last executing test programs: 2m7.276631047s ago: executing program 0 (id=11286): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1}, 0x4080) 2m7.245795169s ago: executing program 0 (id=11287): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000040)=0x9, 0x4) 2m7.226387439s ago: executing program 0 (id=11289): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="7125a053061f8fd5"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x4) 2m7.2100296s ago: executing program 0 (id=11292): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 2m7.193417691s ago: executing program 0 (id=11294): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) 2m7.176132161s ago: executing program 0 (id=11296): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m52.163685464s ago: executing program 32 (id=11296): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.342243342s ago: executing program 1 (id=20777): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf2504000000200001"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1.305157553s ago: executing program 1 (id=20781): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511", 0x41, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.262876435s ago: executing program 1 (id=20783): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 1.246421076s ago: executing program 1 (id=20786): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@local, 0x23, r5}) 1.225294897s ago: executing program 1 (id=20789): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 1.210201457s ago: executing program 1 (id=20790): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) vmsplice(r3, &(0x7f0000002a80)=[{&(0x7f0000000580)='I', 0x1}], 0x1, 0x8) 289.330108ms ago: executing program 4 (id=20815): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) 254.261839ms ago: executing program 4 (id=20818): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) 240.12599ms ago: executing program 2 (id=20819): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 218.060991ms ago: executing program 4 (id=20820): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000004200010a2f0300000000000002"], 0x14}}, 0x0) 189.966882ms ago: executing program 2 (id=20822): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) 181.476492ms ago: executing program 3 (id=20823): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x18, 0x16, 0xa01, 0x0, 0x0, {0x3}, [@typed={0x4}]}, 0x18}}, 0x0) 170.192923ms ago: executing program 4 (id=20824): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010009081000418e00000004fcff", 0x58}], 0x1) 158.604663ms ago: executing program 3 (id=20825): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket(0x40000000015, 0x5, 0x0) 129.585764ms ago: executing program 2 (id=20826): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) 128.332814ms ago: executing program 3 (id=20827): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1b, &(0x7f0000000040)=0xffff, 0x4) 102.410396ms ago: executing program 2 (id=20828): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) 85.535606ms ago: executing program 3 (id=20829): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) 63.545977ms ago: executing program 3 (id=20830): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812002b08020300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 55.421547ms ago: executing program 4 (id=20831): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x50}}], 0x1, 0x40804) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000100), 0x4) 45.738268ms ago: executing program 2 (id=20832): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 12.05484ms ago: executing program 3 (id=20833): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) 10.04974ms ago: executing program 4 (id=20834): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 0s ago: executing program 2 (id=20835): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) kernel console output (not intermixed with test programs): ecutor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7fc00000 [ 146.924326][ T36] audit: type=1326 audit(2000000068.849:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18253 comm="syz.1.8731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7fc00000 [ 146.948852][ T36] audit: type=1326 audit(2000000068.849:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18253 comm="syz.1.8731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7fc00000 [ 146.978730][ T36] audit: type=1326 audit(2000000068.849:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18253 comm="syz.1.8731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7fc00000 [ 147.002517][ T36] audit: type=1326 audit(2000000068.849:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18253 comm="syz.1.8731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7fc00000 [ 147.034246][ T36] audit: type=1326 audit(2000000068.849:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18253 comm="syz.1.8731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7fc00000 [ 147.459012][T18448] netlink: 'syz.3.8823': attribute type 17 has an invalid length. [ 147.495172][T18452] bpf: Bad value for 'uid' [ 147.574769][T18470] tipc: Started in network mode [ 147.580139][T18470] tipc: Node identity ac14140f, cluster identity 4711 [ 147.587123][T18470] tipc: New replicast peer: 255.255.255.255 [ 147.593531][T18470] tipc: Enabled bearer , priority 19 [ 147.600028][T18473] netlink: 'syz.1.8835': attribute type 17 has an invalid length. [ 147.787246][T18513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=18513 comm=syz.0.8854 [ 148.144212][T18573] can: request_module (can-proto-0) failed. [ 148.711533][ T10] tipc: Node number set to 2886997007 [ 148.763686][T18644] tmpfs: Bad value for 'nr_blocks' [ 149.123375][T18694] usb usb8: usbfs: process 18694 (syz.2.8942) did not claim interface 0 before use [ 149.798743][T18775] __nla_validate_parse: 4 callbacks suppressed [ 149.798766][T18775] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8984'. [ 150.063356][T18814] netlink: 'syz.3.9004': attribute type 2 has an invalid length. [ 150.333105][T18852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9021'. [ 150.545517][T18886] netlink: 388 bytes leftover after parsing attributes in process `syz.3.9038'. [ 150.623720][T18896] 9pnet_virtio: no channels available for device syz [ 150.839637][T18928] netlink: 'syz.3.9060': attribute type 4 has an invalid length. [ 150.847689][T18928] netlink: 'syz.3.9060': attribute type 5 has an invalid length. [ 150.855565][T18928] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.9060'. [ 150.908544][T18933] netlink: 'syz.3.9062': attribute type 4 has an invalid length. [ 150.917719][T18933] netlink: 17 bytes leftover after parsing attributes in process `syz.3.9062'. [ 150.959458][T18937] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9064'. [ 150.973605][T18937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9064'. [ 151.002598][T18939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=18939 comm=syz.0.9065 [ 151.017566][T18939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9065'. [ 151.651338][ T331] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 151.814664][ T331] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 151.824299][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.832788][ T331] usb 3-1: Product: syz [ 151.837376][ T331] usb 3-1: Manufacturer: syz [ 151.842379][ T331] usb 3-1: SerialNumber: syz [ 152.063163][ T331] usb 3-1: USB disconnect, device number 12 [ 152.076672][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 152.076692][ T36] audit: type=1326 audit(2000000074.110:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19079 comm="syz.3.9132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x7fc00000 [ 152.204654][T19112] netlink: 'syz.3.9148': attribute type 32 has an invalid length. [ 152.901593][T19154] incfs: Backing dir is not set, filesystem can't be mounted. [ 152.927853][T19154] incfs: mount failed -2 [ 152.988992][T19160] batadv_slave_1: entered promiscuous mode [ 153.001740][T19159] batadv_slave_1: left promiscuous mode [ 153.233036][T19190] netlink: 'syz.1.9187': attribute type 16 has an invalid length. [ 153.240971][T19190] netlink: 64122 bytes leftover after parsing attributes in process `syz.1.9187'. [ 153.260831][ T36] audit: type=1400 audit(2000000075.290:750): avc: denied { mounton } for pid=19191 comm="syz.3.9188" path="/file0" dev="ramfs" ino=96610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 153.421231][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 153.480709][ T36] audit: type=1326 audit(2000000075.510:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19225 comm="syz.3.9204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x0 [ 153.526253][ T36] audit: type=1400 audit(2000000075.560:752): avc: denied { link } for pid=19227 comm="syz.1.9205" name="file0" dev="tmpfs" ino=13884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 153.581229][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 153.589051][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.597947][ T31] usb 1-1: config 0 has no interfaces? [ 153.605055][ T31] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 2.2c [ 153.617337][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.625664][ T31] usb 1-1: Product: syz [ 153.629920][ T31] usb 1-1: Manufacturer: syz [ 153.634933][ T31] usb 1-1: SerialNumber: syz [ 153.644026][ T31] usb 1-1: config 0 descriptor?? [ 153.776207][T19263] futex_wake_op: syz.1.9223 tries to shift op by 32; fix this program [ 153.860405][ T64] usb 1-1: USB disconnect, device number 10 [ 153.934561][ T36] audit: type=1400 audit(2000000075.970:753): avc: denied { create } for pid=19294 comm="syz.2.9238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.941275][T19295] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9238'. [ 153.963996][T19292] overlayfs: missing 'lowerdir' [ 153.967805][ T36] audit: type=1400 audit(2000000075.970:754): avc: denied { write } for pid=19294 comm="syz.2.9238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.995432][ T36] audit: type=1400 audit(2000000075.970:755): avc: denied { nlmsg_write } for pid=19294 comm="syz.2.9238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.576323][ T36] audit: type=1400 audit(2000000076.610:756): avc: denied { execmem } for pid=19418 comm="syz.0.9297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 154.652239][T19435] 9pnet_fd: Insufficient options for proto=fd [ 154.946408][T19496] syz.1.9335 (19496): attempted to duplicate a private mapping with mremap. This is not supported. [ 154.993622][T19506] __nla_validate_parse: 8 callbacks suppressed [ 154.993643][T19506] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9340'. [ 155.009749][T19506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9340'. [ 155.510246][ T36] audit: type=1400 audit(2000000077.540:757): avc: denied { nlmsg_read } for pid=19611 comm="syz.3.9392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.524634][T19613] netlink: 268 bytes leftover after parsing attributes in process `syz.3.9392'. [ 156.001313][T19682] futex_wake_op: syz.2.9423 tries to shift op by -1; fix this program [ 156.025700][T19685] tipc: Enabled bearer , priority 0 [ 156.360060][T19734] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9451'. [ 156.783714][T19798] 9pnet_fd: Insufficient options for proto=fd [ 156.792890][T19802] overlayfs: missing 'lowerdir' [ 156.949443][T19841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9503'. [ 157.264709][T19896] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9530'. [ 157.433325][T19920] tmpfs: Bad value for 'huge' [ 157.490519][T19926] fuse: Bad value for 'group_id' [ 157.501029][T19926] fuse: Bad value for 'group_id' [ 157.791360][T19966] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9565'. [ 157.811250][T19966] 0ªî{X¹¦: entered promiscuous mode [ 157.820997][T19966] 0ªî{X¹¦: left allmulticast mode [ 158.040233][T20004] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9583'. [ 158.490932][ T36] audit: type=1326 audit(2000000080.520:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.0.9629" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd224b8f749 code=0x0 [ 158.785469][T20146] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9653'. [ 159.008151][T20192] netlink: 'syz.0.9675': attribute type 8 has an invalid length. [ 159.020823][T20192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9675'. [ 159.309056][T20230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4938 [ 159.502537][T20263] IPv6: Can't replace route, no match found [ 159.665560][ T36] audit: type=1400 audit(2000000081.700:759): avc: denied { bind } for pid=20284 comm="syz.3.9721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.757899][T20299] overlay: Unknown parameter 'hash' [ 159.955594][T20327] fuse: Bad value for 'fd' [ 160.045024][T20335] __nla_validate_parse: 2 callbacks suppressed [ 160.045046][T20335] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9745'. [ 160.093354][T20343] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9749'. [ 160.344232][T20391] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9773'. [ 160.403005][ T36] audit: type=1400 audit(2000000082.440:760): avc: denied { read } for pid=20396 comm="syz.2.9776" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 160.452227][ T36] audit: type=1400 audit(2000000082.440:761): avc: denied { open } for pid=20396 comm="syz.2.9776" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 160.528234][T20411] veth1_macvtap: left promiscuous mode [ 160.539889][T20411] macsec0: entered promiscuous mode [ 160.545272][T20411] macsec0: entered allmulticast mode [ 160.556786][T20411] veth1_macvtap: entered promiscuous mode [ 160.562870][T20411] veth1_macvtap: entered allmulticast mode [ 160.568889][T20411] macsec0: left promiscuous mode [ 160.574263][T20411] macsec0: left allmulticast mode [ 160.582298][T20411] veth1_macvtap: left allmulticast mode [ 160.685750][ T36] audit: type=1400 audit(2000000082.720:762): avc: denied { create } for pid=20427 comm="syz.2.9791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 161.070823][T20491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9822'. [ 161.084331][T20495] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9824'. [ 161.346933][T20551] netlink: 'syz.1.9852': attribute type 2 has an invalid length. [ 161.361638][T20554] tipc: Enabling of bearer rejected, already enabled [ 161.470832][T20575] netlink: 'syz.1.9864': attribute type 11 has an invalid length. [ 161.479041][T20575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9864'. [ 161.698180][T20625] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9889'. [ 161.703696][T20627] netlink: 'syz.3.9890': attribute type 4 has an invalid length. [ 161.996595][ T36] audit: type=1400 audit(2000000000.470:763): avc: denied { read } for pid=20680 comm="syz.2.9916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.112667][T20697] netlink: 'syz.2.9924': attribute type 8 has an invalid length. [ 162.194694][T20708] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 162.651561][T20769] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9959'. [ 162.660598][T20769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9959'. [ 162.669686][T20769] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9959'. [ 162.780703][ T31] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 162.801112][ T36] audit: type=1400 audit(2000000001.290:764): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 162.913204][T20807] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 162.931805][ T31] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 162.948064][ T31] usb 1-1: config 0 has no interface number 0 [ 162.954814][ T31] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 162.972472][ T31] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.987529][ T31] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 162.996769][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.004859][ T31] usb 1-1: Product: syz [ 163.009100][ T31] usb 1-1: Manufacturer: syz [ 163.014066][ T31] usb 1-1: SerialNumber: syz [ 163.019505][ T31] usb 1-1: config 0 descriptor?? [ 163.025058][T20753] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.033439][ T31] plusb 1-1:0.231: probe with driver plusb failed with error -22 [ 163.044645][T20824] can: request_module (can-proto-0) failed. [ 163.250566][ T31] usb 1-1: USB disconnect, device number 11 [ 163.630822][T20924] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿ) failed with errno=-22 [ 163.714968][ T36] audit: type=1400 audit(2000000002.194:765): avc: denied { lock } for pid=20939 comm="syz.3.10043" path="socket:[104705]" dev="sockfs" ino=104705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 164.169838][ T36] audit: type=1400 audit(2000000000.310:766): avc: denied { accept } for pid=21018 comm="syz.1.10082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.624903][T21111] overlayfs: failed to clone lowerpath [ 164.967645][ T36] audit: type=1400 audit(2000000001.110:767): avc: denied { setattr } for pid=21145 comm="syz.1.10144" name="file0" dev="tmpfs" ino=15134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 165.006420][T21150] IPv6: Can't replace route, no match found [ 165.455161][T21209] __nla_validate_parse: 5 callbacks suppressed [ 165.455184][T21209] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10176'. [ 165.500568][T21209] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10176'. [ 165.509655][T21209] netlink: 'syz.1.10176': attribute type 6 has an invalid length. [ 165.525809][T21209] netlink: 'syz.1.10176': attribute type 5 has an invalid length. [ 165.533810][T21209] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10176'. [ 165.975144][T21272] incfs: Backing dir is not set, filesystem can't be mounted. [ 165.983088][T21272] incfs: mount failed -2 [ 166.081694][T21300] fuse: Bad value for 'fd' [ 166.468262][T21370] bpf: Bad value for 'uid' [ 166.510513][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 166.587960][T21397] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 166.665316][T21416] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 166.671664][ T9] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 166.683043][ T9] usb 3-1: config 0 has no interface number 0 [ 166.696622][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 166.706090][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.717179][ T9] usb 3-1: Product: syz [ 166.722315][ T9] usb 3-1: Manufacturer: syz [ 166.727271][ T9] usb 3-1: SerialNumber: syz [ 166.735661][ T9] usb 3-1: config 0 descriptor?? [ 166.975355][T21472] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10303'. [ 167.154445][ T9] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 167.172745][ T9] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 167.186424][ T9] asix 3-1:0.251: probe with driver asix failed with error -5 [ 167.197626][ T9] usb 3-1: USB disconnect, device number 13 [ 167.762393][T21618] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 167.771713][T21618] overlayfs: missing 'lowerdir' [ 167.999149][ T36] audit: type=1400 audit(2000000004.138:768): avc: denied { lock } for pid=21657 comm="syz.1.10393" path="socket:[106337]" dev="sockfs" ino=106337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 168.271875][ T36] audit: type=1326 audit(2000000004.408:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21709 comm="syz.1.10418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x0 [ 168.335630][ T36] audit: type=1326 audit(2000000004.478:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21711 comm="syz.0.10420" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd224b8f749 code=0x0 [ 168.420038][T21722] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 168.454359][T21726] fuse: Bad value for 'fd' [ 168.803756][ T36] audit: type=1326 audit(2000000004.948:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.1.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 168.834003][ T36] audit: type=1326 audit(2000000004.948:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.1.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 168.858842][ T36] audit: type=1326 audit(2000000004.948:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.1.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 168.882649][ T36] audit: type=1326 audit(2000000004.948:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.1.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 168.908919][ T36] audit: type=1326 audit(2000000004.948:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.1.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 168.933919][ T36] audit: type=1326 audit(2000000004.948:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.1.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 168.958040][ T36] audit: type=1326 audit(2000000004.948:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.1.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 168.982289][ T36] audit: type=1326 audit(2000000004.948:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.1.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 169.006028][ T36] audit: type=1326 audit(2000000004.948:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.1.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 169.029881][ T36] audit: type=1326 audit(2000000004.948:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.1.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 169.089177][T21813] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10470'. [ 169.197249][T21826] 9pnet_fd: Insufficient options for proto=fd [ 169.221279][T21828] overlayfs: missing 'lowerdir' [ 169.782325][T21950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10537'. [ 169.798239][T21952] fuse: Bad value for 'group_id' [ 169.805982][T21952] fuse: Bad value for 'group_id' [ 170.360364][T22006] batadv_slave_1: entered promiscuous mode [ 170.366947][T22005] batadv_slave_1: left promiscuous mode [ 170.401358][T22010] /dev/loop0: Can't lookup blockdev [ 170.783909][T22065] overlayfs: failed to resolve './file1': -2 [ 170.944134][T22085] netlink: 'syz.1.10603': attribute type 17 has an invalid length. [ 171.051395][T22107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10614'. [ 171.126097][T22123] netlink: 'syz.3.10622': attribute type 25 has an invalid length. [ 171.135175][T22125] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10623'. [ 171.175024][T22131] 9p: Unknown uid 00000000004294967295 [ 171.241291][T22142] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10631'. [ 171.424773][T22179] fuse: Bad value for 'user_id' [ 171.429702][T22179] fuse: Bad value for 'user_id' [ 172.309896][T22314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10715'. [ 172.543299][T22349] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10732'. [ 173.021971][T22417] netlink: 'syz.2.10764': attribute type 4 has an invalid length. [ 173.029983][T22417] netlink: 'syz.2.10764': attribute type 5 has an invalid length. [ 173.039463][T22417] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.10764'. [ 173.131513][T22426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10768'. [ 173.600160][T22485] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10797'. [ 173.642919][T22487] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 173.655918][T22487] overlayfs: missing 'lowerdir' [ 173.706450][T22497] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 173.728151][T22497] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 173.805614][T22511] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 173.815074][T22511] tipc: Enabled bearer , priority 8 [ 173.848688][T22518] ip6_vti0: left promiscuous mode [ 173.855458][T22518] ip6_vti0: left allmulticast mode [ 173.864625][T22518] netlink: 'syz.3.10813': attribute type 2 has an invalid length. [ 173.878900][T22518] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10813'. [ 174.227160][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 174.227178][ T36] audit: type=1326 audit(2000000010.374:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22601 comm="syz.1.10854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x0 [ 174.266382][T22607] netlink: 'syz.3.10857': attribute type 25 has an invalid length. [ 174.348018][T22622] netlink: 'syz.0.10864': attribute type 13 has an invalid length. [ 174.411613][T22638] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10871'. [ 174.565039][T22659] netlink: 'syz.2.10881': attribute type 4 has an invalid length. [ 174.573346][T22659] netlink: 'syz.2.10881': attribute type 5 has an invalid length. [ 174.721875][ T36] audit: type=1400 audit(2000000010.874:791): avc: denied { create } for pid=22691 comm="syz.2.10897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 174.762078][ T36] audit: type=1400 audit(2000000010.914:792): avc: denied { write } for pid=22697 comm="syz.2.10900" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 174.762092][T22698] random: crng reseeded on system resumption [ 175.208148][T22767] netlink: 'syz.0.10934': attribute type 322 has an invalid length. [ 175.297700][ T36] audit: type=1400 audit(2000000011.444:793): avc: denied { read } for pid=22790 comm="syz.3.10946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.457876][T22828] incfs: Backing dir is not set, filesystem can't be mounted. [ 175.471445][T22828] incfs: mount failed -2 [ 176.034661][ T36] audit: type=1326 audit(2000000012.184:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22936 comm="syz.0.11018" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd224b8f749 code=0x0 [ 176.067527][T22942] __nla_validate_parse: 4 callbacks suppressed [ 176.067551][T22942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11020'. [ 176.762462][T23085] overlayfs: overlapping lowerdir path [ 176.835498][T23104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11100'. [ 176.932329][T23126] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23126 comm=syz.3.11110 [ 177.416364][T23206] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 177.769332][T23270] overlayfs: missing 'lowerdir' [ 177.834057][T23285] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 177.982040][T23317] xt_NFQUEUE: number of total queues is 0 [ 178.056707][T23334] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11211'. [ 178.333698][T23396] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11242'. [ 178.473334][T23427] 9pnet: Could not find request transport: f [ 178.805368][ T36] audit: type=1400 audit(2000000014.954:795): avc: denied { setopt } for pid=23475 comm="syz.3.11280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.910206][T23488] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=94 sclass=netlink_tcpdiag_socket pid=23488 comm=syz.0.11286 [ 179.535627][T23548] SELinux: Context : is not valid (left unmapped). [ 179.546848][ T36] audit: type=1400 audit(2000000015.694:796): avc: denied { relabelto } for pid=23547 comm="syz.1.11316" name="rdma.current" dev="tmpfs" ino=17227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 179.604772][ T36] audit: type=1400 audit(2000000015.724:797): avc: denied { associate } for pid=23547 comm="syz.1.11316" name="rdma.current" dev="tmpfs" ino=17227 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 179.670054][ T36] audit: type=1400 audit(2000000015.724:798): avc: denied { unlink } for pid=290 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=17227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 179.684909][T23563] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11323'. [ 180.175189][T23577] cgroup: Invalid name [ 180.892615][T23641] netlink: 88 bytes leftover after parsing attributes in process `syz.1.11361'. [ 181.250559][T23691] netlink: 'syz.1.11385': attribute type 4 has an invalid length. [ 181.364690][T23705] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11392'. [ 181.479801][T23717] netlink: 'syz.1.11398': attribute type 63 has an invalid length. [ 181.496441][T23717] netlink: 5 bytes leftover after parsing attributes in process `syz.1.11398'. [ 181.506779][T23717] 0ªî{X¹¦: left promiscuous mode [ 181.512351][T23717] 0ªî{X¹¦: entered allmulticast mode [ 181.564473][T23723] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11402'. [ 182.080046][ T36] audit: type=1326 audit(2000000018.224:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23782 comm="syz.1.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 182.144533][ T36] audit: type=1326 audit(2000000018.224:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23782 comm="syz.1.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 182.200047][ T36] audit: type=1326 audit(2000000018.254:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23782 comm="syz.1.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 182.256332][ T36] audit: type=1326 audit(2000000018.254:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23782 comm="syz.1.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 182.320418][ T36] audit: type=1326 audit(2000000018.254:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23782 comm="syz.1.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 182.363470][ T36] audit: type=1326 audit(2000000018.254:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23782 comm="syz.1.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 182.390053][ T36] audit: type=1326 audit(2000000018.254:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23782 comm="syz.1.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 183.328027][T23870] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11473'. [ 183.355420][T23870] tipc: Enabling of bearer rejected, already enabled [ 183.645760][T23894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23894 comm=syz.3.11485 [ 183.698009][T23898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11487'. [ 183.759043][T23905] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11490'. [ 184.023332][T23938] 9pnet_fd: Insufficient options for proto=fd [ 184.141775][T23945] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11511'. [ 184.441178][T23981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11527'. [ 184.912936][T24037] overlayfs: missing 'lowerdir' [ 185.162975][T24056] netlink: 'syz.2.11565': attribute type 11 has an invalid length. [ 185.174079][T24057] netlink: 'syz.1.11564': attribute type 10 has an invalid length. [ 185.190162][T24056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11565'. [ 185.193208][T24057] netlink: 'syz.1.11564': attribute type 10 has an invalid length. [ 185.553477][T24101] netlink: 'syz.2.11586': attribute type 4 has an invalid length. [ 185.561526][T24101] netlink: 'syz.2.11586': attribute type 5 has an invalid length. [ 185.583204][T24101] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.11586'. [ 186.151237][T24176] incfs: Can't find or create .index dir in ./cgroup [ 186.170673][T24176] incfs: mount failed -22 [ 187.301939][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 187.301959][ T36] audit: type=1400 audit(2000000023.454:828): avc: denied { map } for pid=24336 comm="syz.1.11703" path="socket:[118731]" dev="sockfs" ino=118731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 188.287212][T24476] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24476 comm=syz.2.11771 [ 188.319125][T24478] x_tables: unsorted underflow at hook 1 [ 188.930045][ T36] audit: type=1326 audit(2000000025.074:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24509 comm="syz.1.11787" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x0 [ 189.328940][T24549] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11806'. [ 189.348177][T24549] netlink: 43 bytes leftover after parsing attributes in process `syz.3.11806'. [ 189.357624][T24549] netlink: 'syz.3.11806': attribute type 5 has an invalid length. [ 189.365595][T24549] netlink: 43 bytes leftover after parsing attributes in process `syz.3.11806'. [ 190.327306][T24667] batadv_slave_1: entered promiscuous mode [ 190.370596][T24666] batadv_slave_1: left promiscuous mode [ 191.060740][T24774] tipc: MTU too low for tipc bearer [ 191.282566][T24800] 9pnet_fd: Insufficient options for proto=fd [ 191.912112][T24881] overlayfs: missing 'lowerdir' [ 192.143868][T24912] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11983'. [ 192.209423][T24922] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 192.230095][T24922] overlayfs: missing 'lowerdir' [ 192.280974][T24928] netlink: 'syz.3.11991': attribute type 4 has an invalid length. [ 192.488098][T24958] overlayfs: missing 'lowerdir' [ 192.916633][T24988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12020'. [ 193.050192][T24998] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 193.080829][T24998] overlayfs: missing 'lowerdir' [ 193.391684][T25028] bpf: Bad value for 'mode' [ 193.841946][T25072] tipc: Enabling of bearer rejected, already enabled [ 193.980143][T25083] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25083 comm=syz.2.12063 [ 194.206147][ T36] audit: type=1400 audit(2000000031.346:830): avc: denied { mounton } for pid=25105 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 194.338420][T25105] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.353746][T25105] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.370167][T25105] bridge_slave_0: entered allmulticast mode [ 194.376663][T25105] bridge_slave_0: entered promiscuous mode [ 194.402203][T25105] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.409286][T25105] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.451652][T25105] bridge_slave_1: entered allmulticast mode [ 194.458152][T25105] bridge_slave_1: entered promiscuous mode [ 194.672596][T25105] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.679710][T25105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.687443][T25105] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.694530][T25105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.777092][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.784634][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.805521][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.812626][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.823839][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.830934][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.881534][T25105] veth0_vlan: entered promiscuous mode [ 194.897627][T25105] veth1_macvtap: entered promiscuous mode [ 194.932283][ T36] audit: type=1400 audit(2000000032.076:831): avc: denied { mounton } for pid=25105 comm="syz-executor" path="/root/syzkaller.GxLNeP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 195.182270][T25213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12123'. [ 195.329525][T25234] 9pnet_fd: Insufficient options for proto=fd [ 195.378014][T25240] futex_wake_op: syz.4.12136 tries to shift op by 32; fix this program [ 195.463824][T25246] tmpfs: Bad value for 'huge' [ 195.628756][T25261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12147'. [ 196.121696][T25322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12177'. [ 196.252362][T25336] fuse: Bad value for 'fd' [ 196.361938][T25350] netlink: 'syz.2.12190': attribute type 21 has an invalid length. [ 196.415949][T25356] netlink: 37 bytes leftover after parsing attributes in process `syz.3.12194'. [ 196.543452][T25375] netlink: 268 bytes leftover after parsing attributes in process `syz.2.12203'. [ 196.724224][T25398] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12215'. [ 196.912000][ T36] audit: type=1326 audit(2000000034.056:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25433 comm="syz.3.12232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x0 [ 197.146104][T25468] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.12248'. [ 197.298510][T25485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12256'. [ 197.318402][T25489] SELinux: Context system_u:object_r:power_device_t:s0 is not valid (left unmapped). [ 197.331532][ T36] audit: type=1400 audit(2000000034.476:833): avc: denied { relabelto } for pid=25488 comm="syz.4.12258" name="cgroup" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:power_device_t:s0" [ 197.367853][ T36] audit: type=1400 audit(2000000034.476:834): avc: denied { associate } for pid=25488 comm="syz.4.12258" name="cgroup" dev="tmpfs" ino=277 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:power_device_t:s0" [ 197.396153][ T36] audit: type=1400 audit(2000000034.476:835): avc: denied { unlink } for pid=25105 comm="syz-executor" name="cgroup" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:power_device_t:s0" [ 197.570862][T25526] netlink: 112 bytes leftover after parsing attributes in process `syz.2.12276'. [ 197.664080][T25542] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1024 sclass=netlink_xfrm_socket pid=25542 comm=syz.4.12284 [ 198.040243][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 198.163283][T25645] cgroup2: Unknown parameter '18446744073709551615' [ 198.188393][T25648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12336'. [ 198.200039][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 198.212596][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.223962][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 198.240034][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.255510][ T9] usb 5-1: config 0 descriptor?? [ 198.348211][T25676] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 198.372761][T25676] overlayfs: missing 'lowerdir' [ 198.547969][T25706] 9pnet_fd: Insufficient options for proto=fd [ 198.670683][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 198.679859][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 198.690514][ T9] usb 5-1: USB disconnect, device number 2 [ 199.222204][T25807] veth0_virt_wifi: entered allmulticast mode [ 199.233710][T25807] veth0_virt_wifi: left allmulticast mode [ 199.672113][ T36] audit: type=1326 audit(2000000036.816:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.1.12449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 199.711624][ T36] audit: type=1326 audit(2000000036.846:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.1.12449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 199.737182][ T36] audit: type=1326 audit(2000000036.846:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.1.12449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 199.766661][ T36] audit: type=1326 audit(2000000036.846:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.1.12449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 199.822069][T25900] netlink: 'syz.2.12460': attribute type 1 has an invalid length. [ 200.274732][T25957] 9pnet_fd: Insufficient options for proto=fd [ 200.513652][T25977] 9pnet_fd: Insufficient options for proto=fd [ 200.728312][T25997] overlayfs: missing 'lowerdir' [ 200.787323][T26005] __nla_validate_parse: 2 callbacks suppressed [ 200.787345][T26005] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12509'. [ 200.903624][ T36] audit: type=1400 audit(2000000038.046:840): avc: denied { name_bind } for pid=26024 comm="syz.4.12519" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 200.942633][T26032] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12523'. [ 200.959738][T26035] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 200.974258][T26035] overlayfs: missing 'lowerdir' [ 201.178265][T26069] overlay: Bad value for 'verity' [ 201.836023][T26163] tmpfs: Unknown parameter 'no' [ 202.366773][ T36] audit: type=1400 audit(2000000000.780:841): avc: denied { read } for pid=26271 comm="syz.4.12641" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.401014][ T36] audit: type=1400 audit(2000000000.780:842): avc: denied { open } for pid=26271 comm="syz.4.12641" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.450955][T26288] fuse: Bad value for 'fd' [ 202.705108][T26342] 9pnet_fd: Insufficient options for proto=fd [ 202.780633][T26360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12683'. [ 203.144516][T26411] batadv_slave_1: entered promiscuous mode [ 203.151599][T26410] batadv_slave_1: left promiscuous mode [ 203.531796][T26442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12722'. [ 203.780160][T26479] futex_wake_op: syz.4.12741 tries to shift op by 32; fix this program [ 203.780261][T26480] incfs: Options parsing error. -22 [ 203.802780][T26480] incfs: mount failed -22 [ 203.815359][ T36] audit: type=1326 audit(2000000002.230:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26483 comm="syz.4.12743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x0 [ 203.934455][ T36] audit: type=1400 audit(2000000000.070:844): avc: denied { setattr } for pid=26507 comm="syz.4.12755" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.169308][T26559] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12779'. [ 204.327109][T26590] netlink: 368 bytes leftover after parsing attributes in process `syz.4.12795'. [ 204.355687][T26596] netlink: 268 bytes leftover after parsing attributes in process `syz.1.12797'. [ 204.615593][T26648] bpf: Bad value for 'uid' [ 205.326282][T26784] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12889'. [ 205.335874][T26784] netlink: 59 bytes leftover after parsing attributes in process `syz.1.12889'. [ 205.345246][T26784] netlink: 59 bytes leftover after parsing attributes in process `syz.1.12889'. [ 205.517237][T26824] tipc: Enabling of bearer rejected, failed to enable media [ 205.713210][ T36] audit: type=1400 audit(2000000001.850:845): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 206.302794][T26987] __nla_validate_parse: 4 callbacks suppressed [ 206.302818][T26987] netlink: 536 bytes leftover after parsing attributes in process `syz.2.12990'. [ 206.318610][T26987] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12990'. [ 206.399358][T27000] 9pnet: Could not find request transport: 0xffffffffffffffff [ 206.568705][T27025] tmpfs: Unknown parameter 'no' [ 207.176615][ T36] audit: type=1400 audit(2000000004.312:846): avc: denied { associate } for pid=27128 comm="syz.4.13061" name="hugetlb.1GB.usage_in_bytes" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 207.274286][T27145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=27145 comm=syz.2.13069 [ 207.337351][T27156] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 207.616799][T27194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13092'. [ 207.752019][T27208] netlink: 836 bytes leftover after parsing attributes in process `syz.1.13099'. [ 207.942951][T27238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13114'. [ 208.372426][ T36] audit: type=1326 audit(2000000005.512:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27309 comm="syz.1.13150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x0 [ 208.505733][ T36] audit: type=1326 audit(2000000005.642:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27333 comm="syz.1.13162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x0 [ 208.534582][T27338] overlayfs: missing 'lowerdir' [ 208.579750][T27343] SELinux: Context system_u:object_r:smartcard_device_t:s0 is not valid (left unmapped). [ 208.598097][ T36] audit: type=1400 audit(2000000005.732:849): avc: denied { relabelto } for pid=27341 comm="syz.1.13166" name="cgroup" dev="tmpfs" ino=20352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:smartcard_device_t:s0" [ 208.628340][T27352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13170'. [ 208.636314][ T36] audit: type=1400 audit(2000000005.732:850): avc: denied { associate } for pid=27341 comm="syz.1.13166" name="cgroup" dev="tmpfs" ino=20352 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:smartcard_device_t:s0" [ 208.744833][T27373] No source specified [ 208.838821][T27384] netlink: 'syz.1.13185': attribute type 11 has an invalid length. [ 209.287594][T27453] __vm_enough_memory: pid: 27453, comm: syz.1.13219, bytes: 21200208228352 not enough memory for the allocation [ 209.516079][ T36] audit: type=1326 audit(2000000006.652:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27359 comm="syz.4.13174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x7fc00000 [ 209.547998][ T36] audit: type=1326 audit(2000000006.652:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27359 comm="syz.4.13174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50d898f749 code=0x7fc00000 [ 209.593726][ T36] audit: type=1326 audit(2000000006.652:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27359 comm="syz.4.13174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x7fc00000 [ 209.618345][ T36] audit: type=1326 audit(2000000006.652:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27359 comm="syz.4.13174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x7fc00000 [ 210.050384][T27575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13278'. [ 210.300205][T27632] netlink: 'syz.1.13305': attribute type 33 has an invalid length. [ 210.308530][T27632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13305'. [ 210.623104][T27697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13336'. [ 210.645949][T27697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13336'. [ 210.722636][T27717] netlink: 'syz.4.13346': attribute type 33 has an invalid length. [ 211.414757][T27857] __nla_validate_parse: 2 callbacks suppressed [ 211.414782][T27857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13414'. [ 211.774124][T27918] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65 sclass=netlink_audit_socket pid=27918 comm=syz.1.13443 [ 211.920826][T27944] netlink: 388 bytes leftover after parsing attributes in process `syz.4.13456'. [ 212.284877][T28001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13484'. [ 212.371885][T28020] fuse: Bad value for 'fd' [ 212.871676][T28123] 9p: Unknown Cache mode or invalid value f [ 213.264304][T28198] netlink: 'syz.1.13580': attribute type 13 has an invalid length. [ 213.779778][T28312] 9p: Unknown Cache mode or invalid value m [ 213.968796][T28350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13655'. [ 214.339069][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 214.339088][ T36] audit: type=1326 audit(2000000011.472:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28419 comm="syz.1.13689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 214.360226][T28426] netlink: 'syz.2.13692': attribute type 17 has an invalid length. [ 214.382370][ T36] audit: type=1326 audit(2000000011.502:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28419 comm="syz.1.13689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 214.406288][ T36] audit: type=1326 audit(2000000011.502:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28419 comm="syz.1.13689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 214.439673][ T36] audit: type=1326 audit(2000000011.502:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28419 comm="syz.1.13689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 214.521758][T28446] netlink: 96 bytes leftover after parsing attributes in process `syz.1.13701'. [ 214.613666][ T36] audit: type=1326 audit(2000000011.752:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28465 comm="syz.2.13712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24b558f749 code=0x0 [ 214.754825][T28485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13721'. [ 214.797752][T28494] x_tables: unsorted underflow at hook 2 [ 215.026582][T28546] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13752'. [ 215.106942][T28561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13759'. [ 215.205652][T28577] netlink: 140 bytes leftover after parsing attributes in process `syz.1.13767'. [ 215.302110][T28594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13775'. [ 215.430777][T28610] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 215.741960][T28667] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 215.755587][T28667] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 215.764388][T28667] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 215.773673][T28667] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 216.192356][T28739] fuse: Bad value for 'group_id' [ 216.207071][T28739] fuse: Bad value for 'group_id' [ 216.380042][ T36] audit: type=1400 audit(2000000013.512:878): avc: denied { write } for pid=28770 comm="syz.2.13861" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.418200][ T36] audit: type=1400 audit(2000000013.512:879): avc: denied { ioctl } for pid=28770 comm="syz.2.13861" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.552068][T28796] netlink: 'syz.4.13873': attribute type 1 has an invalid length. [ 217.155962][T28874] __nla_validate_parse: 4 callbacks suppressed [ 217.155993][T28874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13911'. [ 217.462427][T28944] /dev/loop0: Can't lookup blockdev [ 217.565573][T28962] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13961'. [ 217.773475][T28979] netlink: 'syz.3.13958': attribute type 1 has an invalid length. [ 217.781694][T28979] netlink: 'syz.3.13958': attribute type 2 has an invalid length. [ 218.010180][T29026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13985'. [ 218.019211][T29030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29030 comm=syz.2.13987 [ 218.164501][T29061] x_tables: duplicate underflow at hook 1 [ 218.203379][T29067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14004'. [ 218.258502][ T36] audit: type=1326 audit(2000000015.392:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29077 comm="syz.4.14009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x0 [ 218.358296][T29099] netlink: 388 bytes leftover after parsing attributes in process `syz.4.14019'. [ 218.424539][T29111] netlink: 96 bytes leftover after parsing attributes in process `syz.4.14025'. [ 218.790879][T29186] overlayfs: empty lowerdir [ 219.162253][T29270] No source specified [ 219.260779][T29285] FAT-fs (rnullb0): bogus number of reserved sectors [ 219.267577][T29285] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 219.398459][T29302] fuseblk: Bad value for 'fd' [ 219.538978][ T36] audit: type=1400 audit(2000000016.672:881): avc: denied { associate } for pid=29322 comm="syz.3.14126" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 219.835975][T29353] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14143'. [ 220.047276][T29381] netlink: 'syz.3.14156': attribute type 25 has an invalid length. [ 220.203815][T29411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14171'. [ 221.142408][T29549] incfs: Backing dir is not set, filesystem can't be mounted. [ 221.150088][T29549] incfs: mount failed -2 [ 221.276214][T29569] No source specified [ 221.329564][T29583] veth1_to_bond: entered allmulticast mode [ 221.336012][T29583] veth1_to_bond: left allmulticast mode [ 221.764658][T29663] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14294'. [ 221.792770][ T36] audit: type=1326 audit(2000000001.890:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29668 comm="syz.1.14297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x0 [ 221.809101][T29672] tmpfs: Bad value for 'huge' [ 222.054036][T29724] tmpfs: Bad value for 'huge' [ 222.101741][T29736] fuse: Bad value for 'fd' [ 222.137157][T29742] SELinux: security_context_str_to_sid (=5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 222.159344][T29746] overlayfs: missing 'lowerdir' [ 222.386854][T29797] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14359'. [ 222.439439][T29805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14363'. [ 222.645228][T29841] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29841 comm=syz.2.14380 [ 223.695235][T29962] netlink: 140 bytes leftover after parsing attributes in process `syz.1.14440'. [ 223.753766][T29971] fuse: Bad value for 'fd' [ 223.779528][T29976] can: request_module (can-proto-0) failed. [ 223.881692][T29999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14458'. [ 224.296246][ T36] audit: type=1400 audit(2000000000.770:883): avc: denied { getattr } for pid=30087 comm="syz.1.14503" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=143461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 224.421085][ T36] audit: type=1326 audit(2000000000.900:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30104 comm="syz.1.14511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x0 [ 224.566375][T30151] batadv_slave_1: entered promiscuous mode [ 224.572968][T30151] batadv_slave_1: left promiscuous mode [ 224.645109][T30168] overlay: Bad value for 'verity' [ 224.667395][T30173] cgroup: none used incorrectly [ 225.377216][T30247] SELinux: Context system_u:object_r:sshd_var_run_t:s0 is not valid (left unmapped). [ 225.388093][ T36] audit: type=1400 audit(2000000001.860:885): avc: denied { relabelto } for pid=30246 comm="syz.1.14581" name="blkio.bfq.group_wait_time" dev="tmpfs" ino=22640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sshd_var_run_t:s0" [ 225.417211][ T36] audit: type=1400 audit(2000000001.860:886): avc: denied { associate } for pid=30246 comm="syz.1.14581" name="blkio.bfq.group_wait_time" dev="tmpfs" ino=22640 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sshd_var_run_t:s0" [ 225.449036][ T36] audit: type=1400 audit(2000000001.870:887): avc: denied { unlink } for pid=290 comm="syz-executor" name="blkio.bfq.group_wait_time" dev="tmpfs" ino=22640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sshd_var_run_t:s0" [ 225.574058][T30276] veth0_to_batadv: entered allmulticast mode [ 225.618594][T30285] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 225.643379][T30289] netlink: 'syz.4.14602': attribute type 64 has an invalid length. [ 225.656125][T30289] netlink: 5 bytes leftover after parsing attributes in process `syz.4.14602'. [ 225.670203][T30289] gretap0: entered allmulticast mode [ 225.680823][T30289] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 225.729724][T30301] netlink: 'syz.1.14608': attribute type 4 has an invalid length. [ 226.720992][T30518] IPv6: A: Disabled Multicast RS [ 226.897145][ T36] audit: type=1326 audit(2000000003.370:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.1.14732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x50000 [ 226.944756][ T36] audit: type=1326 audit(2000000003.370:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.1.14732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x50000 [ 226.969087][ T36] audit: type=1326 audit(2000000003.370:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.1.14732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x50000 [ 226.993175][ T36] audit: type=1326 audit(2000000003.370:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.1.14732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x50000 [ 227.017191][ T36] audit: type=1326 audit(2000000003.370:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.1.14732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x50000 [ 227.070954][ T36] audit: type=1326 audit(2000000003.370:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.1.14732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x50000 [ 227.112518][T30582] fuse: Bad value for 'user_id' [ 227.117511][T30582] fuse: Bad value for 'user_id' [ 227.122644][ T36] audit: type=1326 audit(2000000003.370:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.1.14732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x50000 [ 227.457554][T30629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14770'. [ 227.519367][T30639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=30639 comm=syz.2.14775 [ 227.811369][T30673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14791'. [ 228.192774][T30716] tmpfs: Bad value for 'huge' [ 228.486670][T30752] exFAT-fs (rnullb0): invalid boot record signature [ 228.501873][T30752] exFAT-fs (rnullb0): failed to read boot sector [ 228.522316][T30752] exFAT-fs (rnullb0): failed to recognize exfat type [ 228.680956][T30770] overlayfs: failed to clone upperpath [ 228.816499][T30784] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 229.175766][T30736] 9pnet_fd: p9_fd_create_tcp (30736): problem connecting socket to 127.0.0.1 [ 230.092631][T30904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14903'. [ 230.346776][T30956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14928'. [ 230.420356][T30972] fuse: Bad value for 'fd' [ 230.628638][T31017] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14958'. [ 230.715235][ T36] kauditd_printk_skb: 14247 callbacks suppressed [ 230.715254][ T36] audit: type=1326 audit(2000000007.190:15142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31033 comm="syz.1.14966" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93ff58f749 code=0x0 [ 230.739482][T31038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14968'. [ 231.013386][T31075] Invalid ELF header len 16 [ 231.150774][T31092] 9pnet: Could not find request transport: 0xffffffffffffffff [ 231.191342][T31098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14998'. [ 231.200585][T31098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14998'. [ 231.368370][T31135] tmpfs: Bad value for 'huge' [ 231.606439][T31169] netlink: 'syz.4.15033': attribute type 6 has an invalid length. [ 231.881182][T31225] overlayfs: failed to clone upperpath [ 232.218082][T31291] netlink: 100 bytes leftover after parsing attributes in process `syz.4.15093'. [ 232.324268][T31320] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 232.446653][ T36] audit: type=1400 audit(2000000008.920:15143): avc: denied { map } for pid=31345 comm="syz.4.15119" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 232.502898][T31356] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15125'. [ 232.512274][T31356] netlink: 67 bytes leftover after parsing attributes in process `syz.4.15125'. [ 232.625371][T31373] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15133'. [ 232.634901][T31373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15133'. [ 233.302699][T31395] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaa [ 233.529729][T31436] overlayfs: failed to clone lowerpath [ 233.553582][ T36] audit: type=1400 audit(2000000010.030:15144): avc: denied { read } for pid=31438 comm="syz.3.15166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 233.730583][T31474] 9pnet_fd: Insufficient options for proto=fd [ 234.093107][T31534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15213'. [ 234.273645][T31563] netlink: 'syz.2.15227': attribute type 4 has an invalid length. [ 234.330778][T31563] netlink: 'syz.2.15227': attribute type 17 has an invalid length. [ 234.484547][T31586] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 234.485966][T31590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15240'. [ 234.596028][T31604] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15247'. [ 234.609619][ T36] audit: type=1400 audit(2000000011.080:15145): avc: denied { write } for pid=31606 comm="syz.2.15248" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 234.733695][T31624] netlink: 328 bytes leftover after parsing attributes in process `syz.1.15257'. [ 234.885683][T31650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15270'. [ 234.913315][T31650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15270'. [ 235.052909][T31678] incfs_lookup_dentry err:-13 [ 235.058102][T31678] incfs: Can't find or create .index dir in ./bus [ 235.064914][T31678] incfs: mount failed -13 [ 235.068375][T31672] overlayfs: failed to clone upperpath [ 235.418817][T31727] netlink: 'syz.3.15308': attribute type 4 has an invalid length. [ 235.916388][T31808] binder: Bad value for 'stats' [ 235.986309][T31824] x_tables: duplicate underflow at hook 2 [ 236.011067][T31829] netlink: 'syz.4.15358': attribute type 4 has an invalid length. [ 236.019021][T31829] netlink: 'syz.4.15358': attribute type 5 has an invalid length. [ 237.282931][T32005] overlayfs: failed to clone upperpath [ 237.569479][T32068] __nla_validate_parse: 8 callbacks suppressed [ 237.569503][T32068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15474'. [ 237.725057][T32096] fuse: Bad value for 'group_id' [ 237.733871][T32096] fuse: Bad value for 'group_id' [ 237.948070][T32112] overlayfs: failed to clone upperpath [ 237.993707][T32122] fuseblk: Bad value for 'fd' [ 238.172030][T32158] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15519'. [ 238.390445][T32205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15541'. [ 238.590029][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 238.609022][T32243] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15560'. [ 238.750045][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 238.758335][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 238.768382][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 238.776365][ T9] usb 5-1: can't read configurations, error -71 [ 239.520093][T32403] binder: Bad value for 'defcontext' [ 239.565399][T32412] netlink: 112 bytes leftover after parsing attributes in process `syz.2.15642'. [ 239.584825][T32412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15642'. [ 240.070093][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 240.220031][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 240.226521][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.235187][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.245375][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.254303][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 240.268498][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.277693][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.285738][ T9] usb 5-1: Product: syz [ 240.290027][ T9] usb 5-1: Manufacturer: syz [ 240.294632][ T9] usb 5-1: SerialNumber: syz [ 240.503718][ T9] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 240.514212][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 240.530286][ T9] usb 5-1: USB disconnect, device number 5 [ 240.546132][T32200] udevd[32200]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 240.618415][T32518] netlink: 140 bytes leftover after parsing attributes in process `syz.3.15693'. [ 240.807776][T32550] netlink: 580 bytes leftover after parsing attributes in process `syz.1.15709'. [ 240.925805][T32572] cgroup2: Unknown parameter '18446744073709551615' [ 241.184234][T32629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15748'. [ 241.282778][T32649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15757'. [ 241.287469][T32651] fuse: Bad value for 'user_id' [ 241.297039][T32651] fuse: Bad value for 'user_id' [ 241.682485][T32708] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=32708 comm=syz.4.15787 [ 242.470026][ T45] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 242.611145][ T392] fuse: Bad value for 'fd' [ 242.621118][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 242.643934][ T45] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 242.653832][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.666857][ T45] usb 3-1: config 0 descriptor?? [ 242.679851][ T335] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 242.682509][ T400] __nla_validate_parse: 2 callbacks suppressed [ 242.682544][ T400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15854'. [ 242.899949][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 242.910289][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 242.928857][ T45] usb 3-1: USB disconnect, device number 14 [ 243.220128][ T496] bpf: Bad value for 'uid' [ 243.321023][ T36] audit: type=1326 audit(2000000019.800:15147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.3.15912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x7ffc0000 [ 243.345228][ T36] audit: type=1326 audit(2000000019.800:15146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.3.15912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x7ffc0000 [ 243.369421][ T36] audit: type=1326 audit(2000000019.800:15148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.3.15912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x7ffc0000 [ 243.393788][ T36] audit: type=1326 audit(2000000019.800:15149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.3.15912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x7ffc0000 [ 243.419169][ T36] audit: type=1326 audit(2000000019.800:15150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.3.15912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x7ffc0000 [ 243.442872][ T36] audit: type=1326 audit(2000000019.800:15151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.3.15912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe54078f749 code=0x7ffc0000 [ 243.467702][ T36] audit: type=1326 audit(2000000019.800:15152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.3.15912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x7ffc0000 [ 243.491822][ T36] audit: type=1326 audit(2000000019.800:15153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.3.15912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x7ffc0000 [ 243.516066][ T36] audit: type=1326 audit(2000000019.800:15154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.3.15912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x7ffc0000 [ 243.540256][ T36] audit: type=1326 audit(2000000019.800:15155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.3.15912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe54078f749 code=0x7ffc0000 [ 243.628050][ T558] netlink: 'syz.3.15931': attribute type 1 has an invalid length. [ 243.784697][ T581] SELinux: failed to load policy [ 243.790104][ T589] overlayfs: failed to clone lowerpath [ 244.148867][ T653] netlink: 188 bytes leftover after parsing attributes in process `syz.1.15978'. [ 244.183935][ T657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15980'. [ 244.296359][ T685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15992'. [ 244.431025][ T709] netlink: 756 bytes leftover after parsing attributes in process `syz.2.16004'. [ 244.900019][ T64] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 245.071178][ T64] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 245.079588][ T64] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 245.093995][ T64] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 245.103719][ T64] usb 3-1: config 220 has no interface number 1 [ 245.110386][ T64] usb 3-1: config 220 interface 0 has no altsetting 0 [ 245.117527][ T64] usb 3-1: config 220 interface 76 has no altsetting 0 [ 245.126632][ T64] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 245.136046][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.144593][ T64] usb 3-1: Product: syz [ 245.158976][ T64] usb 3-1: Manufacturer: syz [ 245.163977][ T64] usb 3-1: SerialNumber: syz [ 245.283597][ T831] netlink: 172 bytes leftover after parsing attributes in process `syz.3.16056'. [ 245.292942][ T831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16056'. [ 245.384791][ T64] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 245.400061][ T64] usb 3-1: No valid video chain found. [ 245.412067][ T64] usb 3-1: USB disconnect, device number 15 [ 246.105647][ T912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16095'. [ 246.270430][ T946] netlink: 268 bytes leftover after parsing attributes in process `syz.1.16112'. [ 246.682816][ T1005] netlink: 268 bytes leftover after parsing attributes in process `syz.2.16140'. [ 248.374525][ T1323] __nla_validate_parse: 4 callbacks suppressed [ 248.374549][ T1323] netlink: 112 bytes leftover after parsing attributes in process `syz.4.16296'. [ 248.775449][ T1371] No source specified [ 248.780399][ T1364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=1364 comm=syz.2.16314 [ 248.793752][ T1364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16314'. [ 248.803158][ T1364] erspan0: entered promiscuous mode [ 248.976562][ T1401] tmpfs: Bad value for 'huge' [ 249.320930][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 249.320949][ T36] audit: type=1326 audit(2000000025.845:15167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.16358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x7ffc0000 [ 249.354560][ T36] audit: type=1326 audit(2000000025.845:15168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.16358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x7ffc0000 [ 249.399263][ T36] audit: type=1326 audit(2000000025.845:15169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.16358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe54078f749 code=0x7ffc0000 [ 249.427787][ T36] audit: type=1326 audit(2000000025.845:15170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1454 comm="syz.3.16358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5407c2005 code=0x7ffc0000 [ 249.452058][ T36] audit: type=1326 audit(2000000025.845:15171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.16358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x7ffc0000 [ 249.478076][ T36] audit: type=1326 audit(2000000025.845:15172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.16358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x7ffc0000 [ 249.511325][ T36] audit: type=1326 audit(2000000026.010:15173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1454 comm="syz.3.16358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fe54078f749 code=0x7ffc0000 [ 249.710140][ T1492] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16377'. [ 249.810585][ T36] audit: type=1326 audit(2000000026.349:15174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1508 comm="syz.1.16385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 249.848121][ T36] audit: type=1326 audit(2000000026.349:15175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1508 comm="syz.1.16385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 249.888972][ T1517] overlayfs: failed to clone upperpath [ 249.917284][ T36] audit: type=1326 audit(2000000026.380:15176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1508 comm="syz.1.16385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff58f749 code=0x7ffc0000 [ 250.023177][ T1540] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16400'. [ 250.043999][ T1540] netlink: 43 bytes leftover after parsing attributes in process `syz.3.16400'. [ 250.054073][ T1540] netlink: 'syz.3.16400': attribute type 5 has an invalid length. [ 250.062146][ T1540] netlink: 43 bytes leftover after parsing attributes in process `syz.3.16400'. [ 250.239337][ T1585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16422'. [ 250.245500][ T1588] 9pnet_virtio: no channels available for device syz [ 250.285308][ T1593] netlink: 'syz.1.16425': attribute type 63 has an invalid length. [ 250.296866][ T1593] netlink: 5 bytes leftover after parsing attributes in process `syz.1.16425'. [ 250.378018][ T1613] netlink: 48 bytes leftover after parsing attributes in process `syz.1.16435'. [ 250.498080][ T1638] SELinux: security_context_str_to_sid () failed with errno=-22 [ 250.527409][ T1643] netlink: 'syz.2.16450': attribute type 27 has an invalid length. [ 250.549247][ T1643] lo: entered promiscuous mode [ 250.554153][ T1643] lo: entered allmulticast mode [ 250.561076][ T1643] tunl0: entered promiscuous mode [ 250.566360][ T1643] tunl0: entered allmulticast mode [ 250.572730][ T1643] gre0: entered promiscuous mode [ 250.577801][ T1643] gre0: entered allmulticast mode [ 250.583504][ T1643] gretap0: entered promiscuous mode [ 250.589332][ T1643] erspan0: entered allmulticast mode [ 250.595887][ T1643] ip_vti0: entered promiscuous mode [ 250.601450][ T1643] ip_vti0: entered allmulticast mode [ 250.608175][ T1643] ip6_vti0: entered promiscuous mode [ 250.614743][ T1643] ip6_vti0: entered allmulticast mode [ 250.635189][ T1643] sit0: entered allmulticast mode [ 250.653402][ T1643] ip6tnl0: entered promiscuous mode [ 250.659863][ T1643] ip6tnl0: entered allmulticast mode [ 250.670802][ T1643] ip6gre0: entered promiscuous mode [ 250.676408][ T1643] ip6gre0: entered allmulticast mode [ 250.683334][ T1643] dummy0: entered promiscuous mode [ 250.688730][ T1643] dummy0: entered allmulticast mode [ 250.694487][ T1643] veth0: entered promiscuous mode [ 250.699840][ T1643] veth0: entered allmulticast mode [ 250.706148][ T1643] veth1: entered promiscuous mode [ 250.711305][ T1643] veth1: entered allmulticast mode [ 250.717308][ T1643] wg1: entered promiscuous mode [ 250.722525][ T1643] wg1: entered allmulticast mode [ 250.728409][ T1643] veth0_to_bridge: entered promiscuous mode [ 250.734405][ T1643] veth0_to_bridge: entered allmulticast mode [ 250.741750][ T1643] bridge_slave_0: entered promiscuous mode [ 250.748020][ T1643] bridge_slave_0: entered allmulticast mode [ 250.754990][ T1643] veth1_to_bridge: entered promiscuous mode [ 250.760995][ T1643] veth1_to_bridge: entered allmulticast mode [ 250.768324][ T1643] bridge_slave_1: entered promiscuous mode [ 250.774634][ T1643] bridge_slave_1: entered allmulticast mode [ 250.781018][ T1643] veth0_to_bond: entered promiscuous mode [ 250.786868][ T1643] veth0_to_bond: entered allmulticast mode [ 250.793212][ T1643] : entered promiscuous mode [ 250.798363][ T1643] : entered allmulticast mode [ 250.803942][ T1643] veth1_to_bond: entered promiscuous mode [ 250.809785][ T1643] veth1_to_bond: entered allmulticast mode [ 250.816235][ T1643] bond_slave_1: entered promiscuous mode [ 250.821902][ T1643] bond_slave_1: entered allmulticast mode [ 250.828718][ T1643] veth0_to_team: entered promiscuous mode [ 250.834683][ T1643] veth0_to_team: entered allmulticast mode [ 250.841004][ T1643] team_slave_0: entered promiscuous mode [ 250.846704][ T1643] team_slave_0: entered allmulticast mode [ 250.853061][ T1643] veth1_to_team: entered promiscuous mode [ 250.858810][ T1643] veth1_to_team: entered allmulticast mode [ 250.865228][ T1643] team_slave_1: entered promiscuous mode [ 250.870954][ T1643] team_slave_1: entered allmulticast mode [ 250.877191][ T1643] veth0_to_batadv: entered promiscuous mode [ 250.883141][ T1643] veth0_to_batadv: entered allmulticast mode [ 250.889560][ T1643] batadv_slave_0: entered promiscuous mode [ 250.895468][ T1643] batadv_slave_0: entered allmulticast mode [ 250.901783][ T1643] veth1_to_batadv: entered promiscuous mode [ 250.907775][ T1643] veth1_to_batadv: entered allmulticast mode [ 250.914538][ T1643] batadv_slave_1: entered promiscuous mode [ 250.920653][ T1643] batadv_slave_1: entered allmulticast mode [ 250.927018][ T1643] xfrm0: entered promiscuous mode [ 250.932288][ T1643] xfrm0: entered allmulticast mode [ 250.937863][ T1643] veth0_to_hsr: entered promiscuous mode [ 250.943722][ T1643] veth0_to_hsr: entered allmulticast mode [ 250.950082][ T1643] hsr_slave_0: entered promiscuous mode [ 250.955641][ T1643] hsr_slave_0: entered allmulticast mode [ 250.961751][ T1643] veth1_to_hsr: entered promiscuous mode [ 250.967411][ T1643] veth1_to_hsr: entered allmulticast mode [ 250.973609][ T1643] hsr_slave_1: entered promiscuous mode [ 250.979329][ T1643] hsr_slave_1: entered allmulticast mode [ 250.985432][ T1643] veth1_virt_wifi: entered promiscuous mode [ 250.991757][ T1643] veth1_virt_wifi: entered allmulticast mode [ 250.998747][ T1643] veth0_virt_wifi: entered promiscuous mode [ 251.004724][ T1643] veth0_virt_wifi: entered allmulticast mode [ 251.011386][ T1643] veth1_vlan: entered promiscuous mode [ 251.016883][ T1643] veth1_vlan: entered allmulticast mode [ 251.022963][ T1643] veth0_vlan: entered allmulticast mode [ 251.029341][ T1643] @: entered promiscuous mode [ 251.034153][ T1643] @: entered allmulticast mode [ 251.039520][ T1643] veth1_macvtap: entered allmulticast mode [ 251.046050][ T1643] veth0_macvtap: entered promiscuous mode [ 251.052036][ T1643] veth0_macvtap: entered allmulticast mode [ 251.058442][ T1643] macsec0: entered promiscuous mode [ 251.063739][ T1643] macsec0: entered allmulticast mode [ 251.069576][ T1643] ip6tnl1: entered promiscuous mode [ 251.074882][ T1643] ip6tnl1: entered allmulticast mode [ 251.080931][ T1643] syztnl0: entered promiscuous mode [ 251.086182][ T1643] syztnl0: entered allmulticast mode [ 251.092337][ T1643] bond_slave_1.00: entered promiscuous mode [ 251.098389][ T1643] bond_slave_1.00: entered allmulticast mode [ 251.104954][ T1643] ip6tnl2: entered promiscuous mode [ 251.110294][ T1643] ip6tnl2: entered allmulticast mode [ 251.116242][ T1643] erspan0.0768: entered promiscuous mode [ 251.122056][ T1643] erspan0.0768: entered allmulticast mode [ 251.128502][ T1643] sit1: entered promiscuous mode [ 251.133470][ T1643] sit1: entered allmulticast mode [ 251.138963][ T1643] syztnl1: entered promiscuous mode [ 251.144184][ T1643] syztnl1: entered allmulticast mode [ 251.150325][ T1643] syzkaller0: entered promiscuous mode [ 251.155974][ T1643] syzkaller0: entered allmulticast mode [ 251.162803][ T1675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16466'. [ 251.175855][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 251.184208][ T12] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 251.465918][ T1732] 9pnet: Unknown protocol version 9 [ 251.558730][ T1751] netlink: 'syz.3.16504': attribute type 4 has an invalid length. [ 251.614780][ T1763] tipc: Enabling of bearer rejected, failed to enable media [ 252.457431][ T1917] netlink: 'syz.1.16580': attribute type 16 has an invalid length. [ 252.503680][ T1923] 9pnet_fd: Insufficient options for proto=fd [ 253.342137][ T2047] cgroup: Invalid name [ 253.383239][ T2053] futex_wake_op: syz.1.16646 tries to shift op by 144; fix this program [ 253.401369][ T2059] netlink: 'syz.4.16649': attribute type 4 has an invalid length. [ 253.415302][ T2059] __nla_validate_parse: 8 callbacks suppressed [ 253.415325][ T2059] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.16649'. [ 253.928907][ T2152] fuse: Bad value for 'fd' [ 253.966944][ T12] tipc: Subscription rejected, illegal request [ 253.977708][ T2164] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 254.057891][ T2182] netlink: 68 bytes leftover after parsing attributes in process `syz.4.16710'. [ 254.220853][ T2217] fuse: Bad value for 'group_id' [ 254.226270][ T2217] fuse: Bad value for 'group_id' [ 254.438121][ T2263] netlink: 68 bytes leftover after parsing attributes in process `syz.4.16751'. [ 254.713304][ T2323] tmpfs: Bad value for 'huge' [ 254.770708][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 254.770731][ T36] audit: type=1400 audit(2000000031.429:15180): avc: denied { append } for pid=2334 comm="syz.1.16786" name="file0" dev="tmpfs" ino=26090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 254.976669][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 255.055090][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 255.089053][ T2371] SELinux: Context is not valid (left unmapped). [ 255.104969][ T36] audit: type=1400 audit(2000000031.776:15181): avc: denied { relabelto } for pid=2359 comm="syz.4.16798" name="blkio.bfq.io_serviced" dev="tmpfs" ino=6410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 255.172538][ T36] audit: type=1400 audit(2000000031.776:15182): avc: denied { associate } for pid=2359 comm="syz.4.16798" name="blkio.bfq.io_serviced" dev="tmpfs" ino=6410 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 255.172624][ T2374] netlink: 'syz.3.16805': attribute type 16 has an invalid length. [ 255.241195][ T2374] netlink: 64122 bytes leftover after parsing attributes in process `syz.3.16805'. [ 255.258325][ T36] audit: type=1400 audit(2000000031.929:15183): avc: denied { unlink } for pid=25105 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=6410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 255.293199][ T2381] netlink: 'syz.4.16808': attribute type 13 has an invalid length. [ 255.405911][ T2395] fuse: Bad value for 'fd' [ 255.539891][ T36] audit: type=1400 audit(2000000032.214:15184): avc: denied { sys_module } for pid=2414 comm="syz.3.16825" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 255.719240][ T2437] netlink: 'syz.4.16836': attribute type 16 has an invalid length. [ 255.728581][ T2437] netlink: 64122 bytes leftover after parsing attributes in process `syz.4.16836'. [ 255.944715][ T2480] 9p: Unknown access argument a: -22 [ 256.086630][ T36] audit: type=1400 audit(2000000032.775:15185): avc: denied { unlink } for pid=2503 comm="syz.4.16870" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 256.348115][ T36] audit: type=1400 audit(2000000033.040:15186): avc: denied { remount } for pid=2564 comm="syz.1.16899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 256.517491][ T36] audit: type=1326 audit(2000000033.213:15187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2597 comm="syz.3.16916" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe54078f749 code=0x0 [ 256.873210][ T2662] netlink: 'syz.1.16946': attribute type 27 has an invalid length. [ 257.017192][ T2682] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16956'. [ 257.391163][ T2746] Invalid ELF header magic: != ELF [ 258.003157][ T2870] netlink: 'syz.3.17047': attribute type 27 has an invalid length. [ 258.126349][ T2892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17059'. [ 258.402487][ T36] audit: type=1400 audit(2000000035.125:15188): avc: denied { accept } for pid=2943 comm="syz.4.17083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 258.503733][ T2963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=2963 comm=syz.4.17091 [ 258.555684][ T2969] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 258.643684][ T2985] 9p: Unknown access argument a: -22 [ 258.775628][ T3000] fuse: Bad value for 'fd' [ 258.816250][ T3007] IPv6: syztnl0: Disabled Multicast RS [ 258.949607][ T3035] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 258.959031][ T3035] overlayfs: missing 'lowerdir' [ 259.001232][ T3045] batadv_slave_1: entered promiscuous mode [ 259.007714][ T3043] batadv_slave_1: left promiscuous mode [ 259.033640][ T3049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17134'. [ 259.594662][ T3149] netlink: 'syz.3.17182': attribute type 28 has an invalid length. [ 259.686536][ T3169] netlink: 388 bytes leftover after parsing attributes in process `syz.1.17192'. [ 259.697997][ T3171] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17193'. [ 259.759336][ T3183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17199'. [ 259.866274][ T3201] netlink: 52 bytes leftover after parsing attributes in process `syz.1.17208'. [ 259.904516][ T3209] netlink: 68 bytes leftover after parsing attributes in process `syz.3.17212'. [ 260.108833][ T3254] overlay: Unknown parameter '/' [ 260.231052][ T36] audit: type=1326 audit(2000000036.983:15189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3278 comm="syz.4.17246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x0 [ 260.385544][ T3305] netlink: 104 bytes leftover after parsing attributes in process `syz.3.17259'. [ 260.726307][ T3378] overlayfs: failed to clone upperpath [ 261.525888][ T3473] 9pnet_fd: Insufficient options for proto=fd [ 261.626110][ T3490] overlayfs: failed to resolve './file0': -2 [ 261.693249][ T3503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17354'. [ 261.718483][ T3507] 9pnet_fd: p9_fd_create_unix (3507): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 261.880515][ T3541] incfs: Error accessing: ./cgroup. [ 261.977022][ T3541] incfs: mount failed -20 [ 262.304507][ T3614] netlink: 'syz.4.17408': attribute type 46 has an invalid length. [ 262.312679][ T3614] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17408'. [ 262.411965][ T3628] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 262.420751][ T3629] x_tables: duplicate entry at hook 1 [ 262.429312][ T3628] overlayfs: failed to clone lowerpath [ 262.527521][ T36] audit: type=1400 audit(2000000039.311:15190): avc: denied { execheap } for pid=3646 comm="syz.4.17424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 262.576570][ T3658] 9pnet_fd: Insufficient options for proto=fd [ 262.787841][ T3701] 9pnet_fd: Insufficient options for proto=fd [ 262.938860][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 262.946549][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 263.072871][ T3731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17462'. [ 263.249589][ T3772] netlink: 'syz.3.17481': attribute type 10 has an invalid length. [ 263.257691][ T3772] netlink: 'syz.3.17481': attribute type 10 has an invalid length. [ 263.361072][ T3793] fuse: Bad value for 'rootmode' [ 263.642373][ T3859] 9pnet: Unknown protocol version 9 [ 263.777580][ T3887] netlink: 'syz.3.17538': attribute type 4 has an invalid length. [ 264.168275][ T3960] 9pnet_fd: Insufficient options for proto=fd [ 264.394497][ T3988] netlink: 'syz.4.17588': attribute type 4 has an invalid length. [ 264.690535][ T4034] fuse: Bad value for 'fd' [ 264.780320][ T4056] netlink: 'syz.1.17622': attribute type 4 has an invalid length. [ 265.238516][ T36] audit: type=1400 audit(2000000042.012:15191): avc: denied { nlmsg_read } for pid=4145 comm="syz.3.17665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 265.270277][ T4154] __nla_validate_parse: 3 callbacks suppressed [ 265.270302][ T4154] netlink: 388 bytes leftover after parsing attributes in process `syz.1.17668'. [ 265.569410][ T36] audit: type=1400 audit(2000000042.342:15192): avc: denied { nlmsg_write } for pid=4216 comm="syz.3.17700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 265.680746][ T4242] netlink: 'syz.1.17712': attribute type 16 has an invalid length. [ 265.689169][ T4242] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.17712'. [ 265.697340][ T4249] netlink: 'syz.4.17715': attribute type 8 has an invalid length. [ 265.707951][ T4249] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17715'. [ 265.757880][ T4258] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.780795][ T4256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17719'. [ 265.906488][ T4287] netlink: 172 bytes leftover after parsing attributes in process `syz.1.17735'. [ 265.931998][ T4287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17735'. [ 266.141374][ T4322] No source specified [ 266.283668][ T4341] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4341 comm=syz.1.17760 [ 266.459528][ T4359] netlink: 108 bytes leftover after parsing attributes in process `syz.2.17769'. [ 266.467409][ T36] audit: type=1400 audit(2000000043.252:15193): avc: denied { getopt } for pid=4361 comm="syz.4.17771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 266.622339][ T4381] No source specified [ 266.900172][ T4419] tmpfs: Unsupported parameter 'mpol' [ 267.280271][ T4474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17825'. [ 267.374800][ T4492] sock: sock_timestamping_bind_phc: sock not bind to device [ 267.693431][ T4551] bpf: Bad value for 'uid' [ 268.641348][ T36] audit: type=1400 audit(2000000045.424:15194): avc: denied { getopt } for pid=4703 comm="syz.3.17937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.737140][ T4724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17946'. [ 268.828236][ T4742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17956'. [ 269.125722][ T36] audit: type=1326 audit(2000000045.904:15195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.3.17977" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x0 [ 269.541127][ T4835] overlayfs: failed to resolve './file0': -2 [ 269.627086][ T4853] overlayfs: failed to clone upperpath [ 269.739275][ T4879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25710 sclass=netlink_route_socket pid=4879 comm=syz.3.18021 [ 270.567170][ T5016] bridge0: entered allmulticast mode [ 270.701393][ T5045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5045 comm=syz.4.18099 [ 270.706849][ T5048] __nla_validate_parse: 6 callbacks suppressed [ 270.706873][ T5048] netlink: 44 bytes leftover after parsing attributes in process `syz.3.18101'. [ 270.744550][ T5051] netlink: 'syz.4.18102': attribute type 4 has an invalid length. [ 271.203461][ T5145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18148'. [ 271.306803][ T5164] cgroup: subsys name conflicts with all [ 271.496806][ T5208] netlink: 188 bytes leftover after parsing attributes in process `syz.2.18178'. [ 271.608133][ T5229] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18188'. [ 271.698574][ T5245] macsec0: left promiscuous mode [ 271.715648][ T5245] macsec0: left allmulticast mode [ 271.774367][ T36] audit: type=1326 audit(2000000048.555:15196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.4.18197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x7fc00000 [ 271.809790][ T5258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18201'. [ 271.976533][ T5281] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 272.452913][ T5355] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18249'. [ 272.710781][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18268'. [ 272.722854][ T5395] netlink: 'syz.3.18270': attribute type 10 has an invalid length. [ 272.731745][ T5395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18270'. [ 272.741306][ T5395] veth1: left allmulticast mode [ 272.943045][ T5431] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18287'. [ 272.982160][ T5439] netlink: 37 bytes leftover after parsing attributes in process `syz.4.18292'. [ 272.991369][ T5439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.998651][ T5439] IPv6: NLM_F_CREATE should be set when creating new route [ 273.005902][ T5439] IPv6: NLM_F_CREATE should be set when creating new route [ 273.372407][ T5523] ip6_vti0: left promiscuous mode [ 273.377803][ T5523] ip6_vti0: left allmulticast mode [ 273.384489][ T5523] netlink: 'syz.2.18332': attribute type 2 has an invalid length. [ 273.669927][ T5585] Invalid ELF header type: 2 != 1 [ 273.712189][ T5595] overlayfs: missing 'lowerdir' [ 273.809619][ T5613] tipc: Enabled bearer , priority 0 [ 273.947784][ T5643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5643 comm=syz.3.18392 [ 273.967944][ T5647] tmpfs: Bad value for 'huge' [ 274.176515][ T36] audit: type=1326 audit(2016777495.963:15197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.3.18416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe54078f749 code=0x0 [ 274.668355][ T5765] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5765 comm=syz.3.18453 [ 275.146796][ T5819] tipc: Started in network mode [ 275.151860][ T5819] tipc: Node identity 4, cluster identity 4711 [ 275.158374][ T5819] tipc: Node number set to 4 [ 275.784936][ T5933] incfs: Backing dir is not set, filesystem can't be mounted. [ 275.797396][ T5933] incfs: mount failed -2 [ 276.118614][ T5985] 9pnet: Unknown protocol version 9 [ 276.155900][ T36] audit: type=1400 audit(2016777497.944:15198): avc: denied { execute } for pid=5990 comm="syz.4.18564" path="/dev/rnullb0" dev="devtmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 276.298707][ T36] audit: type=1326 audit(2016777498.084:15199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.4.18574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f50d898f749 code=0x0 [ 276.452047][ T331] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 276.601948][ T331] usb 3-1: Using ep0 maxpacket: 8 [ 276.614616][ T331] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 276.627538][ T331] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 276.641950][ T331] usb 3-1: config 0 interface 0 has no altsetting 0 [ 276.648846][ T331] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 276.659851][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.674805][ T331] usb 3-1: config 0 descriptor?? [ 276.886559][ T331] usbhid 3-1:0.0: can't add hid device: -71 [ 276.892638][ T331] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 276.906252][ T331] usb 3-1: USB disconnect, device number 16 [ 276.948674][ T6094] __nla_validate_parse: 9 callbacks suppressed [ 276.948706][ T6094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18614'. [ 277.050951][ T6108] fuse: Bad value for 'fd' [ 277.326917][ T6143] netlink: 'syz.3.18637': attribute type 15 has an invalid length. [ 277.511957][ T6171] netlink: 'syz.3.18649': attribute type 16 has an invalid length. [ 277.519921][ T6171] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.18649'. [ 277.552540][ T6175] rust_binder: Write failure EFAULT in pid:9583 [ 277.651478][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 278.288660][ T6290] netlink: 56 bytes leftover after parsing attributes in process `syz.4.18709'. [ 278.298041][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 278.464721][ T36] audit: type=1326 audit(2016777500.255:15200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.2.18723" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24b558f749 code=0x0 [ 278.769181][ T6378] netlink: 388 bytes leftover after parsing attributes in process `syz.2.18751'. [ 279.321875][ T6488] netlink: 'syz.4.18807': attribute type 28 has an invalid length. [ 279.460451][ T36] audit: type=1326 audit(2016777501.245:15201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.2.18820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24b558f749 code=0x0 [ 279.931911][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18861'. [ 280.164386][ T6625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=6625 comm=syz.4.18874 [ 280.205721][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18876'. [ 280.498182][ T6665] x_tables: duplicate underflow at hook 1 [ 280.632258][ T6691] netlink: 37 bytes leftover after parsing attributes in process `syz.1.18904'. [ 280.646217][ T6691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.653504][ T6691] IPv6: NLM_F_CREATE should be set when creating new route [ 280.660753][ T6691] IPv6: NLM_F_CREATE should be set when creating new route [ 281.049755][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 281.239760][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 281.250811][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 281.259954][ T9] usb 3-1: config 0 interface 0 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 281.277647][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 281.292449][ T9] usb 3-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 281.317449][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.334827][ T9] usb 3-1: config 0 descriptor?? [ 281.361023][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 281.575463][ T45] usb 3-1: USB disconnect, device number 17 [ 281.919377][ T6872] netlink: 536 bytes leftover after parsing attributes in process `syz.3.18992'. [ 281.928824][ T6872] netlink: 52 bytes leftover after parsing attributes in process `syz.3.18992'. [ 281.993723][ T6880] netlink: 'syz.3.18996': attribute type 3 has an invalid length. [ 282.310477][ T6943] netlink: 56 bytes leftover after parsing attributes in process `syz.3.19026'. [ 282.572443][ T36] audit: type=1326 audit(2000000000.760:15202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.2.19054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24b558f749 code=0x0 [ 282.664081][ T7022] overlayfs: overlapping lowerdir path [ 282.670792][ T7018] netlink: 'syz.1.19062': attribute type 1 has an invalid length. [ 282.986550][ T7079] netlink: 268 bytes leftover after parsing attributes in process `syz.1.19090'. [ 283.223109][ T36] audit: type=1401 audit(2000000001.410:15203): op=setxattr invalid_context="system_u:object_r:usr_t:s0" [ 283.246509][ T7116] overlayfs: failed to resolve '/¬': -2 [ 283.374174][ T7150] netlink: 'syz.3.19128': attribute type 11 has an invalid length. [ 283.382399][ T7150] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.19128'. [ 283.801601][ T36] audit: type=1326 audit(2000000001.990:15204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.19172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b558f749 code=0x7ffc0000 [ 283.829227][ T36] audit: type=1326 audit(2000000001.990:15205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.19172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b558f749 code=0x7ffc0000 [ 283.853130][ T36] audit: type=1326 audit(2000000001.990:15206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.19172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f24b558f749 code=0x7ffc0000 [ 283.893727][ T36] audit: type=1326 audit(2000000001.990:15207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.19172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b558f749 code=0x7ffc0000 [ 283.935135][ T36] audit: type=1326 audit(2000000001.990:15208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.19172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b558f749 code=0x7ffc0000 [ 283.960548][ T36] audit: type=1326 audit(2000000001.990:15209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.19172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f24b558f749 code=0x7ffc0000 [ 284.015910][ T36] audit: type=1326 audit(2000000001.990:15210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.19172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b558f749 code=0x7ffc0000 [ 284.039885][ T36] audit: type=1326 audit(2000000001.990:15211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.19172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b558f749 code=0x7ffc0000 [ 284.073659][ T36] audit: type=1326 audit(2000000001.990:15212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.19172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f24b558f749 code=0x7ffc0000 [ 284.097942][ T36] audit: type=1326 audit(2000000001.990:15213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.19172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b558f749 code=0x7ffc0000 [ 284.258178][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 284.324518][ T7309] incfs: Backing dir is not set, filesystem can't be mounted. [ 284.332562][ T7309] incfs: mount failed -2 [ 284.408065][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 284.419132][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 284.434848][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 284.444272][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.455420][ T10] usb 5-1: config 0 descriptor?? [ 284.469061][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 284.475034][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 284.488054][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 284.512762][ T7337] netlink: 'syz.3.19220': attribute type 16 has an invalid length. [ 284.607176][ T7353] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7353 comm=syz.1.19228 [ 284.778032][ T10] usb 5-1: USB disconnect, device number 6 [ 284.844031][ T7383] netlink: 'syz.3.19242': attribute type 4 has an invalid length. [ 285.570322][ T7531] netlink: 'syz.3.19314': attribute type 4 has an invalid length. [ 285.578508][ T7531] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.19314'. [ 285.917935][ T7596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19346'. [ 285.933208][ T7598] tmpfs: Bad value for 'nr_blocks' [ 286.637096][ T7739] veth1: entered allmulticast mode [ 286.645206][ T7738] veth1: left allmulticast mode [ 286.668016][ T7745] netlink: 56 bytes leftover after parsing attributes in process `syz.2.19420'. [ 286.888191][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19443'. [ 287.078363][ T7834] fuse: Bad value for 'group_id' [ 287.083626][ T7834] fuse: Bad value for 'group_id' [ 287.199005][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19472'. [ 287.274474][ T7856] @: renamed from vlan0 (while UP) [ 287.280988][ T7856] tipc: Disabling bearer [ 287.758537][ T7944] netlink: 'syz.2.19516': attribute type 4 has an invalid length. [ 287.966392][ T7976] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19533'. [ 288.024610][ T7993] netlink: 96 bytes leftover after parsing attributes in process `syz.1.19539'. [ 288.446613][ T8054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19571'. [ 288.753891][ T8081] overlayfs: missing 'lowerdir' [ 288.939515][ T8115] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19601'. [ 288.969966][ T8120] overlayfs: failed to resolve './file0': -2 [ 289.183114][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19612'. [ 289.250299][ T8171] incfs: Backing dir is not set, filesystem can't be mounted. [ 289.260303][ T8171] incfs: mount failed -2 [ 289.369148][ T8197] incfs: Backing dir is not set, filesystem can't be mounted. [ 289.376763][ T8197] incfs: mount failed -2 [ 289.516935][ T8229] devpts: called with bogus options [ 289.557715][ T8239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19661'. [ 289.688503][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19673'. [ 290.003876][ T8271] netlink: 48 bytes leftover after parsing attributes in process `syz.3.19677'. [ 290.293109][ T8309] netlink: 'syz.2.19696': attribute type 4 has an invalid length. [ 290.301145][ T8309] netlink: 'syz.2.19696': attribute type 5 has an invalid length. [ 290.309271][ T8309] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.19696'. [ 290.390637][ T8329] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 290.788729][ T8391] netlink: 'syz.1.19735': attribute type 16 has an invalid length. [ 290.811989][ T8391] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.19735'. [ 290.872036][ T8409] overlayfs: missing 'lowerdir' [ 290.895637][ T8412] SELinux: security_context_str_to_sid () failed with errno=-22 [ 291.174875][ T8466] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 291.185549][ T8466] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 292.479754][ T8621] 9pnet_fd: Insufficient options for proto=fd [ 292.535668][ T8627] fuse: Bad value for 'fd' [ 292.861297][ T8658] netlink: 'syz.3.19866': attribute type 3 has an invalid length. [ 292.962941][ T8668] netlink: 'syz.4.19868': attribute type 17 has an invalid length. [ 293.017662][ T8672] __nla_validate_parse: 3 callbacks suppressed [ 293.017686][ T8672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19872'. [ 293.101994][ T8688] 9pnet_fd: Insufficient options for proto=fd [ 293.118161][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19881'. [ 293.501881][ T8761] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19916'. [ 293.523450][ T8761] netlink: 67 bytes leftover after parsing attributes in process `syz.1.19916'. [ 293.885160][ T8814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1279 sclass=netlink_route_socket pid=8814 comm=syz.1.19940 [ 293.990684][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19944'. [ 294.201000][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19954'. [ 294.214934][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19954'. [ 294.224185][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19954'. [ 294.311297][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19960'. [ 294.743745][ T8887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=8887 comm=syz.3.19973 [ 294.813426][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19977'. [ 294.998617][ T8927] veth1: entered allmulticast mode [ 295.004247][ T8926] veth1: left allmulticast mode [ 295.377842][ T8994] netlink: 'syz.1.20024': attribute type 11 has an invalid length. [ 295.386391][ T8994] netlink: 'syz.1.20024': attribute type 1 has an invalid length. [ 295.871082][ T9077] overlayfs: failed to clone upperpath [ 296.084434][ T9119] 9pnet_fd: Insufficient options for proto=fd [ 296.296375][ T9164] 9pnet: Could not find request transport: 0xffffffffffffffff [ 296.823814][ T9272] tmpfs: Unsupported parameter 'mpol' [ 297.654443][ T9410] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 297.855036][ T9446] incfs: Backing dir is not set, filesystem can't be mounted. [ 297.862698][ T9446] incfs: mount failed -2 [ 298.170477][ T9515] __nla_validate_parse: 5 callbacks suppressed [ 298.170496][ T9515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20279'. [ 298.318171][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 298.318191][ T36] audit: type=1400 audit(2000000272.573:15248): avc: denied { create } for pid=9542 comm="syz.1.20294" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7 [ 298.361738][ T36] audit: type=1400 audit(2000000273.605:15249): avc: denied { associate } for pid=9542 comm="syz.1.20294" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=CFA7 [ 298.385717][ T36] audit: type=1400 audit(2000000273.615:15250): avc: denied { rmdir } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=31111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7 [ 298.749149][ T9603] 9pnet_fd: Insufficient options for proto=fd [ 299.133118][ T9674] tipc: Enabling of bearer rejected, failed to enable media [ 299.149933][ T9676] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 299.158611][ T9676] overlayfs: missing 'lowerdir' [ 299.467444][ T9717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20378'. [ 299.939508][ T9775] netlink: 128 bytes leftover after parsing attributes in process `syz.1.20406'. [ 299.951622][ T9775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20406'. [ 299.957408][ T9771] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20404'. [ 300.073383][ T9796] incfs_lookup_dentry err:-13 [ 300.078150][ T9796] incfs: Can't find or create .index dir in ./bus [ 300.088807][ T9796] incfs: mount failed -13 [ 300.251741][ T9829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20432'. [ 300.270482][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20432'. [ 300.289200][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20432'. [ 300.649079][ T9897] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 300.658995][ T9897] overlayfs: missing 'lowerdir' [ 300.668218][ T9903] netlink: 'syz.1.20468': attribute type 4 has an invalid length. [ 300.717540][ T36] audit: type=1400 audit(2000000275.966:15251): avc: denied { mounton } for pid=9909 comm="syz.4.20472" path="/" dev="configfs" ino=2586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 300.748318][ T9916] @: renamed from vlan0 (while UP) [ 300.751740][ T9910] fuse: Bad value for 'user_id' [ 300.763266][ T9910] fuse: Bad value for 'user_id' [ 301.395611][T10012] netlink: 128 bytes leftover after parsing attributes in process `syz.4.20521'. [ 301.407192][T10012] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20521'. [ 301.552610][T10037] futex_wake_op: syz.2.20533 tries to shift op by -1; fix this program [ 301.690051][ T36] audit: type=1400 audit(2000000276.947:15252): avc: denied { ioctl } for pid=10067 comm="syz.2.20548" path="socket:[197157]" dev="sockfs" ino=197157 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 301.747772][T10078] overlayfs: conflicting options: userxattr,verity=on [ 301.859092][T10104] netlink: 'syz.2.20565': attribute type 15 has an invalid length. [ 301.875419][T10106] fuse: Bad value for 'user_id' [ 301.880994][T10106] fuse: Bad value for 'user_id' [ 302.422064][ T36] audit: type=1326 audit(2000000277.677:15253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.2.20614" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24b558f749 code=0x0 [ 302.873798][ T36] audit: type=1400 audit(2000000278.127:15254): avc: denied { watch watch_reads } for pid=10287 comm="syz.4.20656" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 302.994951][ T36] audit: type=1326 audit(2000000278.247:15255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10299 comm="syz.4.20660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x7ffc0000 [ 303.019482][ T36] audit: type=1326 audit(2000000278.247:15256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10299 comm="syz.4.20660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x7ffc0000 [ 303.052189][ T36] audit: type=1326 audit(2000000278.277:15257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10299 comm="syz.4.20660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x7ffc0000 [ 303.120270][T10309] overlayfs: overlapping lowerdir path [ 303.586850][T10388] futex_wake_op: syz.1.20703 tries to shift op by 32; fix this program [ 303.672889][T10405] batadv_slave_1: entered promiscuous mode [ 303.692608][T10405] batadv_slave_1: left promiscuous mode [ 304.389957][T10454] fuse: Bad value for 'fd' [ 304.570696][T10495] __nla_validate_parse: 6 callbacks suppressed [ 304.570720][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20753'. [ 304.574948][T10493] tmpfs: Bad value for 'huge' [ 304.789265][T10535] overlayfs: failed to clone upperpath [ 304.840711][T10546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20777'. [ 304.862491][T10549] tipc: Enabling of bearer rejected, failed to enable media [ 304.874618][T10552] incfs: Options parsing error. -22 [ 304.881224][T10552] incfs: mount failed -22 [ 305.452784][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 305.452802][ T36] audit: type=1326 audit(2000000280.709:15274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.4.20805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x7ffc0000 [ 305.482718][ T36] audit: type=1326 audit(2000000280.709:15275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.4.20805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x7ffc0000 [ 305.506669][ T36] audit: type=1326 audit(2000000280.709:15276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.4.20805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x7ffc0000 [ 305.530903][ T36] audit: type=1326 audit(2000000280.709:15277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.4.20805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x7ffc0000 [ 305.555031][ T36] audit: type=1326 audit(2000000280.709:15278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.4.20805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f50d898f749 code=0x7ffc0000 [ 305.579205][ T36] audit: type=1326 audit(2000000280.709:15279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.4.20805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x7ffc0000 [ 305.603221][ T36] audit: type=1326 audit(2000000280.709:15280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.4.20805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x7ffc0000 [ 305.627275][ T36] audit: type=1326 audit(2000000280.709:15281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.4.20805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x7ffc0000 [ 305.652044][ T36] audit: type=1326 audit(2000000280.709:15282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.4.20805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d898f749 code=0x7ffc0000 [ 305.690674][ T36] audit: type=1326 audit(2000000280.709:15283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.4.20805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f50d898f749 code=0x7ffc0000 [ 305.866533][T10619] netlink: 92 bytes leftover after parsing attributes in process `syz.3.20812'. [ 306.170802][ T291] ------------[ cut here ]------------ [ 306.176371][ T291] WARNING: CPU: 0 PID: 291 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 306.184416][ T291] Modules linked in: [ 306.188434][ T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 306.200114][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 306.210265][ T291] RIP: 0010:drop_nlink+0xce/0x110 [ 306.215332][ T291] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 306.235157][ T291] RSP: 0018:ffffc9000b5efc60 EFLAGS: 00010293 [ 306.241435][ T291] RAX: ffffffff81ee1a7e RBX: ffff8881169ede30 RCX: ffff88811f9c2600 [ 306.249489][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.257530][ T291] RBP: ffffc9000b5efc88 R08: 0000000000000003 R09: 0000000000000004 [ 306.265517][ T291] R10: dffffc0000000000 R11: fffff520016bdf7c R12: dffffc0000000000 [ 306.273550][ T291] R13: 1ffff11022d3dbcf R14: ffff8881169ede78 R15: 0000000000000000 [ 306.281661][ T291] FS: 000055555cee9500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 306.290704][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.297447][ T291] CR2: 00007f50d8be7dac CR3: 0000000129d40000 CR4: 00000000003526b0 [ 306.305457][ T291] Call Trace: [ 306.308894][ T291] [ 306.311864][ T291] shmem_rmdir+0x5f/0x90 [ 306.316183][ T291] vfs_rmdir+0x3dd/0x560 [ 306.320474][ T291] incfs_kill_sb+0x109/0x230 [ 306.325126][ T291] deactivate_locked_super+0xd5/0x2a0 [ 306.330588][ T291] deactivate_super+0xb8/0xe0 [ 306.335297][ T291] cleanup_mnt+0x3f1/0x480 [ 306.339783][ T291] __cleanup_mnt+0x1d/0x40 [ 306.344238][ T291] task_work_run+0x1e0/0x250 [ 306.348903][ T291] ? __cfi_task_work_run+0x10/0x10 [ 306.354043][ T291] ? __x64_sys_umount+0x126/0x170 [ 306.359139][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 306.364549][ T291] ? __kasan_check_read+0x15/0x20 [ 306.369662][ T291] resume_user_mode_work+0x36/0x50 [ 306.374811][ T291] syscall_exit_to_user_mode+0x64/0xb0 [ 306.380547][ T291] do_syscall_64+0x64/0xf0 [ 306.385017][ T291] ? clear_bhb_loop+0x50/0xa0 [ 306.389876][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 306.395812][ T291] RIP: 0033:0x7f24b5590a77 [ 306.400304][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 306.419970][ T291] RSP: 002b:00007ffe10e67778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 306.428476][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f24b5590a77 [ 306.436504][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe10e67830 [ 306.444516][ T291] RBP: 00007ffe10e67830 R08: 0000000000000000 R09: 0000000000000000 [ 306.452561][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe10e688c0 [ 306.460634][ T291] R13: 00007f24b5613d7d R14: 000000000004ad6c R15: 00007ffe10e68900 [ 306.468677][ T291] [ 306.471714][ T291] ---[ end trace 0000000000000000 ]--- [ 306.477649][ T291] ================================================================== [ 306.485748][ T291] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 306.492042][ T291] Write of size 4 at addr 0000000000000168 by task syz-executor/291 [ 306.500050][ T291] [ 306.502404][ T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 306.502441][ T291] Tainted: [W]=WARN [ 306.502450][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 306.502465][ T291] Call Trace: [ 306.502474][ T291] [ 306.502485][ T291] __dump_stack+0x21/0x30 [ 306.502523][ T291] dump_stack_lvl+0x10c/0x190 [ 306.502556][ T291] ? __cfi_dump_stack_lvl+0x10/0x10 [ 306.502589][ T291] print_report+0x3d/0x70 [ 306.502616][ T291] kasan_report+0x163/0x1a0 [ 306.502645][ T291] ? ihold+0x24/0x70 [ 306.502671][ T291] ? _raw_spin_unlock+0x45/0x60 [ 306.502703][ T291] ? ihold+0x24/0x70 [ 306.502747][ T291] kasan_check_range+0x299/0x2a0 [ 306.502776][ T291] __kasan_check_write+0x18/0x20 [ 306.502808][ T291] ihold+0x24/0x70 [ 306.502832][ T291] vfs_rmdir+0x26a/0x560 [ 306.502862][ T291] incfs_kill_sb+0x109/0x230 [ 306.502898][ T291] deactivate_locked_super+0xd5/0x2a0 [ 306.502929][ T291] deactivate_super+0xb8/0xe0 [ 306.502959][ T291] cleanup_mnt+0x3f1/0x480 [ 306.502984][ T291] __cleanup_mnt+0x1d/0x40 [ 306.503008][ T291] task_work_run+0x1e0/0x250 [ 306.503037][ T291] ? __cfi_task_work_run+0x10/0x10 [ 306.503064][ T291] ? __x64_sys_umount+0x126/0x170 [ 306.503096][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 306.503129][ T291] ? __kasan_check_read+0x15/0x20 [ 306.503164][ T291] resume_user_mode_work+0x36/0x50 [ 306.503198][ T291] syscall_exit_to_user_mode+0x64/0xb0 [ 306.503224][ T291] do_syscall_64+0x64/0xf0 [ 306.503254][ T291] ? clear_bhb_loop+0x50/0xa0 [ 306.503280][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 306.503305][ T291] RIP: 0033:0x7f24b5590a77 [ 306.503325][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 306.503346][ T291] RSP: 002b:00007ffe10e67778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 306.503371][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f24b5590a77 [ 306.503387][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe10e67830 [ 306.503403][ T291] RBP: 00007ffe10e67830 R08: 0000000000000000 R09: 0000000000000000 [ 306.503417][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe10e688c0 [ 306.503451][ T291] R13: 00007f24b5613d7d R14: 000000000004ad6c R15: 00007ffe10e68900 [ 306.503472][ T291] [ 306.503481][ T291] ================================================================== [ 306.750928][ T291] Disabling lock debugging due to kernel taint [ 306.757169][ T291] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 306.764995][ T291] #PF: supervisor write access in kernel mode [ 306.771075][ T291] #PF: error_code(0x0002) - not-present page [ 306.777095][ T291] PGD 800000010e7b1067 P4D 800000010e7b1067 PUD 0 [ 306.783642][ T291] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 306.789742][ T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Tainted: G B W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 306.802886][ T291] Tainted: [B]=BAD_PAGE, [W]=WARN [ 306.808006][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 306.818086][ T291] RIP: 0010:ihold+0x2a/0x70 [ 306.822640][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 306.842276][ T291] RSP: 0018:ffffc9000b5efca0 EFLAGS: 00010246 [ 306.848378][ T291] RAX: ffff88811f9c2600 RBX: 0000000000000000 RCX: ffff88811f9c2600 [ 306.856380][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.864383][ T291] RBP: ffffc9000b5efcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 306.872387][ T291] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff8881169ede3c [ 306.880398][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 306.888400][ T291] FS: 000055555cee9500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 306.897383][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.904001][ T291] CR2: 0000000000000168 CR3: 0000000129d40000 CR4: 00000000003526b0 [ 306.912012][ T291] Call Trace: [ 306.915318][ T291] [ 306.918292][ T291] vfs_rmdir+0x26a/0x560 [ 306.922588][ T291] incfs_kill_sb+0x109/0x230 [ 306.927226][ T291] deactivate_locked_super+0xd5/0x2a0 [ 306.932637][ T291] deactivate_super+0xb8/0xe0 [ 306.937353][ T291] cleanup_mnt+0x3f1/0x480 [ 306.941799][ T291] __cleanup_mnt+0x1d/0x40 [ 306.946244][ T291] task_work_run+0x1e0/0x250 [ 306.950872][ T291] ? __cfi_task_work_run+0x10/0x10 [ 306.956021][ T291] ? __x64_sys_umount+0x126/0x170 [ 306.961085][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 306.966507][ T291] ? __kasan_check_read+0x15/0x20 [ 306.971578][ T291] resume_user_mode_work+0x36/0x50 [ 306.976728][ T291] syscall_exit_to_user_mode+0x64/0xb0 [ 306.982222][ T291] do_syscall_64+0x64/0xf0 [ 306.986678][ T291] ? clear_bhb_loop+0x50/0xa0 [ 306.991393][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 306.997317][ T291] RIP: 0033:0x7f24b5590a77 [ 307.001763][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 307.021401][ T291] RSP: 002b:00007ffe10e67778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 307.029870][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f24b5590a77 [ 307.037879][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe10e67830 [ 307.045885][ T291] RBP: 00007ffe10e67830 R08: 0000000000000000 R09: 0000000000000000 [ 307.053908][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe10e688c0 [ 307.061917][ T291] R13: 00007f24b5613d7d R14: 000000000004ad6c R15: 00007ffe10e68900 [ 307.069943][ T291] [ 307.072990][ T291] Modules linked in: [ 307.076939][ T291] CR2: 0000000000000168 [ 307.081113][ T291] ---[ end trace 0000000000000000 ]--- [ 307.086593][ T291] RIP: 0010:ihold+0x2a/0x70 [ 307.091138][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 307.110778][ T291] RSP: 0018:ffffc9000b5efca0 EFLAGS: 00010246 [ 307.116890][ T291] RAX: ffff88811f9c2600 RBX: 0000000000000000 RCX: ffff88811f9c2600 [ 307.124899][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.132904][ T291] RBP: ffffc9000b5efcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 307.140909][ T291] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff8881169ede3c [ 307.148916][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 307.156945][ T291] FS: 000055555cee9500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 307.165922][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.172558][ T291] CR2: 0000000000000168 CR3: 0000000129d40000 CR4: 00000000003526b0 [ 307.180569][ T291] Kernel panic - not syncing: Fatal exception [ 307.186983][ T291] Kernel Offset: disabled [ 307.191309][ T291] Rebooting in 86400 seconds..