last executing test programs: 4m57.90413869s ago: executing program 3 (id=94): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x1) 4m57.90377769s ago: executing program 3 (id=95): dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc7) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfc, 0x8, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="1e0105"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101000) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000100)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/90, 0x5a, 0x3, 0x8, 0xf, 0x0, 0x7}}, 0x120) 4m56.341945859s ago: executing program 3 (id=112): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x8, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0xa, 0xffffffff, 0x0, 0x0, 0x1ff, 0xfe, 0x9f1, 0x0, 0x0, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x10001, 0x0, 0x9, 0x1, 0xffffbffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0xc646], [0x2, 0x1, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x40, 0x400, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x55], [0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x0, 0x0, 0x0, 0x800040, 0x40000, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0xe9d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xc, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xb1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x3ff, 0x0, 0x8f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@empty, 0x4e20, 0x0, 0x0, 0xbfcc, 0xa, 0x10, 0x20, 0x67}, {0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x87a, 0xffffffdfffffffff, 0x0, 0x7, 0x9}, {0x2, 0x3, 0x400, 0x3}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@multicast2, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x4, 0x2, 0x0, 0x0, 0x20000000}}, 0xe8) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 4m56.24020899s ago: executing program 3 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 4m56.23686364s ago: executing program 3 (id=116): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="280320000500140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 4m56.166644811s ago: executing program 3 (id=117): r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000780)=ANY=[], 0xff2e) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x4, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4m56.057731921s ago: executing program 32 (id=117): r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000780)=ANY=[], 0xff2e) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x4, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4m25.300025699s ago: executing program 1 (id=531): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) bind$tipc(r3, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 4m25.24848006s ago: executing program 1 (id=532): getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_dev$loop(0x0, 0x7, 0x180862) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b55c114c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3f409ff2176ff7be455cd4a5d83cd4a524bd3ffe70c0b2f7b6aa54cc50a1fcad31e831fa79a00", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x100}, @flat=@weak_handle={0x77682a85, 0xa}}, 0x0}}], 0x0, 0x0, 0x0}) 4m25.214908149s ago: executing program 1 (id=533): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) socket$igmp(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000140)=0x4, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 4m24.395678375s ago: executing program 1 (id=557): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000000c0)=0x839352b8218490eb) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3}) 4m24.380717675s ago: executing program 1 (id=558): syz_open_dev$usbfs(0x0, 0x77, 0x1501) setgroups(0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xd96d8b7b53e1f133, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4m24.152147946s ago: executing program 1 (id=559): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 4m24.144420076s ago: executing program 33 (id=559): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 4m20.762095317s ago: executing program 0 (id=619): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) 4m20.740535207s ago: executing program 0 (id=620): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x10003, @empty, 0xfffbffff}, 0x1c) 4m20.722771637s ago: executing program 0 (id=621): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1003, 0x6, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 4m20.705836098s ago: executing program 0 (id=622): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') 4m20.620191248s ago: executing program 0 (id=623): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f00000004c0)=""/249, 0xf9, 0x40, 0x0, 0x0) 4m20.484413149s ago: executing program 0 (id=624): rt_sigprocmask(0x2, &(0x7f0000000600)={[0xfffffffffffffffd]}, 0x0, 0x8) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r0 = gettid() r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) tkill(r0, 0x12) tkill(r1, 0x14) 4m20.451167449s ago: executing program 34 (id=624): rt_sigprocmask(0x2, &(0x7f0000000600)={[0xfffffffffffffffd]}, 0x0, 0x8) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r0 = gettid() r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) tkill(r0, 0x12) tkill(r1, 0x14) 3m42.269658982s ago: executing program 5 (id=1064): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x2, 0x1, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3m42.131080913s ago: executing program 5 (id=1067): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) fsopen(&(0x7f0000000080)='bpf\x00', 0x1) 3m42.048922334s ago: executing program 5 (id=1070): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x2, 0x3, 0xff) 3m41.999816734s ago: executing program 5 (id=1071): r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@rc={0x1f, @fixed}, &(0x7f0000000100)=0x80) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812002b08020300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x3}) 3m41.955507874s ago: executing program 5 (id=1072): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) ioprio_set$pid(0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000008004"]) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x85b83000) 3m41.748132365s ago: executing program 5 (id=1074): statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x100, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001940)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000017c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001580)=0xfffffffc) 3m41.662328026s ago: executing program 35 (id=1074): statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x100, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001940)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000017c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001580)=0xfffffffc) 3m31.554784248s ago: executing program 7 (id=1163): r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) listen(r7, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) 3m31.519537518s ago: executing program 7 (id=1164): fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x1, 0x0, 0x8, 0x5}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000001100)={0x170003, 0x0, {[0x100, 0x200004, 0x80007, 0x8, 0x100000001, 0x80000000, 0x9cb9, 0xee9]}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xfffe, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0xffffffffffffffff, 0x0) read$msr(r5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 3m31.390519959s ago: executing program 7 (id=1168): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000a40)={0x0, 0x30, 0x6, "b095594ef163"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x40, 0x1, 0x2, "8856"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000e80)={0x20, 0x0, 0x2, "367f"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000240)={0x20, 0x9, 0x2, "36fc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3m28.319325138s ago: executing program 7 (id=1198): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000100)='./bus\x00') openat$sysfs(0xffffff9c, 0x0, 0x2200, 0xe0) lsetxattr$security_capability(&(0x7f0000000180)='./bus\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x9) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m27.746968381s ago: executing program 7 (id=1201): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) lstat(&(0x7f0000000080)='./file2\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000001c0)='keyring\x00', &(0x7f00000023c0)='\x00') setresuid(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00009d6000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f00004c4000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0xffffd000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_adj\x00') exit(0x3) read$FUSE(r2, 0x0, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000165000/0x2000)=nil) r3 = socket(0x6, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe64, 0x10001ff, @empty, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) 3m27.572174032s ago: executing program 7 (id=1203): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000003480)={'veth1_macvtap\x00', &(0x7f0000000340)=@ethtool_perm_addr}) 3m27.501605353s ago: executing program 36 (id=1203): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000003480)={'veth1_macvtap\x00', &(0x7f0000000340)=@ethtool_perm_addr}) 2.561102025s ago: executing program 6 (id=5683): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x8054) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00c3ff10008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 2.539935435s ago: executing program 6 (id=5684): r0 = getpid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1281, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000000000a001"]) write$binfmt_misc(r1, 0x0, 0x0) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r6 = syz_open_procfs(0x0, 0x0) read$FUSE(r6, &(0x7f0000003d00)={0x2020}, 0x2020) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r8 = open_tree(0xffffffffffffffff, 0x0, 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) link(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r8, 0x111, 0x1, 0x9, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x88) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r9 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r9, 0x0, 0x200, 0x0) socket$inet(0x2, 0x2, 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x4) 2.175096237s ago: executing program 6 (id=5695): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r4, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1fffe00}], @NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x81}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x203}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x2004c808}, 0x1) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x188, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendto$packet(r1, &(0x7f00000005c0)="1648e71dc1be88b7ed7d7c13893a97b3f18e572f91c2dfeb5302a44224edc64dfd7b753b6b30dc703a061d97c8361a124d14d515cacc9e00a0bbdd8e9c8a325374af3c0edd8c09e1f9aa09e0c8843b4eb3a3fc1370c84192b945587a501330ee33d96f3da81605f5dca57b7fa07b493ee452540ca1837a138ca5c3146dd899ff7ec61b6322cbee708449982e7fa8f96282d9819345dff55294feedec36b499a4b341f18c119343a92a9b2998685e3b589279ad4ee03f7934d996ebc5b6c48cce5ffdf39f66ba6ba627ddb64cd49dd9005717509b2c0e0f2ab409d8f171", 0xdd, 0x80d0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) utimensat(r2, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)={{r6, r7/1000+10000}, {0x77359400}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r8, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x108, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x4048000) r9 = getpid() sched_getparam(r9, &(0x7f0000000880)) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4a054}, 0x8000) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) close_range(r10, r0, 0x2) r11 = socket$packet(0x11, 0x3, 0x300) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r3) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r12, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x6, 0x43}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000818}, 0x404c400) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), r3) sendmsg$TIPC_NL_NODE_GET(r14, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xb0, r15, 0x405, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00', 0xfff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x4004) recvmsg(r11, &(0x7f0000001400)={&(0x7f0000000e80)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000f00)=""/83, 0x53}, {&(0x7f0000000f80)=""/13, 0xd}, {&(0x7f0000000fc0)=""/221, 0xdd}, {&(0x7f00000010c0)=""/213, 0xd5}, {&(0x7f00000011c0)=""/238, 0xee}], 0x5, &(0x7f0000001340)=""/154, 0x9a}, 0x40000100) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x78, 0x5, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001800)={0x78, 0x0, &(0x7f00000016c0)=[@exit_looper, @acquire_done, @increfs={0x40046304, 0x3}, @increfs={0x40046304, 0x1}, @register_looper, @release={0x40046306, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001600)={@ptr={0x70742a85, 0x0, &(0x7f0000001580)=""/67, 0x43, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000001680)={0x0, 0x28, 0x40}}}], 0xb3, 0x0, &(0x7f0000001740)="091106aec3a3adc65121cd8055aae8845ac9ab2a6079f5176cb2dc13422823284319feac0a8a0d79ba45af08b657038bae18d508548f0fd2e0fffb283fd99857b3280b3ed3e79bb18af610470e5b05078b623e22565484cc130c1e5dd4dfa1119e1036028a4abfd02a4cc5ca3d28e601cbf8b16fae69a437594243d6d0031c2b3d0b260e49f7f23ae5c3227a04a2e15a0859c931e81f01de9ef611b10b50485b0e9be3e6a39b495bed9d7fb4de26dec3626eef"}) 2.142857887s ago: executing program 8 (id=5696): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000020000008000f0001000000", 0x24) 2.084254607s ago: executing program 6 (id=5697): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}, 0x1, 0x0, 0x2000000}, 0x0) 2.084105727s ago: executing program 8 (id=5698): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x8054) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00feff10008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 2.084023258s ago: executing program 6 (id=5699): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000002003040000080000000001090224000100000000090400000103000000092100000001220200090581"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') 2.069303317s ago: executing program 8 (id=5700): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000080000040"]) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (async) r8 = socket(0x10, 0x803, 0x0) splice(r8, 0x0, r7, &(0x7f0000000040)=0x4, 0x100000001, 0x2) (async) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x8000, 0x40024e}, 0x0, 0x0) (async) sendto$inet(r4, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f6", 0x13, 0x0, 0x0, 0x0) (async) recvmsg(r4, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2.031020728s ago: executing program 8 (id=5701): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x0, 0x0, 0x0, 0x2000]}}, 0x5c) 1.931995089s ago: executing program 8 (id=5703): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0}]) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x203, 0xffffffffffffffff, 0x0, 0x0, 0x1ff, 0x0, 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/177, 0xb1}, {&(0x7f0000000100)=""/10, 0xa}, {&(0x7f0000000140)=""/90, 0x5a}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000200)=""/104, 0x68}, {&(0x7f0000000280)=""/100, 0x64}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001580)=""/184, 0xb8}, 0x478e}, {{&(0x7f0000001640)=@can, 0x80, &(0x7f0000001740)=[{&(0x7f00000016c0)=""/123, 0x7b}], 0x1, &(0x7f0000001780)}, 0x9}, {{&(0x7f00000017c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001840)=""/243, 0xf3}, {&(0x7f0000001940)=""/107, 0x6b}, {&(0x7f00000019c0)=""/37, 0x25}, {&(0x7f0000001a00)=""/220, 0xdc}], 0x4, &(0x7f0000002200)=""/4096, 0x1000}, 0xbf}], 0x3, 0x161, &(0x7f0000001c00)) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000021c0)=0xfffffffffffffffe, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x200}, 0x1c) 1.931819578s ago: executing program 8 (id=5704): r0 = getpid() write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount$bind(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x20a5819, 0x0) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000001cc0)={0x2020}, 0x2020) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) umount2(&(0x7f00000001c0)='./file0\x00', 0x15) link(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x24060400) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) close(r4) r6 = open(&(0x7f0000000080)='./bus\x00', 0x88101, 0x718bb647156ec3b7) mknodat$loop(r6, 0x0, 0x200, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x2) 1.840152699s ago: executing program 4 (id=5709): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8, 0x10, 0x4, 0xc3, {{0x6, 0x4, 0x2, 0x10, 0x18, 0x66, 0xfffd, 0x9, 0x29, 0x0, @remote, @remote, {[@end]}}}}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fcntl$setlease(r0, 0x400, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x16) fadvise64(r1, 0x200, 0x7ffc, 0x3) 1.839878409s ago: executing program 4 (id=5710): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) splice(r0, 0x0, r1, &(0x7f00000002c0), 0x6, 0x0) socket$inet6(0xa, 0x4, 0x401) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r4 = gettid() timer_create(0x6, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'batadv0\x00', {0x2, 0x4e1d, @private=0xa010100}}) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x20) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000180)=0x1) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd(0x9) r8 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r8) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r2, &(0x7f0000000440), 0x0, 0x2002, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000500)={r7, 0x3, 0x2, r7}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) 1.810350979s ago: executing program 4 (id=5711): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}}], 0x1, 0x24044015) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x30000) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) 1.774207359s ago: executing program 4 (id=5712): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x8054) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00001f10008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 1.69226846s ago: executing program 4 (id=5713): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x0, 0x0, 0x0, 0x9400]}}, 0x5c) 1.69199531s ago: executing program 4 (id=5715): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x2c, 0x1, 0x1, [r1, r0, r0, r0, r0, r1, r0]}}], 0x30}, 0x400c0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) syz_clone(0x1020000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) 1.510479141s ago: executing program 6 (id=5716): syz_clone(0x1020000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.092063623s ago: executing program 2 (id=5719): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfa}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd5dd}]}, 0x3c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$BLKSSZGET(r3, 0x1268, &(0x7f0000000080)) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000280)={@mcast2}, 0x14) 1.091936203s ago: executing program 2 (id=5720): r0 = memfd_secret(0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="2ae0e710", 0x4, 0x6008811, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f00000000c0)=0x3e2, 0x4) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9494) r2 = openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) sendfile(r0, r2, 0x0, 0xdf3) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x15, 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000140)={0x1, [{0x0, 0x10, 0x6, &(0x7f0000000640)='ze'}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x2, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x10003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x3, 0x0, 0xfff, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x40005, 0x0}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 959.944724ms ago: executing program 2 (id=5721): clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x1dcd64ff, 0x0, 0x9, 0x3, 0xfffffffffffffffd, 0x77, 0x0, 0x74fe, 0xe, 0x3, 0x24a6, 0x8, 0x4, 0x544c, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0xf439}) 944.558585ms ago: executing program 2 (id=5722): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc)=0x2, 0xa, 0x0, 0x0, 0x0, 0x1000000) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 236.21µs ago: executing program 2 (id=5723): clock_adjtime(0x1000000000000, &(0x7f0000000000)={0x66b9, 0x100000000, 0x0, 0x9, 0x3, 0xfffffffffffffffd, 0x77, 0x0, 0x74fe, 0xe, 0x3, 0x24a6, 0x8, 0x4, 0x544c, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0xf439}) 0s ago: executing program 2 (id=5724): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000002003040000080000000001090224000100000000090400000103000000092100000001220200090581"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') kernel console output (not intermixed with test programs): 1697] usb 9-1: config 0 has no interfaces? [ 128.775497][ T1697] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 128.791460][ T1697] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 128.799856][ T1697] usb 9-1: Manufacturer: syz [ 128.809092][ T1697] usb 9-1: config 0 descriptor?? [ 128.838156][ T3860] overlayfs: failed to clone upperpath [ 128.875897][ T3864] overlay: filesystem on ./bus not supported as upperdir [ 129.025272][ T1697] usb 9-1: USB disconnect, device number 2 [ 129.487628][ T3882] raw_sendmsg: syz.6.1303 forgot to set AF_INET. Fix it! [ 129.939268][ T3918] overlayfs: failed to clone upperpath [ 129.945065][ T31] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 130.027728][ T3930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 130.093918][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 130.097278][ T3936] overlay: filesystem on ./bus not supported as upperdir [ 130.104496][ T10] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 130.110104][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.127036][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.138222][ T10] usb 3-1: USB disconnect, device number 21 [ 130.138594][ T31] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 130.166513][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.176590][ T31] usb 9-1: config 0 descriptor?? [ 130.589254][ T31] isku 0003:1E7D:319C.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.8-1/input0 [ 130.663524][ T3979] input: syz1 as /devices/virtual/input/input13 [ 130.677884][ T3981] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1348'. [ 130.848537][ T4000] overlay: filesystem on ./bus not supported as upperdir [ 130.991413][ T458] usb 9-1: USB disconnect, device number 3 [ 131.582517][ T4024] overlayfs: failed to clone upperpath [ 131.632177][ T4032] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 131.646361][ T4032] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 131.661524][ T4032] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 131.668864][ T4032] overlayfs: failed to set xattr on upper [ 131.674647][ T4032] overlayfs: ...falling back to uuid=null. [ 131.762319][ T36] audit: type=1400 audit(1762327316.910:731): avc: denied { ioctl } for pid=4036 comm="syz.2.1373" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 132.025039][ T31] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 132.176365][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.184529][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 132.193109][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.203301][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.215063][ T31] usb 3-1: string descriptor 0 read error: -22 [ 132.221311][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.230553][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.241607][ T4048] bridge0: port 3(syz_tun) entered blocking state [ 132.244843][ T31] usb 3-1: 0:2 : does not exist [ 132.248431][ T4048] bridge0: port 3(syz_tun) entered disabled state [ 132.259845][ T4048] syz_tun: entered allmulticast mode [ 132.265679][ T4048] syz_tun: entered promiscuous mode [ 132.271056][ T4048] bridge0: port 3(syz_tun) entered blocking state [ 132.278130][ T4048] bridge0: port 3(syz_tun) entered forwarding state [ 132.651948][ T4064] netlink: 'syz.8.1385': attribute type 1 has an invalid length. [ 132.659786][ T4064] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1385'. [ 132.668746][ T4064] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.950114][ T4098] overlay: filesystem on ./bus not supported as upperdir [ 133.061173][ T31] usb 3-1: 5:0: bogus dB values (-9931/-9623), disabling dB reporting [ 133.075025][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 133.090168][ T31] usb 3-1: Warning! Unlikely big volume range (=790), cval->res is probably wrong. [ 133.103489][ T31] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = -25425/-24635/1 [ 133.114219][ T31] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 133.123128][ T4115] overlayfs: failed to clone upperpath [ 133.130959][ T31] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 133.155148][ T31] usb 3-1: USB disconnect, device number 22 [ 133.365270][ T36] audit: type=1326 audit(1762327318.520:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.8.1426" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d7578f6c9 code=0x0 [ 133.586919][ T4162] bridge0: port 3(syz_tun) entered blocking state [ 133.599446][ T4162] bridge0: port 3(syz_tun) entered disabled state [ 133.615041][ T4162] syz_tun: entered allmulticast mode [ 133.628461][ T4162] syz_tun: entered promiscuous mode [ 133.639858][ T4162] bridge0: port 3(syz_tun) entered blocking state [ 133.646384][ T4162] bridge0: port 3(syz_tun) entered forwarding state [ 133.698738][ T4170] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 133.726345][ T4174] loop2: detected capacity change from 0 to 7 [ 133.735000][ T36] audit: type=1400 audit(1762327318.880:733): avc: denied { append } for pid=4171 comm="syz.2.1438" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.764831][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.774034][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 133.783302][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.792521][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 133.800403][ T332] loop2: unable to read partition table [ 133.811992][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.821220][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 133.829401][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.838609][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 133.845208][ T4181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1441'. [ 133.855615][ T4174] loop2: unable to read partition table [ 133.861979][ T4174] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 133.876350][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.885741][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 133.894430][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.903625][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 133.912234][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.921423][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 133.929820][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.939104][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 133.947510][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.956792][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 134.175640][ T4223] overlay: filesystem on ./bus not supported as upperdir [ 134.637895][ T36] audit: type=1400 audit(1762327319.790:734): avc: denied { create } for pid=4273 comm="syz.2.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 134.671373][ T36] audit: type=1400 audit(1762327319.790:735): avc: denied { bind } for pid=4273 comm="syz.2.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 135.161423][ T4323] overlay: filesystem on ./bus not supported as upperdir [ 135.235027][ T10] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 135.279926][ T4341] overlay: filesystem on ./bus not supported as upperdir [ 135.396276][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.407553][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.417340][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 135.427258][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.436242][ T10] usb 3-1: config 0 descriptor?? [ 135.442137][ T10] hub 3-1:0.0: USB hub found [ 135.620850][ T4365] overlay: filesystem on ./bus not supported as upperdir [ 135.642926][ T10] hub 3-1:0.0: 1 port detected [ 135.648740][ T4367] overlay: filesystem on ./bus not supported as upperdir [ 135.812193][ T36] audit: type=1400 audit(1762327320.960:736): avc: denied { remount } for pid=4391 comm="syz.8.1541" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 136.450743][ T9] usb 3-1: USB disconnect, device number 23 [ 136.457205][ T10] hub 3-1:0.0: activate --> -19 [ 137.465007][ T31] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 137.615002][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 137.625689][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.644994][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.655232][ T31] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 137.664298][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.675730][ T31] usb 3-1: config 0 descriptor?? [ 137.859602][ T4534] af_packet: tpacket_rcv: packet too big, clamped from 1448 to 4294967272. macoff=96 [ 138.085719][ T31] playstation 0003:054C:05C4.000F: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 138.301649][ T31] playstation 0003:054C:05C4.000F: Invalid reportID received, expected 18 got 186 [ 138.310944][ T31] playstation 0003:054C:05C4.000F: Failed to retrieve DualShock4 pairing info: -22 [ 138.320399][ T31] playstation 0003:054C:05C4.000F: Failed to get MAC address from DualShock4 [ 138.329226][ T31] playstation 0003:054C:05C4.000F: Failed to create dualshock4. [ 138.337420][ T31] playstation 0003:054C:05C4.000F: probe with driver playstation failed with error -22 [ 138.505111][ T10] usb 3-1: USB disconnect, device number 24 [ 139.217599][ T36] audit: type=1400 audit(1762327324.370:737): avc: denied { write } for pid=4572 comm="syz.2.1624" path="socket:[29229]" dev="sockfs" ino=29229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.526810][ T4597] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 140.566128][ T36] audit: type=1400 audit(1762327325.720:738): avc: denied { execute } for pid=4640 comm="syz.6.1653" name="file0" dev="ramfs" ino=28401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 140.588099][ T36] audit: type=1400 audit(1762327325.720:739): avc: denied { execute_no_trans } for pid=4640 comm="syz.6.1653" path="/file0" dev="ramfs" ino=28401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 141.023163][ T4649] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1656'. [ 141.474690][ T4670] overlay: filesystem on ./bus not supported as upperdir [ 141.592667][ T36] audit: type=1326 audit(1762327326.740:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4685 comm="syz.6.1674" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff02eb8f6c9 code=0x0 [ 142.289250][ T4695] overlay: filesystem on ./bus not supported as upperdir [ 142.905750][ T4748] overlay: filesystem on ./bus not supported as upperdir [ 142.928303][ T4751] overlayfs: failed to clone upperpath [ 143.396003][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1717'. [ 143.540852][ T36] audit: type=1400 audit(1762327328.690:741): avc: denied { watch } for pid=4793 comm="syz.8.1721" path="/154/file0" dev="tmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.580501][ T4798] overlayfs: failed to clone upperpath [ 143.840423][ T4820] overlayfs: failed to clone upperpath [ 143.877398][ T4824] overlayfs: failed to clone lowerpath [ 143.883773][ T4824] overlayfs: failed to clone lowerpath [ 144.620139][ T36] audit: type=1400 audit(1762327329.770:742): avc: denied { nlmsg_read } for pid=4842 comm="syz.8.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.714658][ T4853] overlay: filesystem on ./bus not supported as upperdir [ 144.762379][ T36] audit: type=1400 audit(1762327329.910:743): avc: denied { watch_reads } for pid=4858 comm="syz.4.1751" path="/368/bus" dev="tmpfs" ino=2072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.858986][ T4880] overlay: filesystem on ./bus not supported as upperdir [ 144.863966][ T4882] overlay: filesystem on ./bus not supported as upperdir [ 145.042032][ T4904] overlay: filesystem on ./bus not supported as upperdir [ 145.223282][ T4924] overlay: filesystem on ./bus not supported as upperdir [ 145.460936][ T4944] overlay: filesystem on ./bus not supported as upperdir [ 145.503162][ T4952] overlay: filesystem on ./bus not supported as upperdir [ 145.960490][ T4968] overlayfs: failed to clone upperpath [ 146.118535][ T4986] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 146.132730][ T4986] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 146.147081][ T4986] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 146.154130][ T4986] overlayfs: failed to set xattr on upper [ 146.160065][ T4986] overlayfs: ...falling back to uuid=null. [ 146.180600][ T4988] overlay: filesystem on ./bus not supported as upperdir [ 146.200734][ T4990] lo: entered allmulticast mode [ 146.206077][ T4990] lo: left allmulticast mode [ 146.680555][ T5024] bridge0: port 4(erspan0) entered blocking state [ 146.689569][ T5024] bridge0: port 4(erspan0) entered disabled state [ 146.700591][ T5024] erspan0: entered allmulticast mode [ 146.707632][ T5024] erspan0: entered promiscuous mode [ 146.713155][ T5024] bridge0: port 4(erspan0) entered blocking state [ 146.719676][ T5024] bridge0: port 4(erspan0) entered forwarding state [ 146.913317][ T5043] overlayfs: failed to clone upperpath [ 146.942884][ T36] audit: type=1400 audit(1762327332.090:744): avc: denied { setopt } for pid=5048 comm="syz.4.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.065394][ T36] audit: type=1400 audit(1762327332.220:745): avc: denied { append } for pid=5068 comm="syz.2.1849" name="file0" dev="tmpfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 147.088042][ T36] audit: type=1400 audit(1762327332.220:746): avc: denied { lock } for pid=5068 comm="syz.2.1849" path="/375/file0" dev="tmpfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 147.400611][ T5104] overlayfs: failed to clone upperpath [ 148.266734][ T5171] overlay: filesystem on ./bus not supported as upperdir [ 148.366327][ T5193] overlay: filesystem on ./bus not supported as upperdir [ 148.602404][ T5221] overlay: filesystem on ./bus not supported as upperdir [ 148.815668][ T5238] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 148.881898][ T5242] overlay: filesystem on ./bus not supported as upperdir [ 149.068313][ T5254] tipc: Cannot configure node identity twice [ 149.218875][ T36] audit: type=1326 audit(1762327334.370:747): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.6.1942" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff02eb8f6c9 code=0x0 [ 149.900596][ T5295] bridge0: port 3(syz_tun) entered disabled state [ 149.910471][ T5295] syz_tun (unregistering): left allmulticast mode [ 149.916967][ T5295] syz_tun (unregistering): left promiscuous mode [ 149.923375][ T5295] bridge0: port 3(syz_tun) entered disabled state [ 150.042084][ T5304] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1954'. [ 150.043235][ T5305] overlayfs: failed to resolve './file1': -2 [ 150.180987][ T5327] overlayfs: failed to resolve './file1': -2 [ 150.229773][ T5336] netlink: 'syz.6.1970': attribute type 12 has an invalid length. [ 150.405483][ T5350] overlayfs: failed to resolve './file1': -2 [ 150.457462][ T5364] netlink: 'syz.4.1984': attribute type 4 has an invalid length. [ 150.469163][ T5364] netlink: 'syz.4.1984': attribute type 4 has an invalid length. [ 150.519066][ T5375] overlayfs: failed to resolve './file1': -2 [ 150.554259][ T5381] netlink: 'syz.2.1993': attribute type 27 has an invalid length. [ 150.564022][ T36] audit: type=1326 audit(1762327335.710:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7578f6c9 code=0x7ffc0000 [ 150.587478][ T36] audit: type=1326 audit(1762327335.710:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7578f6c9 code=0x7ffc0000 [ 150.616892][ T36] audit: type=1326 audit(1762327335.710:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d7578f6c9 code=0x7ffc0000 [ 150.648379][ T36] audit: type=1326 audit(1762327335.710:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7578f6c9 code=0x7ffc0000 [ 150.672393][ T36] audit: type=1326 audit(1762327335.710:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7578f6c9 code=0x7ffc0000 [ 150.701163][ T5381] bridge0: port 3(syz_tun) entered disabled state [ 150.708241][ T36] audit: type=1326 audit(1762327335.710:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0d7578f6c9 code=0x7ffc0000 [ 150.732678][ T5381] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.739943][ T5381] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.749240][ T36] audit: type=1326 audit(1762327335.710:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7578f6c9 code=0x7ffc0000 [ 150.776939][ T36] audit: type=1326 audit(1762327335.710:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7578f6c9 code=0x7ffc0000 [ 150.800570][ T36] audit: type=1326 audit(1762327335.710:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0d7578f6c9 code=0x7ffc0000 [ 150.824015][ T36] audit: type=1326 audit(1762327335.710:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7578f6c9 code=0x7ffc0000 [ 150.893875][ T5402] overlayfs: failed to resolve './file1': -2 [ 151.845699][ T5437] overlay: filesystem on ./bus not supported as upperdir [ 152.154829][ T5444] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 152.274627][ T5449] overlay: filesystem on ./bus not supported as upperdir [ 152.311352][ T5451] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2020'. [ 152.321800][ T5451] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2020'. [ 154.489223][ T5507] tipc: Enabled bearer , priority 10 [ 154.554124][ T5513] overlay: filesystem on ./bus not supported as upperdir [ 155.690275][ T5497] overlayfs: failed to clone upperpath [ 155.752147][ T5515] overlayfs: failed to resolve './file1': -2 [ 155.788795][ T5521] netlink: 'syz.2.2050': attribute type 4 has an invalid length. [ 155.797899][ T5523] netlink: 'syz.4.2051': attribute type 1 has an invalid length. [ 156.096375][ T5535] overlay: filesystem on ./bus not supported as upperdir [ 156.137931][ T5537] overlay: filesystem on ./bus not supported as upperdir [ 156.514434][ T5558] overlay: filesystem on ./bus not supported as upperdir [ 156.589340][ T5561] overlay: filesystem on ./bus not supported as upperdir [ 156.756904][ T5576] netlink: 393 bytes leftover after parsing attributes in process `syz.2.2073'. [ 156.826654][ T5579] overlay: filesystem on ./bus not supported as upperdir [ 157.154354][ T5600] overlay: filesystem on ./bus not supported as upperdir [ 157.252155][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 157.252173][ T36] audit: type=1400 audit(1762327342.400:787): avc: denied { write } for pid=31 comm="kworker/1:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31479 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 157.497163][ T5617] netlink: 'syz.4.2091': attribute type 27 has an invalid length. [ 157.512776][ T5617] bridge0: port 4(erspan0) entered disabled state [ 157.526426][ T5617] bridge0: port 3(syz_tun) entered disabled state [ 157.533658][ T5617] bridge0: port 2(30{X) entered disabled state [ 157.540565][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.561960][ T5617] tipc: Resetting bearer [ 157.571957][ T36] audit: type=1400 audit(1762327342.720:788): avc: denied { create } for pid=5618 comm="syz.2.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.593369][ T36] audit: type=1400 audit(1762327342.720:789): avc: denied { write } for pid=5618 comm="syz.2.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.613444][ T36] audit: type=1400 audit(1762327342.720:790): avc: denied { nlmsg_write } for pid=5618 comm="syz.2.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.636616][ T5617] tipc: Resetting bearer [ 157.701170][ T5625] overlay: filesystem on ./bus not supported as upperdir [ 157.929954][ T5633] tipc: Cannot configure node identity twice [ 158.270949][ T5649] ip6gretap0: mtu less than device minimum [ 158.287282][ T5651] overlay: filesystem on ./bus not supported as upperdir [ 158.390211][ T5675] tipc: Enabled bearer , priority 26 [ 158.443247][ T5688] netlink: 182 bytes leftover after parsing attributes in process `syz.2.2124'. [ 158.444013][ T5689] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5689 comm=syz.4.2125 [ 158.515388][ T5703] macsec0: entered allmulticast mode [ 158.521129][ T5703] veth1_macvtap: entered allmulticast mode [ 158.527007][ T5703] macsec0: left allmulticast mode [ 158.532213][ T5703] veth1_macvtap: left allmulticast mode [ 158.591675][ T5713] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2137'. [ 158.702520][ T5732] netlink: 'syz.6.2146': attribute type 27 has an invalid length. [ 158.710567][ T5732] lo: entered promiscuous mode [ 158.715426][ T5732] lo: entered allmulticast mode [ 158.720971][ T5732] tunl0: entered promiscuous mode [ 158.726108][ T5732] tunl0: entered allmulticast mode [ 158.731710][ T5732] gre0: entered promiscuous mode [ 158.736705][ T5732] gre0: entered allmulticast mode [ 158.742626][ T5732] gretap0: entered promiscuous mode [ 158.747884][ T5732] gretap0: entered allmulticast mode [ 158.753878][ T5732] erspan0: entered promiscuous mode [ 158.759141][ T5732] erspan0: entered allmulticast mode [ 158.764884][ T5732] ip_vti0: entered promiscuous mode [ 158.770154][ T5732] ip_vti0: entered allmulticast mode [ 158.776049][ T5732] ip6_vti0: entered promiscuous mode [ 158.781357][ T5732] ip6_vti0: entered allmulticast mode [ 158.787731][ T5732] sit0: entered promiscuous mode [ 158.792758][ T5732] sit0: entered allmulticast mode [ 158.799346][ T5732] ip6tnl0: entered promiscuous mode [ 158.804598][ T5732] ip6tnl0: entered allmulticast mode [ 158.810655][ T5732] ip6gre0: entered promiscuous mode [ 158.815984][ T5732] ip6gre0: entered allmulticast mode [ 158.822207][ T5732] ip6gretap0: entered promiscuous mode [ 158.827749][ T5732] ip6gretap0: entered allmulticast mode [ 158.833978][ T5732] bridge0: port 3(syz_tun) entered blocking state [ 158.840450][ T5732] bridge0: port 3(syz_tun) entered forwarding state [ 158.847273][ T5732] bridge0: entered promiscuous mode [ 158.852486][ T5732] bridge0: entered allmulticast mode [ 158.858236][ T5732] vcan0: entered promiscuous mode [ 158.863282][ T5732] vcan0: entered allmulticast mode [ 158.868841][ T5732] dummy0: entered promiscuous mode [ 158.874007][ T5732] dummy0: entered allmulticast mode [ 158.879781][ T5732] veth0: entered promiscuous mode [ 158.884822][ T5732] veth0: entered allmulticast mode [ 158.891877][ T5732] veth1: entered promiscuous mode [ 158.896961][ T5732] veth1: entered allmulticast mode [ 158.902661][ T5732] wg0: entered promiscuous mode [ 158.907625][ T5732] wg0: entered allmulticast mode [ 158.913104][ T5732] wg1: entered promiscuous mode [ 158.918017][ T5732] wg1: entered allmulticast mode [ 158.923560][ T5732] wg2: entered promiscuous mode [ 158.928643][ T5732] wg2: entered allmulticast mode [ 158.934311][ T5732] veth0_to_bridge: entered promiscuous mode [ 158.940310][ T5732] veth0_to_bridge: entered allmulticast mode [ 158.947505][ T5732] veth1_to_bridge: entered promiscuous mode [ 158.953417][ T5732] veth1_to_bridge: entered allmulticast mode [ 158.960228][ T5732] veth0_to_bond: entered promiscuous mode [ 158.966150][ T5732] veth0_to_bond: entered allmulticast mode [ 158.972522][ T5732] bond_slave_0: entered promiscuous mode [ 158.978305][ T5732] bond_slave_0: entered allmulticast mode [ 158.984496][ T5732] veth1_to_bond: entered promiscuous mode [ 158.990791][ T5732] veth1_to_bond: entered allmulticast mode [ 158.997328][ T5732] bond_slave_1: entered promiscuous mode [ 159.003051][ T5732] bond_slave_1: entered allmulticast mode [ 159.009141][ T5732] veth0_to_team: entered promiscuous mode [ 159.014898][ T5732] veth0_to_team: entered allmulticast mode [ 159.021823][ T5732] team_slave_0: entered promiscuous mode [ 159.027723][ T5732] team_slave_0: entered allmulticast mode [ 159.033676][ T5732] veth1_to_team: entered promiscuous mode [ 159.039511][ T5732] veth1_to_team: entered allmulticast mode [ 159.045927][ T5732] team_slave_1: entered promiscuous mode [ 159.051595][ T5732] team_slave_1: entered allmulticast mode [ 159.057732][ T5732] veth0_to_batadv: entered promiscuous mode [ 159.063638][ T5732] veth0_to_batadv: entered allmulticast mode [ 159.070108][ T5732] batadv_slave_0: entered promiscuous mode [ 159.075985][ T5732] batadv_slave_0: entered allmulticast mode [ 159.082271][ T5732] veth1_to_batadv: entered promiscuous mode [ 159.088210][ T5732] veth1_to_batadv: entered allmulticast mode [ 159.095378][ T5732] batadv_slave_1: entered promiscuous mode [ 159.101470][ T5732] batadv_slave_1: entered allmulticast mode [ 159.107824][ T5732] xfrm0: entered promiscuous mode [ 159.112867][ T5732] xfrm0: entered allmulticast mode [ 159.118698][ T5732] veth0_to_hsr: entered promiscuous mode [ 159.124358][ T5732] veth0_to_hsr: entered allmulticast mode [ 159.130598][ T5732] hsr_slave_0: entered promiscuous mode [ 159.136195][ T5732] hsr_slave_0: entered allmulticast mode [ 159.142153][ T5732] veth1_to_hsr: entered promiscuous mode [ 159.148074][ T5732] veth1_to_hsr: entered allmulticast mode [ 159.154369][ T5732] hsr_slave_1: entered promiscuous mode [ 159.160011][ T5732] hsr_slave_1: entered allmulticast mode [ 159.166199][ T5732] veth1_virt_wifi: entered promiscuous mode [ 159.172583][ T5732] veth1_virt_wifi: entered allmulticast mode [ 159.178684][ T36] audit: type=1400 audit(1762327344.320:791): avc: denied { execmem } for pid=5739 comm="syz.4.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 159.185709][ T5732] veth0_virt_wifi: entered promiscuous mode [ 159.207407][ T5732] veth0_virt_wifi: entered allmulticast mode [ 159.214226][ T5732] veth1_vlan: entered promiscuous mode [ 159.221183][ T5732] veth1_vlan: entered allmulticast mode [ 159.227265][ T5732] veth0_vlan: left promiscuous mode [ 159.232492][ T5732] veth0_vlan: entered promiscuous mode [ 159.238021][ T5732] veth0_vlan: entered allmulticast mode [ 159.244842][ T5732] vlan0: entered promiscuous mode [ 159.250193][ T5732] vlan0: entered allmulticast mode [ 159.255659][ T5732] vlan1: entered promiscuous mode [ 159.260837][ T5732] vlan1: entered allmulticast mode [ 159.266401][ T5732] veth1_macvtap: entered allmulticast mode [ 159.272745][ T5732] veth0_macvtap: entered promiscuous mode [ 159.278550][ T5732] veth0_macvtap: entered allmulticast mode [ 159.284711][ T5732] macsec0: entered promiscuous mode [ 159.290161][ T5732] macsec0: entered allmulticast mode [ 159.295773][ T5732] syztnl0: entered promiscuous mode [ 159.300982][ T5732] syztnl0: entered allmulticast mode [ 159.306798][ T5732] syztnl2: entered promiscuous mode [ 159.312107][ T5732] syztnl2: entered allmulticast mode [ 159.317951][ T5732] vlan0000: entered promiscuous mode [ 159.323326][ T5732] vlan0000: entered allmulticast mode [ 159.330045][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.337216][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.345162][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.352228][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.384981][ T31] tipc: Node number set to 3511929902 [ 159.431316][ T5760] netlink: 182 bytes leftover after parsing attributes in process `syz.2.2159'. [ 160.099628][ T5815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2184'. [ 160.329423][ T5849] overlay: filesystem on ./bus not supported as upperdir [ 160.383242][ T36] audit: type=1326 audit(1762327345.530:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.8.2205" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d7578f6c9 code=0x0 [ 160.467841][ T36] audit: type=1400 audit(1762327345.620:793): avc: denied { read } for pid=5864 comm="syz.4.2209" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 160.932202][ T5887] overlay: filesystem on ./bus not supported as upperdir [ 161.260706][ T5905] overlay: filesystem on ./bus not supported as upperdir [ 161.340255][ T5919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2236'. [ 161.340610][ T5921] overlay: filesystem on ./bus not supported as upperdir [ 161.946280][ T36] audit: type=1326 audit(1762327347.100:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz.2.2257" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f883fd8f6c9 code=0x0 [ 163.061199][ T6033] overlayfs: failed to clone upperpath [ 163.104626][ T6037] overlayfs: failed to clone upperpath [ 164.325996][ T6117] overlayfs: failed to clone upperpath [ 164.992482][ T6161] overlay: filesystem on ./bus not supported as upperdir [ 165.092442][ T36] audit: type=1400 audit(1762327350.240:795): avc: denied { bind } for pid=6174 comm="syz.6.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 165.357646][ T6185] overlayfs: failed to clone lowerpath [ 165.711829][ T6197] netlink: 182 bytes leftover after parsing attributes in process `syz.8.2370'. [ 165.788805][ T6209] overlayfs: failed to clone upperpath [ 165.867018][ T6223] overlayfs: failed to clone upperpath [ 166.494255][ T36] audit: type=1400 audit(1762327351.640:796): avc: denied { create } for pid=6250 comm="syz.8.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.513961][ T6253] SELinux: Context KN is not valid (left unmapped). [ 166.526125][ T36] audit: type=1400 audit(1762327351.680:797): avc: denied { create } for pid=6252 comm="syz.6.2397" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=4B0D814E10 [ 166.549274][ T6253] overlayfs: failed to clone upperpath [ 166.555026][ T36] audit: type=1400 audit(1762327351.700:798): avc: denied { associate } for pid=6252 comm="syz.6.2397" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=4B0D814E10 [ 166.578536][ T36] audit: type=1400 audit(1762327351.700:799): avc: denied { mounton } for pid=6252 comm="syz.6.2397" path="/512/bus" dev="tmpfs" ino=2773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=4B0D814E10 [ 166.603641][ T36] audit: type=1326 audit(1762327351.700:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.4.2399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f23b8f6c9 code=0x0 [ 166.626810][ T36] audit: type=1400 audit(1762327351.710:801): avc: denied { write } for pid=6252 comm="syz.6.2397" name="bus" dev="tmpfs" ino=2773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=4B0D814E10 [ 166.650865][ T36] audit: type=1400 audit(1762327351.710:802): avc: denied { add_name } for pid=6252 comm="syz.6.2397" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=4B0D814E10 [ 166.673570][ T36] audit: type=1400 audit(1762327351.710:803): avc: denied { create } for pid=6252 comm="syz.6.2397" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4B0D814E10 [ 166.695864][ T36] audit: type=1400 audit(1762327351.710:804): avc: denied { read write open } for pid=6252 comm="syz.6.2397" path="/512/bus/bus" dev="tmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4B0D814E10 [ 166.975359][ T6278] bridge0: port 4(veth0_to_bridge) entered blocking state [ 166.982674][ T6278] bridge0: port 4(veth0_to_bridge) entered disabled state [ 166.989938][ T6278] veth0_to_bridge: entered allmulticast mode [ 166.996330][ T6278] veth0_to_bridge: entered promiscuous mode [ 167.045456][ T6284] overlay: filesystem on ./bus not supported as upperdir [ 167.155341][ T6301] overlayfs: failed to clone upperpath [ 167.397620][ T6327] overlay: filesystem on ./bus not supported as upperdir [ 167.430076][ T6336] overlayfs: failed to clone upperpath [ 167.681054][ T6369] overlayfs: failed to clone upperpath [ 168.011807][ T6402] overlayfs: failed to clone upperpath [ 168.113160][ T6424] overlayfs: failed to clone upperpath [ 168.617318][ T6454] overlay: filesystem on ./bus not supported as upperdir [ 169.049335][ T6474] overlay: filesystem on ./bus is read-only [ 169.803078][ T6496] overlay: filesystem on ./bus is read-only [ 170.053154][ T6513] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2515'. [ 170.303705][ T6529] tipc: Enabling of bearer rejected, failed to enable media [ 170.418920][ T6546] overlay: filesystem on ./bus not supported as upperdir [ 171.083387][ T6573] overlay: filesystem on ./bus not supported as upperdir [ 171.359349][ T6594] overlay: filesystem on ./bus is read-only [ 171.479920][ T6606] netlink: 'syz.2.2559': attribute type 32 has an invalid length. [ 171.502455][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2559'. [ 171.527037][ T6608] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=277 sclass=netlink_xfrm_socket pid=6608 comm=syz.4.2560 [ 171.550101][ T6610] overlayfs: missing 'lowerdir' [ 171.622677][ T6618] overlayfs: failed to clone upperpath [ 171.628767][ T6618] overlayfs: failed to clone lowerpath [ 171.770344][ T6633] overlayfs: failed to clone upperpath [ 172.448668][ T6655] overlayfs: failed to clone upperpath [ 172.643598][ T6672] netlink: 'syz.2.2589': attribute type 12 has an invalid length. [ 172.674471][ T6682] overlayfs: failed to clone upperpath [ 172.680844][ T6682] can: request_module (can-proto-6) failed. [ 174.121267][ T6719] overlayfs: failed to clone upperpath [ 174.148142][ T6721] netlink: 'syz.4.2610': attribute type 1 has an invalid length. [ 175.870650][ T6767] overlay: filesystem on ./bus not supported as upperdir [ 175.907066][ T6771] ip6gretap0: mtu less than device minimum [ 175.963680][ T6778] netlink: 182 bytes leftover after parsing attributes in process `syz.8.2637'. [ 176.062294][ T6784] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6784 comm=syz.6.2640 [ 176.508757][ T6789] overlay: filesystem on ./bus not supported as upperdir [ 176.810990][ T6807] overlay: filesystem on ./bus not supported as upperdir [ 177.047136][ T6828] overlay: filesystem on ./bus not supported as upperdir [ 177.058248][ T6830] overlay: filesystem on ./bus is read-only [ 177.808421][ T6860] overlay: filesystem on ./bus not supported as upperdir [ 178.146177][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 178.146197][ T36] audit: type=1400 audit(178.119:832): avc: denied { nlmsg_read } for pid=6906 comm="syz.2.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.197674][ T6913] netlink: 'syz.8.2701': attribute type 1 has an invalid length. [ 178.348261][ T6937] overlay: filesystem on ./bus is read-only [ 179.124841][ T6987] overlay: filesystem on ./bus is read-only [ 179.241274][ T7007] overlay: filesystem on ./bus is read-only [ 179.466379][ T7063] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2774'. [ 180.036627][ T7089] overlay: filesystem on ./bus is read-only [ 180.653075][ T7128] overlay: filesystem on ./bus is read-only [ 180.741334][ T926] tipc: Subscription rejected, illegal request [ 180.798658][ T7146] overlay: filesystem on ./bus is read-only [ 180.933900][ T7171] overlay: filesystem on ./bus is read-only [ 181.626611][ T7205] overlayfs: missing 'lowerdir' [ 181.656810][ T7209] netlink: 'syz.8.2844': attribute type 27 has an invalid length. [ 181.685197][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.005646][ T7221] overlay: filesystem on ./bus not supported as upperdir [ 183.161650][ T7279] overlayfs: failed to clone upperpath [ 183.202422][ T36] audit: type=1326 audit(183.169:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.2.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 183.225283][ T36] audit: type=1326 audit(183.169:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.2.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 183.248208][ T36] audit: type=1326 audit(183.169:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.2.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 183.271009][ T36] audit: type=1326 audit(183.169:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.2.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 183.294095][ T36] audit: type=1326 audit(183.169:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.2.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 183.301714][ T7293] overlayfs: failed to clone lowerpath [ 183.317368][ T36] audit: type=1326 audit(183.169:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.2.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 183.345143][ T36] audit: type=1326 audit(183.169:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.2.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 183.368242][ T36] audit: type=1326 audit(183.169:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.2.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 183.371468][ T7295] overlayfs: failed to clone lowerpath [ 183.391395][ T36] audit: type=1326 audit(183.169:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.2.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 183.419500][ T36] audit: type=1326 audit(183.169:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.2.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 183.668508][ T7319] overlayfs: failed to clone upperpath [ 183.803199][ T7342] overlay: filesystem on ./bus not supported as upperdir [ 184.766677][ T7387] overlayfs: failed to clone upperpath [ 184.784222][ T7389] overlayfs: failed to clone upperpath [ 185.035619][ T7404] overlayfs: failed to clone upperpath [ 185.041744][ T7404] overlayfs: failed to clone lowerpath [ 185.076795][ T7408] overlayfs: failed to clone upperpath [ 185.396191][ T7412] overlayfs: failed to clone lowerpath [ 185.479447][ T7422] overlay: filesystem on ./bus not supported as upperdir [ 186.413805][ T7443] overlay: filesystem on ./bus not supported as upperdir [ 186.530843][ T7456] overlayfs: failed to clone upperpath [ 186.595987][ T7461] overlayfs: failed to clone lowerpath [ 186.660863][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2961'. [ 186.690585][ T7471] overlayfs: failed to clone upperpath [ 186.783614][ T7482] overlay: filesystem on ./bus is read-only [ 187.677262][ T7534] overlay: filesystem on ./bus not supported as upperdir [ 189.047828][ T7557] overlay: filesystem on ./bus is read-only [ 189.661843][ T7570] overlayfs: failed to clone upperpath [ 190.239290][ T7596] overlay: filesystem on ./bus not supported as upperdir [ 190.477581][ T10] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65380 sclass=netlink_tcpdiag_socket pid=10 comm=kworker/0:1 [ 190.491249][ T10] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=104 sclass=netlink_tcpdiag_socket pid=10 comm=kworker/0:1 [ 191.443315][ T7617] tipc: Enabling of bearer rejected, already enabled [ 191.516855][ T7625] overlay: filesystem on ./bus is read-only [ 191.627956][ T7634] overlay: filesystem on ./bus not supported as upperdir [ 192.233453][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 192.233472][ T36] audit: type=1326 audit(192.199:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 192.279966][ T36] audit: type=1326 audit(192.229:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 192.303131][ T36] audit: type=1326 audit(192.229:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 192.326366][ T36] audit: type=1326 audit(192.229:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 192.349517][ T36] audit: type=1326 audit(192.229:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 192.374341][ T36] audit: type=1326 audit(192.229:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 192.398098][ T36] audit: type=1326 audit(192.229:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 192.421412][ T36] audit: type=1326 audit(192.229:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 192.444367][ T36] audit: type=1326 audit(192.229:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 192.465659][ T7655] netlink: 393 bytes leftover after parsing attributes in process `syz.8.3036'. [ 192.483569][ T36] audit: type=1326 audit(192.229:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f883fd8f6c9 code=0x7ffc0000 [ 193.193395][ T7688] overlayfs: missing 'lowerdir' [ 193.427678][ T7697] netlink: 'syz.8.3052': attribute type 12 has an invalid length. [ 194.377641][ T7711] overlay: ./bus is not a directory [ 194.948538][ T7725] overlay: filesystem on ./bus is read-only [ 194.969497][ T7727] overlay: filesystem on ./bus is read-only [ 194.990245][ T7729] overlay: filesystem on ./bus is read-only [ 195.180347][ T7742] overlay: filesystem on ./bus not supported as upperdir [ 195.561319][ T7748] overlay: filesystem on ./bus is read-only [ 195.608201][ T7751] overlay: filesystem on ./bus not supported as upperdir [ 195.639123][ T7753] overlay: filesystem on ./bus is read-only [ 195.793421][ T7761] overlay: filesystem on ./bus is read-only [ 195.911309][ T7766] overlay: filesystem on ./bus is read-only [ 197.111182][ T7775] overlay: filesystem on ./bus is read-only [ 197.126019][ T7776] overlay: filesystem on ./bus is read-only [ 197.185656][ T7786] netlink: 'syz.8.3089': attribute type 4 has an invalid length. [ 197.767476][ T7820] netlink: 'syz.8.3103': attribute type 63 has an invalid length. [ 197.788650][ T7820] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3103'. [ 198.904999][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 198.905015][ T36] audit: type=1400 audit(198.879:896): avc: denied { create } for pid=7885 comm="syz.8.3131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 199.212616][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3139'. [ 199.233027][ T7902] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3139'. [ 199.919296][ T36] audit: type=1400 audit(199.889:897): avc: denied { accept } for pid=7907 comm="syz.2.3142" path=2F3738352FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 200.000571][ T7910] overlay: filesystem on ./bus is read-only [ 200.094137][ T7916] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3146'. [ 200.104366][ T36] audit: type=1326 audit(200.069:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7915 comm="syz.2.3146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f883fd8f6c9 code=0x0 [ 200.693992][ T7937] 9pnet_fd: Insufficient options for proto=fd [ 201.259217][ T7957] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 201.261172][ T7959] netlink: 'syz.8.3165': attribute type 4 has an invalid length. [ 201.271060][ T7957] overlayfs: conflicting options: userxattr,metacopy=on [ 201.584616][ T7998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3181'. [ 201.674556][ T36] audit: type=1400 audit(201.639:899): avc: denied { create } for pid=8014 comm="syz.2.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 201.714954][ T36] audit: type=1400 audit(201.639:900): avc: denied { append } for pid=8014 comm="syz.2.3187" name="file2" dev="tmpfs" ino=4361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 201.874570][ T8030] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 202.065887][ T36] audit: type=1400 audit(202.039:901): avc: denied { setattr } for pid=8035 comm="syz.8.3197" name="NETLINK" dev="sockfs" ino=37262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.120380][ T8043] overlayfs: failed to clone upperpath [ 202.307182][ T36] audit: type=1400 audit(202.279:902): avc: denied { create } for pid=8058 comm="syz.2.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 202.376463][ T8073] netlink: 'syz.4.3211': attribute type 29 has an invalid length. [ 202.439764][ T8084] overlay: filesystem on ./bus is read-only [ 203.262429][ T8102] netlink: 'syz.4.3219': attribute type 1 has an invalid length. [ 203.270398][ T8103] netlink: 'syz.4.3219': attribute type 1 has an invalid length. [ 203.300160][ T8107] 9pnet_fd: Insufficient options for proto=fd [ 203.319523][ T8109] 9pnet_fd: Insufficient options for proto=fd [ 203.482097][ T36] audit: type=1400 audit(203.449:903): avc: denied { create } for pid=8129 comm="syz.2.3232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 204.230515][ T36] audit: type=1400 audit(204.199:904): avc: denied { audit_read } for pid=8148 comm="syz.4.3239" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.546955][ T8195] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3260'. [ 204.556539][ T8195] fuse: Bad value for 'fd' [ 204.644062][ T8207] netlink: 'syz.2.3265': attribute type 1 has an invalid length. [ 204.651927][ T8207] netlink: 'syz.2.3265': attribute type 2 has an invalid length. [ 217.310580][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3270'. [ 217.321458][ T8218] bridge_slave_1: left allmulticast mode [ 217.327341][ T8218] bridge_slave_1: left promiscuous mode [ 217.333082][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.345684][ T8218] bridge_slave_0: left allmulticast mode [ 217.351389][ T8218] bridge_slave_0: left promiscuous mode [ 217.357327][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.427503][ T8222] netlink: 'syz.2.3271': attribute type 4 has an invalid length. [ 217.436217][ T36] audit: type=1326 audit(217.399:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8228 comm="syz.6.3274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff02eb8f6c9 code=0x0 [ 217.487011][ T36] audit: type=1400 audit(217.459:906): avc: denied { watch watch_reads } for pid=8237 comm="syz.8.3276" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 217.964716][ T8241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8241 comm=syz.2.3277 [ 219.304809][ T8260] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3285'. [ 219.574993][ T36] audit: type=1400 audit(219.539:907): avc: denied { create } for pid=8285 comm="syz.8.3296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 219.735130][ T8305] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3303'. [ 219.756799][ T8305] syz.4.3303(8305): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 219.770688][ T8305] fuseblk: Unknown parameter 'g0}00000000000000000000' [ 220.089793][ T8318] overlayfs: failed to clone upperpath [ 220.095923][ T8318] SELinux: Context system_u:object_r:netlabel_mgmt_exec_t:s0 is not valid (left unmapped). [ 220.106384][ T36] audit: type=1400 audit(220.079:908): avc: denied { relabelto } for pid=8317 comm="syz.8.3309" name="file0" dev="tmpfs" ino=2917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 220.133437][ T36] audit: type=1400 audit(220.079:909): avc: denied { associate } for pid=8317 comm="syz.8.3309" name="file0" dev="tmpfs" ino=2917 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 220.388628][ T8333] netlink: 'syz.6.3316': attribute type 9 has an invalid length. [ 220.396778][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3316'. [ 220.407824][ T8333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=8333 comm=syz.6.3316 [ 220.952160][ T36] audit: type=1400 audit(220.919:910): avc: denied { mounton } for pid=8349 comm="syz.6.3322" path="/674/file0" dev="tmpfs" ino=3641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 220.952173][ T8350] No source specified [ 221.027417][ T36] audit: type=1400 audit(220.999:911): avc: denied { create } for pid=8363 comm="syz.8.3328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 221.140158][ T8378] x_tables: duplicate underflow at hook 2 [ 221.152070][ T8380] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3335'. [ 221.163816][ T8382] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8382 comm=syz.6.3336 [ 221.220904][ T36] audit: type=1400 audit(221.189:912): avc: denied { create } for pid=8396 comm="syz.8.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 221.260454][ T36] audit: type=1400 audit(221.229:913): avc: denied { map } for pid=8402 comm="syz.6.3343" path="socket:[37743]" dev="sockfs" ino=37743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.319400][ T36] audit: type=1400 audit(221.289:914): avc: denied { create } for pid=8414 comm="syz.2.3349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 221.345508][ T8420] bridge0: port 4(dummy0) entered blocking state [ 221.351929][ T8420] bridge0: port 4(dummy0) entered disabled state [ 221.359246][ T8420] bridge0: port 4(dummy0) entered blocking state [ 221.365743][ T8420] bridge0: port 4(dummy0) entered forwarding state [ 221.424580][ T8430] netlink: 'syz.8.3356': attribute type 32 has an invalid length. [ 225.151908][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 225.151927][ T36] audit: type=1326 audit(225.119:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8513 comm="syz.2.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883fd8f6c9 code=0x7fc00000 [ 225.289447][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3402'. [ 225.298942][ T8541] erspan0: left allmulticast mode [ 225.307838][ T8541] erspan0: left promiscuous mode [ 225.313583][ T8541] bridge0: port 4(erspan0) entered disabled state [ 225.321274][ T8541] syz_tun: left allmulticast mode [ 225.326606][ T8541] syz_tun: left promiscuous mode [ 225.331654][ T8541] bridge0: port 3(syz_tun) entered disabled state [ 225.339458][ T8541] 0{X: left allmulticast mode [ 225.344697][ T8541] 0{X: left promiscuous mode [ 225.350700][ T8541] bridge0: port 2(30{X) entered disabled state [ 225.371216][ T8541] bridge_slave_0: left allmulticast mode [ 225.390751][ T8541] bridge_slave_0: left promiscuous mode [ 225.403285][ T8541] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.753548][ T8570] fuse: Bad value for 'user_id' [ 225.764572][ T8570] fuse: Bad value for 'user_id' [ 226.267314][ T36] audit: type=1400 audit(226.239:918): avc: denied { map } for pid=8580 comm="syz.2.3417" path="socket:[39030]" dev="sockfs" ino=39030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.579347][ T36] audit: type=1400 audit(226.549:919): avc: denied { shutdown } for pid=8629 comm="syz.2.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.580758][ T8631] bridge0: entered allmulticast mode [ 226.651653][ T8639] netlink: 'syz.8.3440': attribute type 15 has an invalid length. [ 226.659750][ T8639] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3440'. [ 226.669418][ T8639] netlink: 'syz.8.3440': attribute type 1 has an invalid length. [ 226.677270][ T8639] netlink: 'syz.8.3440': attribute type 2 has an invalid length. [ 227.319358][ T36] audit: type=1326 audit(227.289:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.6.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02eb8f6c9 code=0x7fc00000 [ 227.371480][ T8687] batadv_slave_1: entered promiscuous mode [ 227.541604][ T8705] IPv6: NLM_F_CREATE should be specified when creating new route [ 227.553207][ T8705] overlayfs: failed to clone upperpath [ 227.778756][ T36] audit: type=1400 audit(227.749:921): avc: denied { lock } for pid=8724 comm="syz.4.3474" path="socket:[39219]" dev="sockfs" ino=39219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 228.203553][ T8686] batadv_slave_1: left promiscuous mode [ 228.281219][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3482'. [ 228.324734][ T8752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3484'. [ 228.334518][ T8752] netlink: 'syz.2.3484': attribute type 17 has an invalid length. [ 228.344432][ T8752] netlink: 8540 bytes leftover after parsing attributes in process `syz.2.3484'. [ 228.353632][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3484'. [ 228.546398][ T36] audit: type=1400 audit(228.519:922): avc: denied { getopt } for pid=8764 comm="syz.8.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.764869][ T8826] syz.6.3514 (8826): attempted to duplicate a private mapping with mremap. This is not supported. [ 229.009785][ T36] audit: type=1400 audit(228.979:923): avc: denied { getopt } for pid=8838 comm="syz.2.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.201626][ T8854] x_tables: duplicate underflow at hook 4 [ 229.227411][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3525'. [ 229.236545][ T8856] veth0_to_bridge: left allmulticast mode [ 229.242345][ T8856] veth0_to_bridge: left promiscuous mode [ 229.248279][ T8856] bridge0: port 4(veth0_to_bridge) entered disabled state [ 229.256141][ T8856] syz_tun: left allmulticast mode [ 229.261222][ T8856] syz_tun: left promiscuous mode [ 229.266526][ T8856] bridge0: port 3(syz_tun) entered disabled state [ 229.273515][ T8856] bridge_slave_1: left allmulticast mode [ 229.279457][ T8856] bridge_slave_1: left promiscuous mode [ 229.285723][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.305510][ T8856] bridge_slave_0: left allmulticast mode [ 229.311215][ T8856] bridge_slave_0: left promiscuous mode [ 229.325803][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.334363][ T8856] bridge0 (unregistering): left allmulticast mode [ 230.057940][ T8898] fuseblk: Bad value for 'fd' [ 230.068937][ T8898] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3540'. [ 230.235232][ T8916] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3548'. [ 230.247785][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3549'. [ 230.327480][ T36] audit: type=1400 audit(230.289:924): avc: denied { getopt } for pid=8915 comm="syz.2.3548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 230.651977][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3558'. [ 231.116021][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3568'. [ 231.194296][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3571'. [ 231.213052][ T8969] bridge0: port 4(dummy0) entered disabled state [ 231.232467][ T8969] bridge0: port 3(syz_tun) entered disabled state [ 231.245817][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.255550][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.396551][ T8982] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 231.440273][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3578'. [ 231.827349][ T9004] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 231.879063][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3592'. [ 231.928984][ T9021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=9021 comm=syz.8.3595 [ 231.964117][ T9027] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 231.984328][ T36] audit: type=1400 audit(231.949:925): avc: denied { setattr } for pid=9028 comm="syz.8.3598" name="NETLINK" dev="sockfs" ino=40239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.108027][ T9050] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 232.287781][ T9068] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 232.349477][ T36] audit: type=1400 audit(232.319:926): avc: denied { read } for pid=9075 comm="syz.6.3619" name="file0" dev="tmpfs" ino=3986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 232.711079][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3625'. [ 232.721271][ T9092] netlink: 'syz.4.3625': attribute type 27 has an invalid length. [ 232.746041][ T9092] veth0_vlan: left promiscuous mode [ 232.751537][ T9092] veth0_vlan: entered promiscuous mode [ 232.757893][ T9092] veth1_macvtap: left promiscuous mode [ 232.763952][ T9092] veth1_macvtap: entered promiscuous mode [ 232.929253][ T9108] 9pnet_fd: p9_fd_create_tcp (9108): problem connecting socket to 127.0.0.1 [ 233.181735][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3645'. [ 233.346698][ T9157] netlink: 'syz.4.3652': attribute type 27 has an invalid length. [ 233.463705][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3660'. [ 233.667758][ T36] audit: type=1400 audit(233.639:927): avc: denied { ioctl } for pid=9190 comm="syz.8.3666" path="socket:[39784]" dev="sockfs" ino=39784 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 233.889376][ T9206] netlink: 12 bytes leftover after parsing attributes in process ` [ 233.889376][ T9206]  !'. [ 233.935260][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3674'. [ 234.531726][ T9232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59929 sclass=netlink_route_socket pid=9232 comm=syz.2.3683 [ 234.707058][ T36] audit: type=1400 audit(234.679:928): avc: denied { ioctl } for pid=9251 comm="syz.4.3692" path="socket:[39871]" dev="sockfs" ino=39871 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.732036][ T36] audit: type=1400 audit(234.679:929): avc: denied { setopt } for pid=9251 comm="syz.4.3692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.827816][ T9269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61465 sclass=netlink_route_socket pid=9269 comm=syz.4.3699 [ 235.192550][ T9298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=9298 comm=syz.8.3710 [ 235.267002][ T36] audit: type=1400 audit(235.239:930): avc: denied { accept } for pid=9303 comm="syz.8.3712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 235.321372][ T9311] overlayfs: failed to clone upperpath [ 235.827532][ T9329] __nla_validate_parse: 4 callbacks suppressed [ 235.827553][ T9329] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3723'. [ 236.117441][ T9338] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3726'. [ 236.643929][ T36] audit: type=1400 audit(236.609:931): avc: denied { read } for pid=9348 comm="syz.6.3730" path="socket:[41008]" dev="sockfs" ino=41008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.718072][ T9349] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 236.728748][ T36] audit: type=1400 audit(236.699:932): avc: denied { relabelto } for pid=9348 comm="syz.6.3730" name="ashmem" dev="tmpfs" ino=3909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 236.755660][ T36] audit: type=1400 audit(236.699:933): avc: denied { associate } for pid=9348 comm="syz.6.3730" name="ashmem" dev="tmpfs" ino=3909 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 237.282746][ T9385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3742'. [ 237.292880][ T9385] netlink: 'syz.2.3742': attribute type 27 has an invalid length. [ 237.315443][ T36] audit: type=1326 audit(237.289:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9382 comm="syz.4.3741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f23b8f6c9 code=0x0 [ 237.331597][ T9385] veth0_vlan: left promiscuous mode [ 237.353496][ T9385] veth0_vlan: entered promiscuous mode [ 237.371612][ T9385] veth1_macvtap: left promiscuous mode [ 237.381166][ T9385] veth1_macvtap: entered promiscuous mode [ 237.438504][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'. [ 237.626253][ T9415] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3752'. [ 237.676325][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3753'. [ 238.196907][ T9435] bpf: Bad value for 'uid' [ 238.313927][ T36] audit: type=1400 audit(238.279:935): avc: denied { create } for pid=9451 comm="syz.2.3766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 238.394203][ T9461] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3770'. [ 238.402292][ T9465] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3772'. [ 239.233723][ T9517] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3792'. [ 239.243887][ T9517] netlink: 'syz.6.3792': attribute type 27 has an invalid length. [ 239.252057][ T9517] lo: left promiscuous mode [ 239.257149][ T9517] lo: left allmulticast mode [ 239.262235][ T9517] tunl0: left promiscuous mode [ 239.267178][ T9517] tunl0: left allmulticast mode [ 239.272503][ T9517] gre0: left promiscuous mode [ 239.277299][ T9517] gre0: left allmulticast mode [ 239.282563][ T9517] gretap0: left promiscuous mode [ 239.287667][ T9517] gretap0: left allmulticast mode [ 239.293094][ T9517] erspan0: left promiscuous mode [ 239.301380][ T9517] erspan0: left allmulticast mode [ 239.306890][ T9517] ip_vti0: left promiscuous mode [ 239.312029][ T9517] ip_vti0: left allmulticast mode [ 239.317873][ T9517] ip6_vti0: left promiscuous mode [ 239.323006][ T9517] ip6_vti0: left allmulticast mode [ 239.328651][ T9517] sit0: left promiscuous mode [ 239.333434][ T9517] sit0: left allmulticast mode [ 239.341304][ T9517] ip6tnl0: left promiscuous mode [ 239.347355][ T9517] ip6tnl0: left allmulticast mode [ 239.352811][ T9517] ip6gre0: left promiscuous mode [ 239.357884][ T9517] ip6gre0: left allmulticast mode [ 239.363331][ T9517] syz_tun: left promiscuous mode [ 239.368424][ T9517] syz_tun: left allmulticast mode [ 239.373806][ T9517] ip6gretap0: left promiscuous mode [ 239.379163][ T9517] ip6gretap0: left allmulticast mode [ 239.384878][ T9517] vcan0: left promiscuous mode [ 239.389805][ T9517] vcan0: left allmulticast mode [ 239.395186][ T9517] dummy0: left promiscuous mode [ 239.400137][ T9517] dummy0: left allmulticast mode [ 239.405654][ T9517] veth0: left promiscuous mode [ 239.410529][ T9517] veth0: left allmulticast mode [ 239.415838][ T9517] veth1: left promiscuous mode [ 239.420734][ T9517] veth1: left allmulticast mode [ 239.426205][ T9517] wg0: left promiscuous mode [ 239.430917][ T9517] wg0: left allmulticast mode [ 239.436423][ T9517] wg1: left promiscuous mode [ 239.441127][ T9517] wg1: left allmulticast mode [ 239.446324][ T9517] wg2: left promiscuous mode [ 239.450988][ T9517] wg2: left allmulticast mode [ 239.456155][ T9517] veth0_to_bridge: left promiscuous mode [ 239.461862][ T9517] veth0_to_bridge: left allmulticast mode [ 239.468066][ T9517] bridge_slave_0: left promiscuous mode [ 239.473721][ T9517] bridge_slave_0: left allmulticast mode [ 239.479828][ T9517] veth1_to_bridge: left promiscuous mode [ 239.485660][ T9517] veth1_to_bridge: left allmulticast mode [ 239.491933][ T9517] bridge_slave_1: left promiscuous mode [ 239.497665][ T9517] bridge_slave_1: left allmulticast mode [ 239.503772][ T9517] veth0_to_bond: left promiscuous mode [ 239.509351][ T9517] veth0_to_bond: left allmulticast mode [ 239.515421][ T9517] bond_slave_0: left promiscuous mode [ 239.520866][ T9517] bond_slave_0: left allmulticast mode [ 239.526855][ T9517] veth1_to_bond: left promiscuous mode [ 239.532389][ T9517] veth1_to_bond: left allmulticast mode [ 239.538440][ T9517] bond_slave_1: left promiscuous mode [ 239.543884][ T9517] bond_slave_1: left allmulticast mode [ 239.550810][ T9517] team_slave_0: left promiscuous mode [ 239.556316][ T9517] team_slave_0: left allmulticast mode [ 239.562376][ T9517] veth1_to_team: left promiscuous mode [ 239.568016][ T9517] veth1_to_team: left allmulticast mode [ 239.580763][ T9517] team_slave_1: left promiscuous mode [ 239.591815][ T9517] team_slave_1: left allmulticast mode [ 239.598156][ T9517] veth0_to_batadv: left promiscuous mode [ 239.604259][ T9517] veth0_to_batadv: left allmulticast mode [ 239.611018][ T9517] batadv_slave_0: left promiscuous mode [ 239.616788][ T9517] batadv_slave_0: left allmulticast mode [ 239.623016][ T9517] veth1_to_batadv: left promiscuous mode [ 239.628826][ T9517] veth1_to_batadv: left allmulticast mode [ 239.635272][ T9517] batadv_slave_1: left promiscuous mode [ 239.640928][ T9517] batadv_slave_1: left allmulticast mode [ 239.647043][ T9517] xfrm0: left promiscuous mode [ 239.651904][ T9517] xfrm0: left allmulticast mode [ 239.657326][ T9517] veth0_to_hsr: left promiscuous mode [ 239.662802][ T9517] veth0_to_hsr: left allmulticast mode [ 239.668840][ T9517] hsr_slave_0: left promiscuous mode [ 239.674225][ T9517] hsr_slave_0: left allmulticast mode [ 239.680083][ T9517] veth1_to_hsr: left promiscuous mode [ 239.685739][ T9517] veth1_to_hsr: left allmulticast mode [ 239.691698][ T9517] hsr_slave_1: left promiscuous mode [ 239.697102][ T9517] hsr_slave_1: left allmulticast mode [ 239.702919][ T9517] veth1_virt_wifi: left promiscuous mode [ 239.708713][ T9517] veth1_virt_wifi: left allmulticast mode [ 239.714877][ T9517] veth0_virt_wifi: left promiscuous mode [ 239.720650][ T9517] veth0_virt_wifi: left allmulticast mode [ 239.726898][ T9517] veth1_vlan: left promiscuous mode [ 239.732206][ T9517] veth1_vlan: left allmulticast mode [ 239.738819][ T9517] vlan0: left promiscuous mode [ 239.743751][ T9517] vlan0: left allmulticast mode [ 239.749168][ T9517] vlan1: left promiscuous mode [ 239.754105][ T9517] vlan1: left allmulticast mode [ 239.759152][ T9517] veth0_vlan: left allmulticast mode [ 239.765472][ T9517] veth0_macvtap: left promiscuous mode [ 239.771046][ T9517] veth0_macvtap: left allmulticast mode [ 239.777073][ T9517] macsec0: left promiscuous mode [ 239.782191][ T9517] macsec0: left allmulticast mode [ 239.787337][ T9517] veth1_macvtap: left allmulticast mode [ 239.793328][ T9517] syztnl0: left promiscuous mode [ 239.798392][ T9517] syztnl0: left allmulticast mode [ 239.803842][ T9517] syztnl2: left promiscuous mode [ 239.808896][ T9517] syztnl2: left allmulticast mode [ 239.814352][ T9517] vlan0000: left promiscuous mode [ 239.819506][ T9517] veth0_to_team: left promiscuous mode [ 239.825173][ T9517] vlan0000: left allmulticast mode [ 239.830398][ T9517] veth0_to_team: left allmulticast mode [ 239.907537][ T36] audit: type=1400 audit(239.879:936): avc: denied { read write } for pid=9528 comm="syz.6.3796" name="ashmem" dev="tmpfs" ino=3909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 239.947271][ T36] audit: type=1400 audit(239.879:937): avc: denied { open } for pid=9528 comm="syz.6.3796" path="/dev/ashmem" dev="tmpfs" ino=3909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 240.382832][ T9545] overlayfs: failed to clone upperpath [ 240.486963][ T9558] 9pnet_fd: Insufficient options for proto=fd [ 240.616015][ T9567] fuseblk: Bad value for 'fd' [ 240.802433][ T36] audit: type=1400 audit(16777685.763:938): avc: denied { shutdown } for pid=9602 comm="syz.2.3822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 240.841672][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3823'. [ 240.880889][ T36] audit: type=1400 audit(16777685.843:939): avc: denied { getopt } for pid=9602 comm="syz.2.3822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 240.920225][ T36] audit: type=1400 audit(16777685.843:940): avc: denied { accept } for pid=9602 comm="syz.2.3822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.001133][ T9616] netlink: 'syz.2.3828': attribute type 27 has an invalid length. [ 241.010164][ T9616] lo: entered promiscuous mode [ 241.015616][ T9616] lo: entered allmulticast mode [ 241.022764][ T9616] tunl0: entered promiscuous mode [ 241.030664][ T9616] tunl0: entered allmulticast mode [ 241.040750][ T9616] gre0: entered promiscuous mode [ 241.045946][ T9616] gre0: entered allmulticast mode [ 241.051968][ T9616] gretap0: entered promiscuous mode [ 241.061082][ T9616] gretap0: entered allmulticast mode [ 241.067174][ T9616] erspan0: entered promiscuous mode [ 241.082334][ T9616] erspan0: entered allmulticast mode [ 241.088414][ T9616] ip_vti0: entered promiscuous mode [ 241.093713][ T9616] ip_vti0: entered allmulticast mode [ 241.100438][ T9616] ip6_vti0: entered promiscuous mode [ 241.108162][ T9616] ip6_vti0: entered allmulticast mode [ 241.118856][ T9616] sit0: entered promiscuous mode [ 241.124043][ T9616] sit0: entered allmulticast mode [ 241.129835][ T9616] ip6tnl0: entered promiscuous mode [ 241.140600][ T9616] ip6tnl0: entered allmulticast mode [ 241.153466][ T9616] ip6gre0: entered promiscuous mode [ 241.161035][ T9616] ip6gre0: entered allmulticast mode [ 241.167021][ T9616] syz_tun: entered promiscuous mode [ 241.172348][ T9616] syz_tun: entered allmulticast mode [ 241.186372][ T9616] ip6gretap0: entered promiscuous mode [ 241.194708][ T9616] ip6gretap0: entered allmulticast mode [ 241.204795][ T9616] vcan0: entered promiscuous mode [ 241.210169][ T9616] vcan0: entered allmulticast mode [ 241.217806][ T9616] dummy0: entered promiscuous mode [ 241.231410][ T9616] dummy0: entered allmulticast mode [ 241.246327][ T9616] veth0: entered promiscuous mode [ 241.258152][ T9616] veth0: entered allmulticast mode [ 241.263953][ T9616] veth1: entered promiscuous mode [ 241.269568][ T9616] veth1: entered allmulticast mode [ 241.276112][ T9616] wg0: entered promiscuous mode [ 241.281975][ T9616] wg0: entered allmulticast mode [ 241.287950][ T9616] wg1: entered promiscuous mode [ 241.292952][ T9616] wg1: entered allmulticast mode [ 241.304740][ T9616] wg2: entered promiscuous mode [ 241.314630][ T9616] wg2: entered allmulticast mode [ 241.321480][ T9616] veth0_to_bridge: entered promiscuous mode [ 241.328041][ T9616] veth0_to_bridge: entered allmulticast mode [ 241.334618][ T9616] bridge_slave_0: entered promiscuous mode [ 241.340837][ T9616] bridge_slave_0: entered allmulticast mode [ 241.347577][ T9616] veth1_to_bridge: entered promiscuous mode [ 241.353611][ T9616] veth1_to_bridge: entered allmulticast mode [ 241.360626][ T9616] bridge_slave_1: entered promiscuous mode [ 241.366833][ T9616] bridge_slave_1: entered allmulticast mode [ 241.373319][ T9616] veth0_to_bond: entered promiscuous mode [ 241.380430][ T9616] veth0_to_bond: entered allmulticast mode [ 241.387415][ T9616] bond_slave_0: entered promiscuous mode [ 241.395813][ T9616] bond_slave_0: entered allmulticast mode [ 241.405674][ T9616] veth1_to_bond: entered promiscuous mode [ 241.412898][ T9616] veth1_to_bond: entered allmulticast mode [ 241.419409][ T9616] bond_slave_1: entered promiscuous mode [ 241.425568][ T9616] bond_slave_1: entered allmulticast mode [ 241.431805][ T9616] veth0_to_team: entered promiscuous mode [ 241.438129][ T9616] veth0_to_team: entered allmulticast mode [ 241.444863][ T9616] team_slave_0: entered promiscuous mode [ 241.450911][ T9616] team_slave_0: entered allmulticast mode [ 241.457429][ T9616] veth1_to_team: entered promiscuous mode [ 241.463262][ T9616] veth1_to_team: entered allmulticast mode [ 241.469773][ T9616] team_slave_1: entered promiscuous mode [ 241.480506][ T9616] team_slave_1: entered allmulticast mode [ 241.487199][ T9616] veth0_to_batadv: entered promiscuous mode [ 241.493261][ T9616] veth0_to_batadv: entered allmulticast mode [ 241.508867][ T9616] batadv_slave_0: entered promiscuous mode [ 241.514849][ T9616] batadv_slave_0: entered allmulticast mode [ 241.521617][ T9616] veth1_to_batadv: entered promiscuous mode [ 241.528838][ T9616] veth1_to_batadv: entered allmulticast mode [ 241.535826][ T9616] batadv_slave_1: entered promiscuous mode [ 241.541865][ T9616] batadv_slave_1: entered allmulticast mode [ 241.548876][ T9616] xfrm0: entered promiscuous mode [ 241.554118][ T9616] xfrm0: entered allmulticast mode [ 241.560296][ T9616] veth0_to_hsr: entered promiscuous mode [ 241.566477][ T9616] veth0_to_hsr: entered allmulticast mode [ 241.575861][ T9616] hsr_slave_0: entered promiscuous mode [ 241.585196][ T9616] hsr_slave_0: entered allmulticast mode [ 241.595302][ T9616] veth1_to_hsr: entered promiscuous mode [ 241.601057][ T9616] veth1_to_hsr: entered allmulticast mode [ 241.607833][ T9616] hsr_slave_1: entered promiscuous mode [ 241.613679][ T9616] hsr_slave_1: entered allmulticast mode [ 241.622699][ T9616] veth1_virt_wifi: entered promiscuous mode [ 241.630308][ T9616] veth1_virt_wifi: entered allmulticast mode [ 241.637255][ T9616] veth0_virt_wifi: entered promiscuous mode [ 241.643341][ T9616] veth0_virt_wifi: entered allmulticast mode [ 241.650494][ T9616] veth1_vlan: entered promiscuous mode [ 241.656290][ T9616] veth1_vlan: entered allmulticast mode [ 241.662446][ T9616] veth0_vlan: entered allmulticast mode [ 241.671530][ T9616] vlan0: entered promiscuous mode [ 241.677561][ T9616] vlan0: entered allmulticast mode [ 241.695720][ T9616] vlan1: entered promiscuous mode [ 241.700987][ T9616] vlan1: entered allmulticast mode [ 241.708898][ T9616] veth1_macvtap: entered allmulticast mode [ 241.717044][ T9616] veth0_macvtap: entered promiscuous mode [ 241.723003][ T9616] veth0_macvtap: entered allmulticast mode [ 241.729925][ T9616] macsec0: entered promiscuous mode [ 241.735801][ T9616] macsec0: entered allmulticast mode [ 241.742067][ T9616] : entered promiscuous mode [ 241.747612][ T9616] : entered allmulticast mode [ 241.752924][ T9616] veth0_to_team.0: entered promiscuous mode [ 241.759428][ T9616] veth0_to_team.0: entered allmulticast mode [ 241.766392][ T9668] netlink: 'syz.4.3849': attribute type 27 has an invalid length. [ 241.840817][ T9668] tipc: Resetting bearer [ 241.866952][ T9668] tipc: Resetting bearer [ 241.963726][ T9696] fuse: Bad value for 'group_id' [ 241.968847][ T9696] fuse: Bad value for 'group_id' [ 242.078093][ T9714] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3864'. [ 242.703988][ T9746] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3875'. [ 243.405384][ T9756] overlayfs: failed to clone upperpath [ 243.497501][ T9771] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3884'. [ 243.595443][ T9778] incfs: Error accessing: ./file0. [ 243.600650][ T9778] incfs: mount failed -20 [ 243.635574][ T9789] fuseblk: Bad value for 'rootmode' [ 244.302204][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3898'. [ 244.587685][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 244.587705][ T36] audit: type=1400 audit(16777689.553:942): avc: denied { ioctl } for pid=9836 comm="syz.6.3907" path="/dev/ashmem" dev="tmpfs" ino=3909 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 244.632833][ T36] audit: type=1400 audit(16777689.553:943): avc: denied { map } for pid=9836 comm="syz.6.3907" path="/dev/ashmem" dev="tmpfs" ino=3909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 245.088322][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3926'. [ 245.146093][ T9889] 9pnet_fd: Insufficient options for proto=fd [ 245.152446][ T9890] 9pnet_fd: Insufficient options for proto=fd [ 245.188145][ T36] audit: type=1400 audit(16777690.153:944): avc: denied { ioctl } for pid=9891 comm="syz.2.3930" path="socket:[41624]" dev="sockfs" ino=41624 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 245.787259][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3937'. [ 245.803604][ T9915] 9pnet_fd: Insufficient options for proto=fd [ 246.602065][ T36] audit: type=1400 audit(16777698.565:945): avc: denied { mounton } for pid=9926 comm="syz.2.3943" path="/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 246.961674][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3950'. [ 249.981175][ T36] audit: type=1326 audit(16777701.945:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.2.3969" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f883fd8f6c9 code=0x0 [ 250.988749][T10045] vcan0: entered allmulticast mode [ 251.003808][T10048] vcan0: left allmulticast mode [ 251.275325][ T36] audit: type=1400 audit(16777703.245:947): avc: denied { nlmsg_read } for pid=10077 comm="syz.6.4001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 251.577939][T10108] netlink: 'syz.4.4014': attribute type 2 has an invalid length. [ 251.601691][T10113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4015'. [ 252.141917][T10145] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4026'. [ 252.401168][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4036'. [ 252.608372][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4045'. [ 252.974126][T10199] netlink: 328 bytes leftover after parsing attributes in process `syz.8.4048'. [ 253.118504][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4054'. [ 253.336641][T10237] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4064'. [ 253.421758][T10252] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 253.520899][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4075'. [ 253.581673][T10270] overlayfs: failed to clone upperpath [ 253.650079][T10279] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 253.693373][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4084'. [ 254.095414][T10306] netlink: 'syz.2.4092': attribute type 27 has an invalid length. [ 254.103531][T10306] lo: left promiscuous mode [ 254.108151][T10306] lo: left allmulticast mode [ 254.114019][T10306] tunl0: left promiscuous mode [ 254.119004][T10306] tunl0: left allmulticast mode [ 254.124619][T10306] tipc: Resetting bearer [ 254.130491][T10306] gre0: left promiscuous mode [ 254.139528][T10306] gre0: left allmulticast mode [ 254.150476][T10306] gretap0: left promiscuous mode [ 254.165183][T10306] gretap0: left allmulticast mode [ 254.176154][T10306] erspan0: left promiscuous mode [ 254.187134][T10306] erspan0: left allmulticast mode [ 254.205789][T10306] ip_vti0: left promiscuous mode [ 254.211556][T10306] ip_vti0: left allmulticast mode [ 254.218046][T10306] ip6_vti0: left promiscuous mode [ 254.223478][T10306] ip6_vti0: left allmulticast mode [ 254.235046][T10306] sit0: left promiscuous mode [ 254.240541][T10306] sit0: left allmulticast mode [ 254.251896][T10306] ip6tnl0: left promiscuous mode [ 254.257653][T10306] ip6tnl0: left allmulticast mode [ 254.265628][T10306] ip6gre0: left promiscuous mode [ 254.272545][T10306] ip6gre0: left allmulticast mode [ 254.279464][T10306] syz_tun: left promiscuous mode [ 254.284953][T10306] syz_tun: left allmulticast mode [ 254.290648][T10306] ip6gretap0: left promiscuous mode [ 254.304237][T10306] ip6gretap0: left allmulticast mode [ 254.317730][T10306] vcan0: left promiscuous mode [ 254.323998][T10306] vcan0: left allmulticast mode [ 254.331460][T10306] dummy0: left promiscuous mode [ 254.337152][T10306] dummy0: left allmulticast mode [ 254.343735][T10306] veth0: left promiscuous mode [ 254.349105][T10306] veth0: left allmulticast mode [ 254.357533][T10306] veth1: left promiscuous mode [ 254.362486][T10306] veth1: left allmulticast mode [ 254.368631][T10306] wg0: left promiscuous mode [ 254.373397][T10306] wg0: left allmulticast mode [ 254.382055][T10306] wg1: left promiscuous mode [ 254.387661][T10306] wg1: left allmulticast mode [ 254.393352][T10306] wg2: left promiscuous mode [ 254.398473][T10306] wg2: left allmulticast mode [ 254.404736][T10306] veth0_to_bridge: left promiscuous mode [ 254.411042][T10306] veth0_to_bridge: left allmulticast mode [ 254.421193][T10306] bridge_slave_0: left promiscuous mode [ 254.427751][T10306] bridge_slave_0: left allmulticast mode [ 254.438198][T10306] veth1_to_bridge: left promiscuous mode [ 254.444119][T10306] veth1_to_bridge: left allmulticast mode [ 254.452376][T10306] bridge_slave_1: left promiscuous mode [ 254.458085][T10306] bridge_slave_1: left allmulticast mode [ 254.465295][T10306] veth0_to_bond: left promiscuous mode [ 254.470970][T10306] veth0_to_bond: left allmulticast mode [ 254.478919][T10306] bond_slave_0: left promiscuous mode [ 254.484568][T10306] bond_slave_0: left allmulticast mode [ 254.491400][T10306] veth1_to_bond: left promiscuous mode [ 254.496969][T10306] veth1_to_bond: left allmulticast mode [ 254.504381][T10306] bond_slave_1: left promiscuous mode [ 254.509901][T10306] bond_slave_1: left allmulticast mode [ 254.518042][T10306] team_slave_0: left promiscuous mode [ 254.523516][T10306] team_slave_0: left allmulticast mode [ 254.530002][T10306] veth1_to_team: left promiscuous mode [ 254.535662][T10306] veth1_to_team: left allmulticast mode [ 254.553614][T10306] team_slave_1: left promiscuous mode [ 254.560687][T10306] team_slave_1: left allmulticast mode [ 254.567267][T10306] veth0_to_batadv: left promiscuous mode [ 254.573043][T10306] veth0_to_batadv: left allmulticast mode [ 254.585096][T10306] batadv_slave_0: left promiscuous mode [ 254.590765][T10306] batadv_slave_0: left allmulticast mode [ 254.598335][T10306] veth1_to_batadv: left promiscuous mode [ 254.604367][T10306] veth1_to_batadv: left allmulticast mode [ 254.615209][T10306] batadv_slave_1: left promiscuous mode [ 254.620905][T10306] batadv_slave_1: left allmulticast mode [ 254.628059][T10306] xfrm0: left promiscuous mode [ 254.632955][T10306] xfrm0: left allmulticast mode [ 254.638919][T10306] veth0_to_hsr: left promiscuous mode [ 254.644422][T10306] veth0_to_hsr: left allmulticast mode [ 254.651043][T10306] hsr_slave_0: left promiscuous mode [ 254.656838][T10306] hsr_slave_0: left allmulticast mode [ 254.663214][T10306] veth1_to_hsr: left promiscuous mode [ 254.668758][T10306] veth1_to_hsr: left allmulticast mode [ 254.675669][T10306] hsr_slave_1: left promiscuous mode [ 254.681119][T10306] hsr_slave_1: left allmulticast mode [ 254.687688][T10306] veth1_virt_wifi: left promiscuous mode [ 254.693467][T10306] veth1_virt_wifi: left allmulticast mode [ 254.700497][T10306] veth0_virt_wifi: left promiscuous mode [ 254.706442][T10306] veth0_virt_wifi: left allmulticast mode [ 254.713072][T10306] veth1_vlan: left promiscuous mode [ 254.718615][T10306] veth1_vlan: left allmulticast mode [ 254.727498][T10306] vlan0: left promiscuous mode [ 254.732485][T10306] vlan0: left allmulticast mode [ 254.737653][T10306] vlan1: left promiscuous mode [ 254.742646][T10306] vlan1: left allmulticast mode [ 254.747645][T10306] veth0_vlan: left allmulticast mode [ 254.754001][T10306] veth0_macvtap: left promiscuous mode [ 254.759846][T10306] veth0_macvtap: left allmulticast mode [ 254.766370][T10306] veth1_macvtap: left allmulticast mode [ 254.772129][T10306] macsec0: left promiscuous mode [ 254.777174][T10306] macsec0: left allmulticast mode [ 254.782936][T10306] : left promiscuous mode [ 254.787449][T10306] : left allmulticast mode [ 254.792483][T10306] veth0_to_team.0: left promiscuous mode [ 254.798190][T10306] veth0_to_team: left promiscuous mode [ 254.803741][T10306] veth0_to_team.0: left allmulticast mode [ 254.809548][T10306] veth0_to_team: left allmulticast mode [ 254.826702][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4094'. [ 254.855246][ T36] audit: type=1400 audit(16777706.815:948): avc: denied { accept } for pid=10320 comm="syz.6.4096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 254.896052][T10331] overlayfs: failed to clone upperpath [ 254.896531][T10328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10328 comm=syz.6.4098 [ 254.916650][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4098'. [ 255.182327][T10364] netlink: 'syz.2.4112': attribute type 46 has an invalid length. [ 255.410604][ T36] audit: type=1400 audit(16777707.375:949): avc: denied { getopt } for pid=10375 comm="syz.2.4117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 255.453307][T10381] tipc: Can't bind to reserved service type 0 [ 255.641461][T10399] netlink: 'syz.2.4123': attribute type 27 has an invalid length. [ 255.802585][T10424] netlink: 'syz.8.4134': attribute type 27 has an invalid length. [ 255.867670][ T36] audit: type=1400 audit(16777707.835:950): avc: denied { accept } for pid=10429 comm="syz.8.4136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 255.887324][ T36] audit: type=1326 audit(16777707.845:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10429 comm="syz.8.4136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d7578f6c9 code=0x0 [ 255.935333][T10447] netlink: 'syz.2.4143': attribute type 27 has an invalid length. [ 256.275461][T10457] netlink: 'syz.6.4146': attribute type 16 has an invalid length. [ 256.293309][T10457] netlink: 'syz.6.4146': attribute type 3 has an invalid length. [ 256.542109][ T36] audit: type=1400 audit(16777708.505:952): avc: denied { ioctl } for pid=10475 comm="syz.2.4153" path="socket:[43442]" dev="sockfs" ino=43442 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 257.088079][T10507] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 257.454377][T10536] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 257.534385][T10542] fuse: Unknown parameter 'mode' [ 257.585911][T10551] __nla_validate_parse: 14 callbacks suppressed [ 257.585932][T10551] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4182'. [ 257.601497][T10552] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4182'. [ 257.682111][T10561] 9pnet_fd: Insufficient options for proto=fd [ 257.986929][ T36] audit: type=1400 audit(16777709.955:953): avc: denied { getopt } for pid=10585 comm="syz.4.4195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 259.345318][ T36] audit: type=1400 audit(16777711.315:954): avc: denied { create } for pid=10666 comm="syz.2.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 259.397983][T10672] netlink: 'syz.2.4231': attribute type 27 has an invalid length. [ 259.439065][T10676] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 259.447552][T10676] overlayfs: missing 'lowerdir' [ 259.463183][T10676] netlink: 680 bytes leftover after parsing attributes in process `syz.2.4233'. [ 259.526129][ T36] audit: type=1400 audit(16777711.495:955): avc: denied { sys_module } for pid=10679 comm="syz.2.4235" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 259.956365][ T36] audit: type=1400 audit(16777711.925:956): avc: denied { nlmsg_read } for pid=10696 comm="syz.8.4243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 259.988383][ T36] audit: type=1400 audit(16777711.955:957): avc: denied { setattr } for pid=10696 comm="syz.8.4243" path="socket:[44496]" dev="sockfs" ino=44496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 260.056731][T10703] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4246'. [ 261.787025][T10779] overlayfs: failed to clone lowerpath [ 262.670689][T10813] overlayfs: failed to clone upperpath [ 262.693153][T10813] overlayfs: failed to clone upperpath [ 262.789056][T10817] netlink: 'syz.4.4290': attribute type 27 has an invalid length. [ 262.798079][T10819] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4291'. [ 262.824950][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4291'. [ 262.906066][T10838] netlink: 'syz.2.4299': attribute type 27 has an invalid length. [ 262.926011][T10838] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4299'. [ 262.950247][T10842] netlink: 'syz.4.4301': attribute type 27 has an invalid length. [ 263.043660][T10857] tipc: Trying to set illegal importance in message [ 263.093996][T10864] netlink: 'syz.4.4312': attribute type 27 has an invalid length. [ 263.191378][T10882] netlink: 'syz.8.4321': attribute type 27 has an invalid length. [ 263.270849][T10897] 9pnet_fd: Insufficient options for proto=fd [ 263.284390][T10899] overlayfs: failed to clone upperpath [ 263.379558][T10921] netlink: 'syz.8.4337': attribute type 27 has an invalid length. [ 263.496840][T10945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=10945 comm=syz.6.4345 [ 263.531365][T10945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=10945 comm=syz.6.4345 [ 263.559720][T10945] netlink: 'syz.6.4345': attribute type 58 has an invalid length. [ 263.725813][T10972] netlink: 'syz.6.4358': attribute type 27 has an invalid length. [ 263.819470][T10977] netlink: 'syz.4.4360': attribute type 46 has an invalid length. [ 264.017105][ T36] audit: type=1400 audit(16777715.985:958): avc: denied { read } for pid=10985 comm="syz.2.4364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 264.111218][T10993] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 264.325897][T11005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4371'. [ 264.869791][T11056] validate_nla: 1 callbacks suppressed [ 264.869815][T11056] netlink: 'syz.8.4392': attribute type 27 has an invalid length. [ 265.641958][T11080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8465 sclass=netlink_route_socket pid=11080 comm=syz.2.4403 [ 265.668482][T11084] netlink: 'syz.2.4405': attribute type 27 has an invalid length. [ 265.694089][T11084] veth0_vlan: left promiscuous mode [ 265.699682][T11084] veth0_vlan: entered promiscuous mode [ 265.706388][T11084] veth1_macvtap: left promiscuous mode [ 265.712373][T11084] veth1_macvtap: entered promiscuous mode [ 265.805280][T11099] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4411'. [ 266.118690][T11112] netlink: 'syz.6.4416': attribute type 27 has an invalid length. [ 266.142091][T11112] veth0_vlan: left promiscuous mode [ 266.147600][T11112] veth0_vlan: entered promiscuous mode [ 266.154207][T11112] veth1_macvtap: left promiscuous mode [ 266.160482][T11112] veth1_macvtap: entered promiscuous mode [ 267.002419][T11135] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4426'. [ 268.380005][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4448'. [ 268.483419][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4452'. [ 268.612130][ T36] audit: type=1400 audit(16777720.575:959): avc: denied { accept } for pid=11201 comm="syz.6.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.652803][ T36] audit: type=1400 audit(16777720.615:960): avc: denied { create } for pid=11208 comm="syz.6.4458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 269.009113][T11224] netlink: 'syz.4.4463': attribute type 58 has an invalid length. [ 269.017054][T11224] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 269.135831][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4465'. [ 269.146047][T11228] netlink: 'syz.4.4465': attribute type 1 has an invalid length. [ 269.153839][T11228] netlink: 'syz.4.4465': attribute type 3 has an invalid length. [ 269.161639][T11228] netlink: 296 bytes leftover after parsing attributes in process `syz.4.4465'. [ 269.220020][T11236] netlink: 'syz.4.4469': attribute type 27 has an invalid length. [ 269.245467][T11236] veth0_vlan: left promiscuous mode [ 269.250985][T11236] veth0_vlan: entered promiscuous mode [ 269.257300][T11236] veth1_macvtap: left promiscuous mode [ 269.263390][T11236] veth1_macvtap: entered promiscuous mode [ 269.427552][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4483'. [ 270.499818][T11327] netlink: 'syz.2.4502': attribute type 27 has an invalid length. [ 271.101095][T11356] netlink: 'syz.4.4514': attribute type 27 has an invalid length. [ 271.686236][T11385] netlink: 'syz.2.4526': attribute type 27 has an invalid length. [ 271.775319][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4527'. [ 271.927165][T11409] netlink: 'syz.2.4537': attribute type 27 has an invalid length. [ 272.307317][T11420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34577 sclass=netlink_route_socket pid=11420 comm=syz.8.4541 [ 272.417062][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4548'. [ 272.480217][T11440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4549'. [ 272.499359][T11443] netlink: 'syz.6.4550': attribute type 4 has an invalid length. [ 272.603311][T11448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59921 sclass=netlink_route_socket pid=11448 comm=syz.8.4552 [ 273.154500][T11458] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 273.599604][T11472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61201 sclass=netlink_route_socket pid=11472 comm=syz.4.4561 [ 273.902227][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4563'. [ 276.363259][T11522] netlink: 'syz.2.4582': attribute type 27 has an invalid length. [ 277.376531][ T36] audit: type=1400 audit(16777729.345:961): avc: denied { ioctl } for pid=11565 comm="syz.4.4603" path="socket:[46694]" dev="sockfs" ino=46694 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.538437][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4614'. [ 277.705358][T11604] 9pnet: p9_errstr2errno: server reported unknown error @cF S+Jx@PQ[v5o [ 277.760719][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4620'. [ 277.769686][T11604] erspan0: default FDB implementation only supports local addresses [ 277.906308][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4624'. [ 278.784236][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4640'. [ 278.877445][T11672] netlink: 'syz.6.4646': attribute type 27 has an invalid length. [ 278.942055][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4650'. [ 278.990225][T11686] netlink: 'syz.4.4653': attribute type 27 has an invalid length. [ 279.034713][T11693] netlink: 'syz.2.4657': attribute type 1 has an invalid length. [ 279.035965][T11691] netlink: 'syz.4.4655': attribute type 27 has an invalid length. [ 279.045781][T11693] netlink: 'syz.2.4657': attribute type 3 has an invalid length. [ 279.059409][T11693] netlink: 296 bytes leftover after parsing attributes in process `syz.2.4657'. [ 279.069939][T11695] netlink: 'syz.2.4657': attribute type 1 has an invalid length. [ 279.086291][T11695] netlink: 'syz.2.4657': attribute type 3 has an invalid length. [ 279.099510][T11695] netlink: 296 bytes leftover after parsing attributes in process `syz.2.4657'. [ 279.210890][T11713] netlink: 'syz.4.4665': attribute type 27 has an invalid length. [ 279.295343][T11728] overlayfs: failed to clone upperpath [ 279.303974][T11728] netlink: 'syz.2.4670': attribute type 27 has an invalid length. [ 279.637980][T11756] veth0_vlan: left promiscuous mode [ 279.643476][T11756] veth0_vlan: entered promiscuous mode [ 279.650740][T11756] veth1_macvtap: left promiscuous mode [ 279.657138][T11756] veth1_macvtap: entered promiscuous mode [ 279.700080][T11762] 9pnet_fd: Insufficient options for proto=fd [ 279.801967][ T36] audit: type=1400 audit(16777731.765:962): avc: denied { setattr } for pid=11789 comm="syz.8.4693" name="/" dev="configfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 279.850883][T11799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4696'. [ 279.977199][T11825] fuse: Unknown parameter 'rootmod' [ 280.103921][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4714'. [ 280.226518][T11869] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4721'. [ 280.236288][T11866] fuseblk: Unknown parameter 'dont_measure' [ 280.322334][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4726'. [ 280.387894][T11888] overlay: filesystem on ./bus not supported as upperdir [ 280.547612][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4737'. [ 280.586429][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4742'. [ 280.645688][T11928] overlay: filesystem on ./bus is read-only [ 280.677968][ T36] audit: type=1400 audit(16777732.635:963): avc: denied { mounton } for pid=11915 comm="syz.2.4740" path="/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 280.719670][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4747'. [ 281.571612][ T36] audit: type=1400 audit(16777733.525:964): avc: denied { lock } for pid=11986 comm="syz.6.4768" path="/dev/ashmem" dev="tmpfs" ino=3909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 281.861437][T12020] validate_nla: 5 callbacks suppressed [ 281.861460][T12020] netlink: 'syz.8.4782': attribute type 27 has an invalid length. [ 281.915091][ T927] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 281.928143][ T927] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 281.949716][ T7213] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 282.245023][ T7213] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 282.380113][T12054] 9p: Unknown access argument 000000000000000000000x0000000000000000: -22 [ 282.705752][ T7213] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 283.760685][T12174] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 284.423548][T12197] __nla_validate_parse: 9 callbacks suppressed [ 284.423568][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4852'. [ 284.433029][T12199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4853'. [ 284.608105][ T36] audit: type=1400 audit(16777736.575:965): avc: denied { accept } for pid=12205 comm="syz.4.4858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 284.721031][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4868'. [ 284.899690][T12266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4883'. [ 285.038252][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4896'. [ 285.063201][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4897'. [ 285.072244][T12302] erspan0: default FDB implementation only supports local addresses [ 285.551878][ T36] audit: type=1326 audit(16777737.515:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12323 comm="syz.8.4904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d7578f6c9 code=0x0 [ 285.664979][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 286.399211][T12349] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4914'. [ 286.454696][T12351] netlink: 'syz.8.4915': attribute type 16 has an invalid length. [ 286.462802][T12351] netlink: 'syz.8.4915': attribute type 3 has an invalid length. [ 286.471017][T12351] netlink: 48542 bytes leftover after parsing attributes in process `syz.8.4915'. [ 286.743505][T12370] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12370 comm=syz.2.4922 [ 287.053095][T12378] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4927'. [ 287.091049][T12384] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 287.201665][ T36] audit: type=1400 audit(16777739.165:967): avc: denied { create } for pid=12396 comm="syz.6.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 287.256572][T12408] cgroup: fork rejected by pids controller in /syz6 [ 287.473306][ T36] audit: type=1400 audit(16777739.435:968): avc: denied { map } for pid=12543 comm="syz.2.4945" path="socket:[49062]" dev="sockfs" ino=49062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 287.497215][ T36] audit: type=1400 audit(16777739.445:969): avc: denied { accept } for pid=12543 comm="syz.2.4945" path="socket:[49062]" dev="sockfs" ino=49062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 287.767696][ T36] audit: type=1400 audit(16777739.735:970): avc: denied { map } for pid=12564 comm="syz.2.4954" path="pipe:[49307]" dev="pipefs" ino=49307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 287.790675][ T36] audit: type=1400 audit(16777739.735:971): avc: denied { execute } for pid=12564 comm="syz.2.4954" path="pipe:[49307]" dev="pipefs" ino=49307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 287.960267][T12573] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 288.040905][T12583] fuse: blksize only supported for fuseblk [ 289.005232][T12627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4978'. [ 289.259770][T12653] tipc: Enabling of bearer rejected, failed to enable media [ 289.487755][T12658] tipc: Enabling of bearer rejected, failed to enable media [ 289.678565][T12677] __nla_validate_parse: 1 callbacks suppressed [ 289.678589][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4997'. [ 290.228717][T12712] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 291.281838][T12742] tipc: Disabling bearer [ 291.366765][T12757] netlink: 'syz.4.5027': attribute type 27 has an invalid length. [ 291.488320][T12757] tipc: Resetting bearer [ 291.557028][T12757] tipc: Resetting bearer [ 291.694979][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5030'. [ 291.795080][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5035'. [ 291.979665][T12795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5041'. [ 292.784998][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 294.216918][T12822] netlink: 'syz.2.5051': attribute type 27 has an invalid length. [ 294.230102][T12822] tipc: Resetting bearer [ 295.248931][T12843] netlink: 'syz.4.5060': attribute type 27 has an invalid length. [ 295.394982][T12856] fuseblk: Unknown parameter 'd' [ 295.415291][T12856] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5064'. [ 295.815228][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5072'. [ 297.192980][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5092'. [ 297.390586][ T36] audit: type=1400 audit(16777749.355:972): avc: denied { setattr } for pid=12947 comm="syz.8.5097" path="pipe:[25846]" dev="pipefs" ino=25846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 297.462216][T12956] netlink: 'syz.8.5099': attribute type 27 has an invalid length. [ 297.463568][T12953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=12953 comm=syz.6.5098 [ 297.547208][T12960] netlink: 'syz.6.5101': attribute type 16 has an invalid length. [ 297.562308][T12960] netlink: 'syz.6.5101': attribute type 2 has an invalid length. [ 297.582515][T12960] netlink: 64086 bytes leftover after parsing attributes in process `syz.6.5101'. [ 297.617451][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5100'. [ 297.651860][T12965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5103'. [ 297.743543][T12977] overlay: filesystem on ./bus is read-only [ 297.952190][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5112'. [ 297.975177][T13006] /dev/loop0: Can't lookup blockdev [ 297.979599][T13008] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5115'. [ 298.040216][T13017] tipc: Started in network mode [ 298.051197][T13017] tipc: Node identity ac14140f, cluster identity 4711 [ 298.058392][T13017] tipc: New replicast peer: 255.255.255.255 [ 298.059682][T13020] /dev/loop0: Can't lookup blockdev [ 298.064673][T13017] tipc: Enabled bearer , priority 10 [ 298.164085][T13029] overlay: filesystem on ./bus not supported as upperdir [ 298.325979][ T36] audit: type=1326 audit(16777750.295:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13034 comm="syz.2.5127" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f883fd8f6c9 code=0x0 [ 298.548590][T13040] tipc: Trying to set illegal importance in message [ 298.622525][T13051] netlink: 'syz.6.5133': attribute type 27 has an invalid length. [ 298.838600][T13074] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 298.875937][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5144'. [ 298.917399][T13088] netlink: 'syz.4.5147': attribute type 27 has an invalid length. [ 299.064958][ T10] tipc: Node number set to 2886997007 [ 299.179512][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5152'. [ 299.209892][T13108] overlayfs: missing 'workdir' [ 299.210145][T13109] overlayfs: missing 'workdir' [ 299.231349][T13111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=13111 comm=syz.2.5155 [ 299.273831][T13118] netlink: 'syz.6.5158': attribute type 27 has an invalid length. [ 299.533944][T13130] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 299.942294][T13187] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 300.009846][T13197] netlink: 'syz.2.5191': attribute type 1 has an invalid length. [ 300.018557][T13197] netlink: 'syz.2.5191': attribute type 3 has an invalid length. [ 300.058368][T13203] netlink: 'syz.4.5194': attribute type 27 has an invalid length. [ 300.095767][T13207] netlink: 'syz.4.5196': attribute type 27 has an invalid length. [ 300.619509][T13211] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 302.062688][T13222] overlayfs: failed to clone upperpath [ 302.176068][T13229] __nla_validate_parse: 3 callbacks suppressed [ 302.176090][T13229] netlink: 296 bytes leftover after parsing attributes in process `syz.4.5205'. [ 303.034828][T13264] 9pnet_fd: Insufficient options for proto=fd [ 303.045401][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5220'. [ 303.177878][T13274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13274 comm=syz.6.5218 [ 303.866630][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5230'. [ 304.496166][T13311] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5237'. [ 304.824499][T13329] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5244'. [ 305.237158][T13333] validate_nla: 2 callbacks suppressed [ 305.237180][T13333] netlink: 'syz.2.5246': attribute type 27 has an invalid length. [ 305.453547][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5251'. [ 305.575642][T13348] netlink: 'syz.6.5253': attribute type 1 has an invalid length. [ 305.603698][T13348] netlink: 'syz.6.5253': attribute type 3 has an invalid length. [ 305.633998][T13348] netlink: 296 bytes leftover after parsing attributes in process `syz.6.5253'. [ 305.664270][T13352] netlink: 'syz.2.5255': attribute type 27 has an invalid length. [ 305.750731][ T36] audit: type=1326 audit(16777757.720:974): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13359 comm="syz.2.5259" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f883fd8f6c9 code=0x0 [ 305.985904][ T36] audit: type=1400 audit(16777757.960:975): avc: denied { mounton } for pid=13364 comm="syz.6.5261" path="/file1/file0" dev="rootfs" ino=27991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 306.036161][T13367] overlay: filesystem on ./bus not supported as upperdir [ 306.415204][T13376] netlink: 'syz.8.5264': attribute type 1 has an invalid length. [ 306.434896][T13376] netlink: 'syz.8.5264': attribute type 3 has an invalid length. [ 306.442673][T13376] netlink: 296 bytes leftover after parsing attributes in process `syz.8.5264'. [ 306.544313][T13378] netlink: 'syz.8.5265': attribute type 27 has an invalid length. [ 306.736274][T13397] netlink: 'syz.2.5273': attribute type 12 has an invalid length. [ 306.744331][T13398] netlink: 'syz.2.5273': attribute type 12 has an invalid length. [ 310.046966][T13411] overlay: filesystem on ./bus not supported as upperdir [ 311.726729][T13451] syz.2.5294 uses obsolete (PF_INET,SOCK_PACKET) [ 312.446970][T13482] netlink: 'syz.6.5306': attribute type 27 has an invalid length. [ 312.616994][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5313'. [ 313.193902][T13528] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5325'. [ 313.202968][T13528] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5325'. [ 313.212648][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5325'. [ 313.221997][T13528] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5325'. [ 313.230974][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5325'. [ 313.241473][T13528] overlay: filesystem on ./file1 is read-only [ 313.353641][T13547] overlayfs: failed to resolve './bus': -2 [ 313.958931][T13611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5359'. [ 314.293821][T13626] overlayfs: missing 'lowerdir' [ 314.300006][T13627] overlayfs: missing 'lowerdir' [ 314.495562][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5374'. [ 314.515535][T13655] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5375'. [ 314.681890][ T36] audit: type=1326 audit(16777766.650:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13670 comm="syz.6.5382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff02eb8f6c9 code=0x0 [ 314.791381][T13675] netlink: 'syz.2.5383': attribute type 1 has an invalid length. [ 314.800585][T13675] netlink: 'syz.2.5383': attribute type 3 has an invalid length. [ 314.808406][T13675] netlink: 296 bytes leftover after parsing attributes in process `syz.2.5383'. [ 315.219061][ T36] audit: type=1326 audit(16777767.190:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13642 comm="syz.8.5370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7578f6c9 code=0x7fc00000 [ 318.001487][T13848] __nla_validate_parse: 6 callbacks suppressed [ 318.001510][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5449'. [ 318.182498][T13863] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5454'. [ 319.653720][T13881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=13881 comm=syz.4.5460 [ 320.388281][T13896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5466'. [ 320.947741][T13934] netlink: 'syz.4.5481': attribute type 1 has an invalid length. [ 320.955592][T13934] netlink: 'syz.4.5481': attribute type 3 has an invalid length. [ 320.963333][T13934] netlink: 296 bytes leftover after parsing attributes in process `syz.4.5481'. [ 321.247427][T13961] netlink: 'syz.6.5491': attribute type 1 has an invalid length. [ 321.255226][T13961] netlink: 'syz.6.5491': attribute type 3 has an invalid length. [ 321.263030][T13961] netlink: 296 bytes leftover after parsing attributes in process `syz.6.5491'. [ 321.461471][ T36] audit: type=1326 audit(16777773.420:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.6.5495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff02eb8f6c9 code=0x0 [ 321.584506][T13982] netlink: 'syz.2.5500': attribute type 1 has an invalid length. [ 321.593761][T13982] netlink: 520 bytes leftover after parsing attributes in process `syz.2.5500'. [ 321.824656][T14000] tipc: Enabling of bearer rejected, failed to enable media [ 321.964094][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5510'. [ 321.990006][T14011] netlink: 'syz.4.5511': attribute type 1 has an invalid length. [ 321.993293][T14013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5512'. [ 322.008592][T14011] netlink: 520 bytes leftover after parsing attributes in process `syz.4.5511'. [ 322.773262][T14038] netlink: 'syz.6.5522': attribute type 1 has an invalid length. [ 322.781089][T14038] netlink: 520 bytes leftover after parsing attributes in process `syz.6.5522'. [ 323.388511][T14061] netlink: 'syz.8.5531': attribute type 1 has an invalid length. [ 323.417557][T14061] __nla_validate_parse: 1 callbacks suppressed [ 323.417578][T14061] netlink: 520 bytes leftover after parsing attributes in process `syz.8.5531'. [ 323.460475][T14068] netlink: 'syz.6.5534': attribute type 1 has an invalid length. [ 323.884679][T14092] netlink: 'syz.6.5543': attribute type 1 has an invalid length. [ 323.898404][T14092] netlink: 520 bytes leftover after parsing attributes in process `syz.6.5543'. [ 323.975915][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5546'. [ 324.354406][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5558'. [ 324.415379][T14126] overlayfs: missing 'lowerdir' [ 324.738131][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5563'. [ 324.769178][ T36] audit: type=1400 audit(16777776.516:979): avc: denied { lock } for pid=14130 comm="syz.4.5561" path="socket:[52857]" dev="sockfs" ino=52857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 324.868714][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5568'. [ 325.663183][T14166] netlink: 612 bytes leftover after parsing attributes in process `syz.8.5573'. [ 325.725401][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5578'. [ 325.827672][ T36] audit: type=1326 audit(16777777.520:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14176 comm="syz.4.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f23b8f6c9 code=0x7fc00000 [ 326.193112][T14194] netlink: 612 bytes leftover after parsing attributes in process `syz.6.5583'. [ 326.462512][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5592'. [ 326.808012][ T36] audit: type=1326 audit(16777778.440:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.4.5600" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f23b8f6c9 code=0x0 [ 327.090990][T14236] netlink: 'syz.8.5601': attribute type 27 has an invalid length. [ 327.133017][T14236] veth0_vlan: left promiscuous mode [ 327.138617][T14236] veth0_vlan: entered promiscuous mode [ 327.145672][T14236] veth1_macvtap: left promiscuous mode [ 327.163667][T14236] veth1_macvtap: entered promiscuous mode [ 327.183448][ T899] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 327.191533][ T899] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 327.210652][ T10] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 327.647643][ T10] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 328.171882][ T10] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 328.484113][T14280] /dev/nbd8: Can't lookup blockdev [ 328.874587][T14339] __nla_validate_parse: 2 callbacks suppressed [ 328.874610][T14339] netlink: 188 bytes leftover after parsing attributes in process `syz.6.5645'. [ 329.026399][T14350] netlink: 520 bytes leftover after parsing attributes in process `syz.2.5649'. [ 329.082781][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5655'. [ 329.119299][T14366] netlink: 'syz.6.5657': attribute type 11 has an invalid length. [ 329.160180][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5658'. [ 329.338871][T14385] netlink: 520 bytes leftover after parsing attributes in process `syz.8.5664'. [ 330.153140][T14411] netlink: 'syz.8.5674': attribute type 28 has an invalid length. [ 330.176673][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5675'. [ 330.216084][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5678'. [ 330.262716][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5679'. [ 330.337400][T14430] netlink: 'syz.6.5682': attribute type 1 has an invalid length. [ 330.345220][T14430] netlink: 520 bytes leftover after parsing attributes in process `syz.6.5682'. [ 330.524835][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5688'. [ 331.034119][T14492] netlink: 'syz.4.5706': attribute type 1 has an invalid length. [ 331.239084][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 340.020730][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 357.754701][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 391.175894][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 458.018799][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 496.707925][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 153s! [syz.8.5704:14488] [ 496.708045][ C1] CPU#1 Utilization every 22s during lockup: [ 496.708054][ C1] #1: 100% system, 1% softirq, 1% hardirq, 0% idle [ 496.708069][ C1] #2: 100% system, 0% softirq, 1% hardirq, 0% idle [ 496.708084][ C1] #3: 100% system, 1% softirq, 1% hardirq, 0% idle [ 496.708098][ C1] #4: 100% system, 0% softirq, 1% hardirq, 0% idle [ 496.708111][ C1] #5: 100% system, 0% softirq, 1% hardirq, 0% idle [ 496.708125][ C1] Modules linked in: [ 496.708176][ C1] CPU: 1 UID: 0 PID: 14488 Comm: syz.8.5704 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 496.708218][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 496.708232][ C1] RIP: 0010:change_mnt_propagation+0x13c/0xb00 [ 496.708290][ C1] Code: 49 81 c4 d8 00 00 00 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 18 51 e7 ff 4d 8b 24 24 <49> 01 dc 4c 3b 65 c8 74 66 e8 86 e3 90 ff eb 99 4d 8d 7d 30 48 89 [ 496.708313][ C1] RSP: 0018:ffffc9000a51f9c0 EFLAGS: 00000246 [ 496.708327][ C1] RAX: 1ffff1102b493a13 RBX: ffffffffffffff28 RCX: dffffc0000000000 [ 496.708341][ C1] RDX: ffffc90011053000 RSI: 000000000007ffff RDI: 0000000000080000 [ 496.708352][ C1] RBP: ffffc9000a51fa10 R08: ffff888154c5882f R09: 0000000000000000 [ 496.708365][ C1] R10: ffff888154c58820 R11: ffffed102a98b106 R12: ffff888117a93958 [ 496.708378][ C1] R13: ffff88812ee54000 R14: ffff88815a49cfe0 R15: ffff88814f229340 [ 496.708391][ C1] FS: 00007f0d766a86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 496.708405][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.708417][ C1] CR2: 000000110c2b4224 CR3: 0000000154c3e000 CR4: 00000000003526b0 [ 496.708433][ C1] Call Trace: [ 496.708439][ C1] [ 496.708453][ C1] umount_tree+0xdfd/0xf70 [ 496.708479][ C1] ? __detach_mounts+0x610/0x610 [ 496.708501][ C1] ? propagate_mnt+0x828/0x890 [ 496.708519][ C1] attach_recursive_mnt+0x6df/0x21e0 [ 496.708539][ C1] ? is_subdir+0x145/0x160 [ 496.708558][ C1] ? graft_tree+0x1c0/0x1c0 [ 496.708576][ C1] ? mnt_warn_timestamp_expiry+0x370/0x370 [ 496.708596][ C1] graft_tree+0x157/0x1c0 [ 496.708614][ C1] do_loopback+0x364/0x4b0 [ 496.708629][ C1] ? path_mount+0x1050/0x1050 [ 496.708643][ C1] ? security_capable+0xcf/0xf0 [ 496.708665][ C1] ? ns_capable+0x91/0xf0 [ 496.708732][ C1] path_mount+0x582/0x1050 [ 496.708746][ C1] ? putname+0x113/0x150 [ 496.708764][ C1] __se_sys_mount+0x2bd/0x480 [ 496.708780][ C1] ? __x64_sys_mount+0xf0/0xf0 [ 496.708795][ C1] ? __kasan_check_write+0x18/0x20 [ 496.708820][ C1] ? fpregs_restore_userregs+0x11d/0x260 [ 496.708860][ C1] __x64_sys_mount+0xc3/0xf0 [ 496.708875][ C1] x64_sys_call+0x2021/0x2ee0 [ 496.708935][ C1] do_syscall_64+0x58/0xf0 [ 496.708957][ C1] ? clear_bhb_loop+0x50/0xa0 [ 496.708976][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 496.708993][ C1] RIP: 0033:0x7f0d7578f6c9 [ 496.709012][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.709026][ C1] RSP: 002b:00007f0d766a8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 496.709042][ C1] RAX: ffffffffffffffda RBX: 00007f0d759e5fa0 RCX: 00007f0d7578f6c9 [ 496.709055][ C1] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000180 [ 496.709066][ C1] RBP: 00007f0d75811f91 R08: 0000000000000000 R09: 0000000000000000 [ 496.709077][ C1] R10: 00000000020a5819 R11: 0000000000000246 R12: 0000000000000000 [ 496.709087][ C1] R13: 00007f0d759e6038 R14: 00007f0d759e5fa0 R15: 00007ffc44450a98 [ 496.709101][ C1] [ 496.709112][ C1] Sending NMI from CPU 1 to CPUs 0: [ 497.075466][ C0] NMI backtrace for cpu 0 [ 497.075481][ C0] CPU: 0 UID: 0 PID: 14513 Comm: syz.4.5715 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 497.075503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 497.075514][ C0] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 497.075537][ C0] Code: cc cc cc b8 34 77 c4 66 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 e2 39 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 d3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 497.075557][ C0] RSP: 0018:ffffc9000a7cf710 EFLAGS: 000002d3 [ 497.075572][ C0] RAX: ffffffff81439535 RBX: 0000000000000003 RCX: ffff88810dbb3900 [ 497.075585][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 497.075595][ C0] RBP: ffffc9000a7cf710 R08: ffffffff8720d604 R09: 1ffffffff0e41ac0 [ 497.075608][ C0] R10: dffffc0000000000 R11: fffffbfff0e41ac1 R12: dffffc0000000000 [ 497.075620][ C0] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff920014f9ee4 [ 497.075632][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 497.075647][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.075658][ C0] CR2: 000000110c27ebfa CR3: 00000000072a8000 CR4: 00000000003526b0 [ 497.075673][ C0] DR0: 0000000000000100 DR1: 0000000000200004 DR2: 0000000000080007 [ 497.075684][ C0] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 497.075695][ C0] Call Trace: [ 497.075701][ C0] [ 497.075709][ C0] kvm_wait+0x1ba/0x220 [ 497.075814][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 497.075837][ C0] __pv_queued_spin_lock_slowpath+0x78d/0xcc0 [ 497.075863][ C0] ? syscall_exit_to_user_mode+0x58/0xb0 [ 497.075882][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 497.075910][ C0] _raw_spin_lock+0x109/0x120 [ 497.075930][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 497.075952][ C0] mntput_no_expire+0x147/0x6c0 [ 497.075975][ C0] ? __kasan_check_write+0x18/0x20 [ 497.076000][ C0] ? lockref_put_return+0x156/0x1d0 [ 497.076024][ C0] ? mntput+0xd0/0xd0 [ 497.076045][ C0] ? __kasan_check_write+0x18/0x20 [ 497.076069][ C0] ? _raw_spin_lock+0x8c/0x120 [ 497.076090][ C0] mntput+0x63/0xd0 [ 497.076111][ C0] path_put+0x5b/0x70 [ 497.076126][ C0] exit_fs+0xe8/0x160 [ 497.076141][ C0] do_exit+0x98d/0x2630 [ 497.076179][ C0] ? __sched_text_start+0x10/0x10 [ 497.076203][ C0] ? __cfi_do_exit+0x10/0x10 [ 497.076223][ C0] ? __kasan_check_write+0x18/0x20 [ 497.076248][ C0] ? _raw_spin_lock_irq+0x8d/0x120 [ 497.076270][ C0] ? __kasan_check_read+0x15/0x20 [ 497.076294][ C0] ? cgroup_update_frozen+0x160/0x990 [ 497.076313][ C0] do_group_exit+0x22a/0x300 [ 497.076333][ C0] ? cgroup_leave_frozen+0x16c/0x2b0 [ 497.076354][ C0] get_signal+0x139d/0x14f0 [ 497.076396][ C0] arch_do_signal_or_restart+0x96/0x720 [ 497.076459][ C0] ? common_nsleep+0x93/0xb0 [ 497.076474][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 497.076498][ C0] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 497.076526][ C0] ? __kasan_check_read+0x15/0x20 [ 497.076550][ C0] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 497.076577][ C0] syscall_exit_to_user_mode+0x58/0xb0 [ 497.076595][ C0] do_syscall_64+0x64/0xf0 [ 497.076616][ C0] ? clear_bhb_loop+0x50/0xa0 [ 497.076634][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 497.076652][ C0] RIP: 0033:0x7f9f23bc1f85 [ 497.076665][ C0] Code: Unable to access opcode bytes at 0x7f9f23bc1f5b. [ 497.076673][ C0] RSP: 002b:00007f9f24a17f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 497.076689][ C0] RAX: fffffffffffffdfc RBX: 00007f9f23de6090 RCX: 00007f9f23bc1f85 [ 497.076701][ C0] RDX: 00007f9f24a17fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 497.076712][ C0] RBP: 00007f9f23c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 497.076723][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 497.076733][ C0] R13: 00007f9f23de6128 R14: 00007f9f23de6090 R15: 00007fffd292c918 [ 497.076747][ C0]