.057500][T31491] device 30ªX¹¦D left promiscuous mode [ 1034.063823][T31491] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. Stopping syslogd: [ 1034.145064][T31496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28298'. [ 1034.162685][T31497] 9pnet: Could not find request transport: 0xffffffffffffffff stopped /sbin/syslogd (pid 84) OK [ 1034.217271][T31508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=31508 comm=syz.1.28297 [ 1034.246245][T31508] netlink: 52 bytes leftover after parsing attributes in process `syz.1.28297'. [ 1034.329076][T31523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28308'. [ 1034.436798][T31535] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1034.618232][T31555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28324'. [ 1034.694740][T31563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28328'. [ 1034.801905][T31577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28312'. [ 1034.856089][T31582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28335'. [ 1035.001211][T31593] overlayfs: failed to clone lowerpath [ 1035.365264][T31609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28347'. [ 1035.441038][T31602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28344'. [ 1035.519081][T31625] overlayfs: failed to clone lowerpath umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 1036.492818][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 1036.492840][ T28] audit: type=1400 audit(1763588900.947:114203): avc: denied { write } for pid=274 comm="syz-executor" path="pipe:[13731]" dev="pipefs" ino=13731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Connection to 10.128.0.45 closed by remote host. Sent SIGTERM to all processes Sent SIGKILL to all processes Requesting system poweroff [ 1039.665244][T31687] kvm: exiting hardware virtualization [ 1039.672484][T31687] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1039.679876][T31687] ACPI: PM: Preparing to enter system sleep state S5 [ 1039.687006][T31687] reboot: Power down serialport: VM disconnected.