last executing test programs: 15.373081184s ago: executing program 1 (id=1726): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef0000001c00125dc063b74e3d6ee6800b0001006d616373656300000c0002800500030001000000"], 0x3c}}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000734000/0x400000)=nil) madvise(&(0x7f0000859000/0x1000)=nil, 0x1000, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0f000000040000000400000016"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0xee06ff847f1934a) setsockopt$inet_int(r3, 0x0, 0x13, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60c6dd0000103afffee000000000feff00000000000000bbff02000000000000000000000000000186009078ff08000000000000000000000ba9c221f15e4fb4d52b54c200b5c4b4d9ae440ab7b6448a9bf066f058b75f42394c59c4447d546bf7bd9c9cb8ed3d68376139349310233ede2755bb5b9a68964d14f298027db4160914c525dd1c010cfb7ee7bb808d7ba8572a4e4cfb69598f599eb4b2527db29a297018562ac0728d7b5d22255c5c19ec6ff61701aaf96d66dddd3af0a5803dd0167cf1a9f4dd45b2802d12407e7e77234bb56ecf8652484ce590db929e85cf8798cc2f4bbfe597df03e9e02ca63629d34b64acd0be08a0bb2280d27432935c0cf86a80f1a9b9"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14.827834343s ago: executing program 1 (id=1730): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@inlinecrypt}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2014000, &(0x7f0000000240)={[{@numtail}, {@fat=@check_strict}, {@fat=@nfs_nostale_ro}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@check_normal}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x42}}, {@shortname_mixed}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macroman'}}]}, 0x23, 0x34c, &(0x7f0000001740)="$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") syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b702000001010000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000240000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4988a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f6324bb7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387f74d1ffbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f009f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459110500a09b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477effff26af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8e45c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5f0436ead88d7acf0166dbd9f30a9b259c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c0057addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cfe9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d11c9b4be91c60932bae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952bd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2ae59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49798ce2fc6f639735e0222cd08075418239042bfe47c363973d3245ce507e838dfd90ae442a96fa1343029be56de31c2eff226c05f0ae3dbe2281e7bc02db39342d5b54ad3616733a5aa7753613423a0c5e2844a6e08fa5b76e18f7e24e967f6f83c546718d0f20959376427cdd449a4be3d75fd3e51e1b7f8690855af8eddbd3fd556b4460d0091e3623933f1a11db14aea54af6c49725bfa51fed222dc379995f48b1aab94441767c8bccbfd966d814715203bd8f549cd57d6a87295bf16aa25fb4e7fcaa8cec5e5c03b0095861bf2fed70ffb46bbb78ba90ca272ead9b3d2959fd9dbaabd1d51a60b474cef4c700faf718b810e4d3527a4663ee9fbc0000000000000000000000000000000000000000000000000061abf7a66b7b3f57ff83"], &(0x7f0000000340)='GPL\x00'}, 0x48) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x20) dup3(r1, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f000022c000/0x400000)=nil, 0x400000, 0x4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) 12.432846508s ago: executing program 1 (id=1739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/arp\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f00000002c0)) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a700000008"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 11.465106199s ago: executing program 1 (id=1741): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) 8.00290948s ago: executing program 4 (id=1750): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@inlinecrypt}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2014000, &(0x7f0000000240)={[{@numtail}, {@fat=@check_strict}, {@fat=@nfs_nostale_ro}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@check_normal}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x42}}, {@shortname_mixed}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macroman'}}]}, 0x23, 0x34c, &(0x7f0000001740)="$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") syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x20) dup3(r1, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f000022c000/0x400000)=nil, 0x400000, 0x4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) 7.251209s ago: executing program 2 (id=1752): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20241, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001a00010028bd7000000000000220200000000007000000000800", @ANYRES32=r6, @ANYBLOB="c5d2ccc2ac1414d208008180ac1414110bfb0c9abe292d8ba80e196542ca7e2b3020f00251fd17b02957"], 0x34}}, 0xea5bc50b6199d77e) 6.933119217s ago: executing program 0 (id=1753): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef0000001c00125dc063b74e3d6ee6800b0001006d616373656300000c0002800500030001000000"], 0x3c}}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000734000/0x400000)=nil) madvise(&(0x7f0000859000/0x1000)=nil, 0x1000, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0f000000040000000400000016"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0xee06ff847f1934a) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x10, &(0x7f0000000040)=0x6, 0x4) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60c6dd0000103afffee000000000feff00000000000000bbff02000000000000000000000000000186009078ff08000000000000000000000ba9c221f15e4fb4d52b54c200b5c4b4d9ae440ab7b6448a9bf066f058b75f42394c59c4447d546bf7bd9c9cb8ed3d68376139349310233ede2755bb5b9a68964d14f298027db4160914c525dd1c010cfb7ee7bb808d7ba8572a4e4cfb69598f599eb4b2527db29a297018562ac0728d7b5d22255c5c19ec6ff61701aaf96d66dddd3af0a5803dd0167cf1a9f4dd45b2802d12407e7e77234bb56ecf8652484ce590db929e85cf8798cc2f4bbfe597df03e9e02ca63629d34b64acd0be08a0bb2280d27432935c0cf86a80f1a9b9"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) unshare(0x64000600) 6.788566364s ago: executing program 3 (id=1754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r3, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='io\x00') read$FUSE(r4, &(0x7f0000002dc0)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~', @ANYRES32=0x0], 0x1c}}, 0x4000054) 6.498142549s ago: executing program 3 (id=1755): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) readlink(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x400000000000000) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x5c47300c868e3a5, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 6.469579701s ago: executing program 0 (id=1756): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe6c11ffe4afd7b0e, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = socket(0xa, 0x3, 0x3a) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) 6.463509072s ago: executing program 4 (id=1757): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20241, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="c5d2ccc2ac1414d208008180ac1414110bfb0c9abe292d8ba80e196542ca7e2b3020f00251fd17b02957"], 0x34}}, 0xea5bc50b6199d77e) 6.401449864s ago: executing program 0 (id=1758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 5.546390039s ago: executing program 2 (id=1759): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20241, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001a00010028bd7000000000000220200000000007000000000800", @ANYRES32=r6, @ANYBLOB="c5d2ccc2ac1414d208008180ac1414110bfb0c9abe292d8ba80e196542ca7e2b3020f00251fd17b02957"], 0x34}}, 0xea5bc50b6199d77e) 5.399841447s ago: executing program 0 (id=1760): fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000000), 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f00000024c0)=""/4127, 0x101f}], 0x1, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setgroups(0x51, 0x0) setreuid(0xee01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x26, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 5.399396267s ago: executing program 4 (id=1761): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$TCSBRKP(r3, 0x5425, 0x4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) userfaultfd(0x80001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xed78, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x7, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x7, 0x3, 0x12, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8000, 0x10, 0x9, 0x4}}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00') read$FUSE(r4, &(0x7f0000004a80)={0x2020}, 0x2020) 5.394816297s ago: executing program 3 (id=1762): r0 = syz_clone(0x11c0400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c56, &(0x7f0000000840)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6a742c756e695f786c6174653d312c696f636861727b65743d6370312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f77650000008066383d302c726f6469722c73686f72746e616d653d77696e39352c756e695f786c6174653d312c757466383d302c726f6469722c757466383d302c747a3d5554432c00000000000000000000000000000000002f0eab5b3e46b8fae1c2c80c2751"], 0x81, 0x2a6, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x4000000248}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/134, 0x86}], 0x1, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)=""/4096, 0x2f039347b16b33d3}], 0x1, 0x0) 2.965723184s ago: executing program 2 (id=1763): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) syz_io_uring_setup(0x3af6, &(0x7f0000001400)={0x0, 0xd9b2, 0x1000, 0x0, 0x23b}, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000000)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$TCSBRKP(r3, 0x5425, 0x4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) userfaultfd(0x80001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xed78, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x7, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x7, 0x3, 0x12, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8000, 0x10, 0x9, 0x4}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00') read$FUSE(r5, &(0x7f0000004a80)={0x2020}, 0x2020) 2.965117484s ago: executing program 3 (id=1764): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000004c0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@mblk_io_submit}], [{@euid_lt}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="0b87df53da33c9f7d92600000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0x746, 0x6, 0x8, 0x6, 0x6, 0x20000000ffe, 0xf64, 0xffeffffc}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x40800) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r2, r6, 0x0, 0x7ffff004) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.964348025s ago: executing program 4 (id=1765): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000006c0)='htcp', 0x4) shutdown(r3, 0x1) shutdown(0xffffffffffffffff, 0x1) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) tkill(0x0, 0xb) 2.891038078s ago: executing program 0 (id=1766): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x1d, 0x0, 0x1, 0x7, 0x10000}, 0x28) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1011, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) io_setup(0x2, &(0x7f0000000000)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80000000) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r7, &(0x7f00000073c0)=[{{&(0x7f0000000dc0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000e00)="339a664d", 0x4}], 0x1, &(0x7f0000001200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4f}}], 0x30}}], 0x1, 0x40840) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000040)={0x20000024}) 2.278045791s ago: executing program 3 (id=1767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r3, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='io\x00') read$FUSE(r4, &(0x7f0000002dc0)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~', @ANYRES32=0x0], 0x1c}}, 0x4000054) 2.191813575s ago: executing program 1 (id=1768): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r4, 0x0, 0x20024014) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x5000, '\x00', 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.191444865s ago: executing program 2 (id=1769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/arp\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f00000002c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a700000008"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 1.33579167s ago: executing program 1 (id=1770): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x1d, 0x0, 0x1, 0x7, 0x10000}, 0x28) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1011, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) io_setup(0x2, &(0x7f0000000000)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x80000000) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r9, &(0x7f00000073c0)=[{{&(0x7f0000000dc0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000e00)="339a664d", 0x4}], 0x1, &(0x7f0000001200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4f}}], 0x30}}], 0x1, 0x40840) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000040)={0x20000024}) 1.33031208s ago: executing program 4 (id=1771): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 1.303742572s ago: executing program 2 (id=1772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 282.693345ms ago: executing program 0 (id=1773): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x1d, 0x0, 0x1, 0x7, 0x10000}, 0x28) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1011, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) io_setup(0x2, &(0x7f0000000000)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x80000000) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r9, &(0x7f00000073c0)=[{{&(0x7f0000000dc0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000e00)="339a664d", 0x4}], 0x1, &(0x7f0000001200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4f}}], 0x30}}], 0x1, 0x40840) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000040)={0x20000024}) 14.728399ms ago: executing program 4 (id=1774): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef0000001c00125dc063b74e3d6ee6800b0001006d616373656300000c0002800500030001000000"], 0x3c}}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000734000/0x400000)=nil) madvise(&(0x7f0000859000/0x1000)=nil, 0x1000, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0f000000040000000400000016"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0xee06ff847f1934a) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r8, 0x80049367, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x10, &(0x7f0000000040)=0x6, 0x4) getsockopt$inet6_tcp_buf(r8, 0x6, 0x8, 0x0, &(0x7f0000001040)) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) unshare(0x64000600) 9.493119ms ago: executing program 3 (id=1775): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef0000001c00125dc063b74e3d6ee6800b0001006d616373656300000c0002800500030001000000"], 0x3c}}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000734000/0x400000)=nil) madvise(&(0x7f0000859000/0x1000)=nil, 0x1000, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0f000000040000000400000016"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0xee06ff847f1934a) setsockopt$inet_int(r3, 0x0, 0x13, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x10, &(0x7f0000000040)=0x6, 0x4) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) unshare(0x64000600) 0s ago: executing program 2 (id=1776): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$TCSBRKP(r3, 0x5425, 0x4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) userfaultfd(0x80001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xed78, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x7, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x7, 0x3, 0x12, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8000, 0x10, 0x9, 0x4}}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00') read$FUSE(r4, &(0x7f0000004a80)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. [ 21.194151][ T30] audit: type=1400 audit(1777089802.618:64): avc: denied { mounton } for pid=272 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.195250][ T272] cgroup: Unknown subsys name 'net' [ 21.216792][ T30] audit: type=1400 audit(1777089802.618:65): avc: denied { mount } for pid=272 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.244047][ T30] audit: type=1400 audit(1777089802.648:66): avc: denied { unmount } for pid=272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.244310][ T272] cgroup: Unknown subsys name 'devices' [ 21.383549][ T272] cgroup: Unknown subsys name 'hugetlb' [ 21.389129][ T272] cgroup: Unknown subsys name 'rlimit' [ 21.585732][ T30] audit: type=1400 audit(1777089803.008:67): avc: denied { setattr } for pid=272 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.608880][ T30] audit: type=1400 audit(1777089803.008:68): avc: denied { mounton } for pid=272 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.633641][ T30] audit: type=1400 audit(1777089803.008:69): avc: denied { mount } for pid=272 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.639149][ T274] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.665911][ T30] audit: type=1400 audit(1777089803.088:70): avc: denied { relabelto } for pid=274 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.692432][ T30] audit: type=1400 audit(1777089803.088:71): avc: denied { write } for pid=274 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.727182][ T30] audit: type=1400 audit(1777089803.148:72): avc: denied { read } for pid=272 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.752719][ T30] audit: type=1400 audit(1777089803.148:73): avc: denied { open } for pid=272 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.752809][ T272] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.625572][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.632730][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.640029][ T281] device bridge_slave_0 entered promiscuous mode [ 22.647276][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.654408][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.661656][ T281] device bridge_slave_1 entered promiscuous mode [ 22.689491][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.696599][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.704107][ T282] device bridge_slave_0 entered promiscuous mode [ 22.715107][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.722227][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.729622][ T282] device bridge_slave_1 entered promiscuous mode [ 22.781666][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.788805][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.796295][ T280] device bridge_slave_0 entered promiscuous mode [ 22.814332][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.821362][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.828757][ T280] device bridge_slave_1 entered promiscuous mode [ 22.835431][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.842483][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.849908][ T283] device bridge_slave_0 entered promiscuous mode [ 22.859412][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.866488][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.873957][ T283] device bridge_slave_1 entered promiscuous mode [ 22.918842][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.926021][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.933535][ T284] device bridge_slave_0 entered promiscuous mode [ 22.943677][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.950804][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.958181][ T284] device bridge_slave_1 entered promiscuous mode [ 23.068554][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.075613][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.082928][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.089943][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.106959][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.114011][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.121260][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.128293][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.141325][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.148389][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.155678][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.163221][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.184848][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.191901][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.199151][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.206325][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.223742][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.230799][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.238154][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.245296][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.262012][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.269495][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.276952][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.284677][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.291926][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.299074][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.306345][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.313569][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.320759][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.328233][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.335719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.343566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.361233][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.368841][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.385590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.394062][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.401071][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.408469][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.416812][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.423910][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.443516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.451171][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.459660][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.466803][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.474595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.482568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.490421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.498590][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.505732][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.533617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.542564][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.551310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.559301][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.568480][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.575539][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.583071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.591173][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.598202][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.605640][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.613982][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.621004][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.628385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.636591][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.643620][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.650983][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.659297][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.666356][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.673731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.681599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.702234][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.710288][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.718445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.726702][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.734736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.743073][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.751364][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.759503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.769929][ T281] device veth0_vlan entered promiscuous mode [ 23.782466][ T283] device veth0_vlan entered promiscuous mode [ 23.788766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.796254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.804120][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.812315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.820259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.828832][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.837020][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.844040][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.851387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.859800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.870837][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.878373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.885836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.894123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.905515][ T282] device veth0_vlan entered promiscuous mode [ 23.918334][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.926522][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.934655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.943016][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.951018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.960026][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.969886][ T283] device veth1_macvtap entered promiscuous mode [ 23.979511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.986918][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.994812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.002948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.011070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.019439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.027584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.035832][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.055395][ T281] device veth1_macvtap entered promiscuous mode [ 24.062806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.070576][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.079169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.087731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.096184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.105029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.113507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.124058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.132275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.142124][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.150404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.162888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.170807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.179119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.187110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.196866][ T282] device veth1_macvtap entered promiscuous mode [ 24.207461][ T280] device veth0_vlan entered promiscuous mode [ 24.214471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.222272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.230476][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.239005][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.247284][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.259386][ T284] device veth0_vlan entered promiscuous mode [ 24.271293][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.279466][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.279677][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 24.294705][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.303511][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.312082][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.320254][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.328721][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.336483][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.348315][ T284] device veth1_macvtap entered promiscuous mode [ 24.359512][ T280] device veth1_macvtap entered promiscuous mode [ 24.372597][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.380980][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.389410][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.398009][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.406334][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.415572][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.424293][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.433269][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.463167][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.471460][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.491171][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.504550][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.550076][ T311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53957 sclass=netlink_route_socket pid=311 comm=syz.2.3 [ 24.726559][ T316] loop3: detected capacity change from 0 to 512 [ 24.791752][ T316] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 24.813976][ T316] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 24.821744][ T316] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 24.828964][ T316] EXT4-fs (loop3): Unrecognized mount option "euid<00000000000000000000" or missing value [ 24.918297][ T323] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2'. [ 25.057583][ T327] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.341652][ T313] SELinux: failed to load policy [ 25.384615][ T333] loop2: detected capacity change from 0 to 1024 [ 25.421453][ T333] EXT4-fs (loop2): Ignoring removed oldalloc option [ 25.456582][ T333] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,oldalloc,,errors=continue. Quota mode: none. [ 25.510331][ T338] kvm [337]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 25.520065][ T338] kvm [337]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 25.616581][ T333] device syzkaller0 entered promiscuous mode [ 25.899429][ T349] loop0: detected capacity change from 0 to 128 [ 25.942374][ T349] ======================================================= [ 25.942374][ T349] WARNING: The mand mount option has been deprecated and [ 25.942374][ T349] and is ignored by this kernel. Remove the mand [ 25.942374][ T349] option from the mount to silence this warning. [ 25.942374][ T349] ======================================================= [ 26.017931][ T349] EXT4-fs (loop0): Test dummy encryption mode enabled [ 26.035940][ T349] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none. [ 26.053575][ T349] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 26.090574][ T363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 26.103182][ T363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'. [ 26.114257][ T363] Zero length message leads to an empty skb [ 26.167662][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.174954][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.267069][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 26.267083][ T30] audit: type=1400 audit(1777089807.688:130): avc: denied { create } for pid=359 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.298325][ T365] loop3: detected capacity change from 0 to 512 [ 26.311208][ T30] audit: type=1400 audit(1777089807.728:131): avc: denied { read } for pid=359 comm="syz.3.17" path="socket:[15652]" dev="sockfs" ino=15652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.368348][ T30] audit: type=1400 audit(1777089807.788:132): avc: denied { write } for pid=348 comm="syz.0.14" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.390443][ T30] audit: type=1400 audit(1777089807.788:133): avc: denied { add_name } for pid=348 comm="syz.0.14" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.410938][ T365] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 26.416083][ T30] audit: type=1400 audit(1777089807.788:134): avc: denied { create } for pid=348 comm="syz.0.14" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 26.439670][ T349] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 26.479439][ T365] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,nomblk_io_submit,dioread_lock,nombcache,init_itable,,errors=continue. Quota mode: writeback. [ 26.496163][ T365] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.520695][ T30] audit: type=1400 audit(1777089807.938:135): avc: denied { append } for pid=359 comm="syz.3.17" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.544470][ T30] audit: type=1400 audit(1777089807.968:136): avc: denied { map } for pid=359 comm="syz.3.17" path="/dev/loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.622121][ T374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53957 sclass=netlink_route_socket pid=374 comm=syz.4.19 [ 26.837853][ T30] audit: type=1400 audit(1777089808.258:137): avc: denied { setattr } for pid=348 comm="syz.0.14" name="RAWv6" dev="sockfs" ino=16677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.866459][ T363] syz.2.18 (363) used greatest stack depth: 19784 bytes left [ 26.878975][ T30] audit: type=1400 audit(1777089808.298:138): avc: denied { write } for pid=348 comm="syz.0.14" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 26.887907][ T379] SELinux: failed to load policy [ 27.034645][ T391] loop2: detected capacity change from 0 to 512 [ 27.109933][ T30] audit: type=1400 audit(1777089808.528:139): avc: denied { read } for pid=384 comm="syz.3.20" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 27.232142][ T391] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 27.327211][ T391] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 27.343655][ T391] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 27.353096][ T398] loop3: detected capacity change from 0 to 1024 [ 27.359674][ T391] EXT4-fs (loop2): Unrecognized mount option "euid<00000000000000000000" or missing value [ 27.434790][ T406] loop0: detected capacity change from 0 to 256 [ 27.747485][ T398] EXT4-fs (loop3): Ignoring removed oldalloc option [ 27.888624][ T398] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,oldalloc,,errors=continue. Quota mode: none. [ 28.341783][ C0] sched: RT throttling activated [ 28.351707][ T398] device syzkaller0 entered promiscuous mode [ 28.405192][ T417] loop2: detected capacity change from 0 to 512 [ 28.486687][ T422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 28.560256][ T426] loop0: detected capacity change from 0 to 512 [ 28.567985][ T417] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 28.613067][ T417] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,nomblk_io_submit,dioread_lock,nombcache,init_itable,,errors=continue. Quota mode: writeback. [ 28.629633][ T417] ext4 filesystem being mounted at /6/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.639503][ T426] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 28.659238][ T417] EXT4-fs error (device loop2): ext4_acquire_dquot:6225: comm syz.2.29: Failed to acquire dquot type 0 [ 28.845339][ T426] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 28.957111][ T426] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 28.967394][ T426] EXT4-fs (loop0): Unrecognized mount option "euid<00000000000000000000" or missing value [ 28.975103][ T437] capability: warning: `syz.3.32' uses deprecated v2 capabilities in a way that may be insecure [ 29.733014][ T445] netlink: 'syz.1.38': attribute type 1 has an invalid length. [ 29.740608][ T445] netlink: 'syz.1.38': attribute type 1 has an invalid length. [ 29.752199][ T445] netlink: 9000 bytes leftover after parsing attributes in process `syz.1.38'. [ 29.810338][ T453] device syzkaller0 entered promiscuous mode [ 29.920335][ T460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 30.183546][ T464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.43'. [ 30.587807][ T468] loop2: detected capacity change from 0 to 256 [ 32.030190][ T481] loop2: detected capacity change from 0 to 256 [ 32.104570][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 32.104584][ T30] audit: type=1400 audit(1777089813.528:150): avc: denied { read write } for pid=489 comm="syz.1.52" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.167561][ T490] netlink: 120 bytes leftover after parsing attributes in process `syz.1.52'. [ 32.216230][ T490] input: syz0 as /devices/virtual/input/input4 [ 32.226522][ T30] audit: type=1400 audit(1777089813.528:151): avc: denied { open } for pid=489 comm="syz.1.52" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.727583][ T30] audit: type=1400 audit(1777089813.588:152): avc: denied { ioctl } for pid=489 comm="syz.1.52" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.746924][ T499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 32.791412][ T30] audit: type=1400 audit(1777089813.588:153): avc: denied { nlmsg_write } for pid=489 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.914653][ T504] loop3: detected capacity change from 0 to 512 [ 32.918619][ T30] audit: type=1400 audit(1777089813.678:154): avc: denied { read } for pid=85 comm="acpid" name="event3" dev="devtmpfs" ino=592 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.668827][ T433] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.732650][ T504] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 33.742768][ T30] audit: type=1400 audit(1777089813.678:155): avc: denied { open } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=592 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.766245][ T30] audit: type=1400 audit(1777089813.678:156): avc: denied { ioctl } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=592 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.792194][ T30] audit: type=1400 audit(1777089814.008:157): avc: denied { read write } for pid=489 comm="syz.1.52" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 33.846336][ T30] audit: type=1400 audit(1777089814.008:158): avc: denied { open } for pid=489 comm="syz.1.52" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 33.869614][ T30] audit: type=1400 audit(1777089814.018:159): avc: denied { read write } for pid=489 comm="syz.1.52" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.878720][ T504] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 33.904689][ T504] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 33.914414][ T504] EXT4-fs (loop3): Unrecognized mount option "euid<00000000000000000000" or missing value [ 33.961868][ T433] usb 2-1: Using ep0 maxpacket: 16 [ 34.081895][ T433] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 34.154696][ T433] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.171826][ T433] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.500698][ T433] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.513279][ T433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.523946][ T518] IPv6: NLM_F_CREATE should be specified when creating new route [ 34.531235][ T433] usb 2-1: Product: syz [ 34.540264][ T433] usb 2-1: Manufacturer: syz [ 34.542337][ T518] fuse: Unknown parameter 'use00000000000000000000' [ 34.550342][ T433] usb 2-1: SerialNumber: syz [ 34.600409][ T523] loop0: detected capacity change from 0 to 512 [ 34.709954][ T523] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 34.732216][ T523] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 34.739582][ T523] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 34.751841][ T523] EXT4-fs (loop0): Unrecognized mount option "euid<00000000000000000000" or missing value [ 34.790258][ T526] loop3: detected capacity change from 0 to 256 [ 35.711936][ T433] usb 2-1: 0:2 : does not exist [ 35.742022][ T535] loop0: detected capacity change from 0 to 512 [ 35.752242][ T535] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 35.752330][ T433] usb 2-1: USB disconnect, device number 2 [ 35.998251][ T545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.67'. [ 36.040430][ T545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 36.200344][ T535] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 36.261864][ T535] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 36.269043][ T535] EXT4-fs (loop0): Unrecognized mount option "euid<00000000000000000000" or missing value [ 36.284766][ T541] loop4: detected capacity change from 0 to 256 [ 36.875427][ T559] loop4: detected capacity change from 0 to 512 [ 36.884256][ T558] IPv6: NLM_F_CREATE should be specified when creating new route [ 36.902367][ T558] fuse: Unknown parameter 'use00000000000000000000' [ 36.902798][ T555] device syzkaller0 entered promiscuous mode [ 36.957871][ T559] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 36.997904][ T559] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 37.021846][ T559] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 37.059487][ T559] EXT4-fs (loop4): Unrecognized mount option "euid<00000000000000000000" or missing value [ 37.323617][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 37.323630][ T30] audit: type=1400 audit(1777089818.748:176): avc: denied { read write } for pid=560 comm="syz.0.74" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 37.360304][ T578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 37.460711][ T583] loop2: detected capacity change from 0 to 256 [ 37.499374][ T30] audit: type=1400 audit(1777089818.798:177): avc: denied { open } for pid=560 comm="syz.0.74" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 37.523263][ T30] audit: type=1400 audit(1777089818.808:178): avc: denied { block_suspend } for pid=560 comm="syz.0.74" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.564060][ T30] audit: type=1400 audit(1777089818.848:179): avc: denied { setopt } for pid=580 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.631896][ T30] audit: type=1400 audit(1777089819.038:180): avc: denied { execute } for pid=584 comm="syz.1.81" path="/15/memory.events.local" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.404639][ T605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.86'. [ 39.525287][ T605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 40.198649][ T622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 40.534551][ T633] loop2: detected capacity change from 0 to 256 [ 40.648200][ T637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.95'. [ 40.658427][ T637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 41.222466][ T646] SELinux: failed to load policy [ 41.284851][ T648] device syzkaller0 entered promiscuous mode [ 41.919364][ T666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 41.928712][ T664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.102'. [ 42.014753][ T664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 42.281843][ T666] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.289036][ T666] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.431092][ T288] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 42.460475][ T678] SELinux: failed to load policy [ 42.871813][ T288] usb 2-1: Using ep0 maxpacket: 16 [ 43.182933][ T30] audit: type=1400 audit(1777089824.598:181): avc: denied { name_bind } for pid=694 comm="syz.3.115" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 43.269520][ T288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.372362][ T288] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.591852][ T288] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 43.733019][ T288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.741125][ T288] usb 2-1: Product: syz [ 43.745403][ T288] usb 2-1: Manufacturer: syz [ 43.750054][ T288] usb 2-1: SerialNumber: syz [ 43.771210][ T713] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 43.914282][ T719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 44.212122][ T288] usb 2-1: 0:2 : does not exist [ 44.233107][ T288] usb 2-1: USB disconnect, device number 3 [ 44.301733][ T722] SELinux: failed to load policy [ 44.474357][ T732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.123'. [ 44.526152][ T732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 45.904026][ T752] netlink: 104 bytes leftover after parsing attributes in process `syz.1.128'. [ 47.193811][ T30] audit: type=1400 audit(1777089828.548:182): avc: denied { lock } for pid=755 comm="syz.1.132" path="socket:[18717]" dev="sockfs" ino=18717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 48.565070][ T780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.137'. [ 48.608081][ T780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 49.105841][ T30] audit: type=1400 audit(1777089830.528:183): avc: denied { create } for pid=783 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.179691][ T30] audit: type=1400 audit(1777089830.528:184): avc: denied { listen } for pid=783 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.203602][ T30] audit: type=1400 audit(1777089830.578:185): avc: denied { mounton } for pid=783 comm="syz.1.139" path="/20/file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.886337][ T798] netlink: 104 bytes leftover after parsing attributes in process `syz.0.143'. [ 51.371974][ T435] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.412212][ T30] audit: type=1400 audit(1777089832.838:186): avc: denied { create } for pid=824 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.808884][ T26] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 53.557162][ T433] Bluetooth: hci0: command 0x1003 tx timeout [ 53.571845][ T826] Bluetooth: hci0: sending frame failed (-49) [ 53.601454][ T864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 53.742182][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.752519][ T26] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 53.763625][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 53.775356][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.785355][ T26] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 53.892146][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.912985][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 53.961226][ T26] usb 5-1: SerialNumber: syz [ 54.273114][ T26] usb 5-1: USB disconnect, device number 2 [ 54.495958][ T878] SELinux: failed to load policy [ 54.512676][ T880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'. [ 54.522250][ T880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 54.737723][ T893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 55.925425][ T906] SELinux: failed to load policy [ 55.953485][ T42] Bluetooth: hci0: command 0x1001 tx timeout [ 55.959533][ T826] Bluetooth: hci0: sending frame failed (-49) [ 56.005045][ T913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 56.014702][ T913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 56.659386][ T934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 56.953200][ T942] SELinux: failed to load policy [ 57.179249][ T956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 57.223493][ T956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.196'. [ 57.751261][ T956] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.758500][ T956] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.922794][ T967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 58.011958][ T433] Bluetooth: hci0: command 0x1009 tx timeout [ 58.357377][ T30] audit: type=1400 audit(1777089839.778:187): avc: denied { mounton } for pid=973 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 58.597433][ T973] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.777614][ T973] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.855284][ T973] device bridge_slave_0 entered promiscuous mode [ 58.864162][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.871303][ T973] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.878939][ T973] device bridge_slave_1 entered promiscuous mode [ 58.888879][ T980] SELinux: failed to load policy [ 58.968887][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.976052][ T973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.983361][ T973] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.990825][ T973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.072564][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.084299][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.102125][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.446800][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.460139][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.472453][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.486275][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.509508][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.526203][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.577423][ T8] device bridge_slave_1 left promiscuous mode [ 59.591863][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.602239][ T8] device bridge_slave_0 left promiscuous mode [ 59.612149][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.995718][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.003765][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.014283][ T973] device veth0_vlan entered promiscuous mode [ 60.021998][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.029448][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.040483][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.049344][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.056064][ T1010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 60.059099][ T973] device veth1_macvtap entered promiscuous mode [ 60.092287][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.104701][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.120267][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.143893][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.166644][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.175438][ T30] audit: type=1400 audit(1777089841.578:188): avc: denied { unmount } for pid=973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.868200][ T1024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.202'. [ 61.904625][ T1024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'. [ 62.602317][ T1046] device syzkaller0 entered promiscuous mode [ 62.677223][ T1048] fuse: Unknown parameter '0x0000000000000006' [ 62.764073][ T1052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 62.969566][ T1066] device syzkaller0 entered promiscuous mode [ 64.349896][ T1097] fuse: Unknown parameter '0x0000000000000006' [ 64.513765][ T1104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 64.534303][ T1104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.236'. [ 64.743742][ T1110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.239'. [ 64.991100][ T1112] device syzkaller0 entered promiscuous mode [ 67.140964][ T1172] fuse: Unknown parameter 'fd0x0000000000000006' [ 67.193239][ T30] audit: type=1400 audit(1777089848.618:189): avc: denied { create } for pid=1173 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.292902][ T30] audit: type=1400 audit(1777089848.638:190): avc: denied { setopt } for pid=1173 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.361825][ T30] audit: type=1400 audit(1777089848.658:191): avc: denied { ioctl } for pid=1173 comm="syz.4.258" path="socket:[20951]" dev="sockfs" ino=20951 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.546255][ T30] audit: type=1400 audit(1777089848.658:192): avc: denied { bind } for pid=1173 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.999200][ T30] audit: type=1400 audit(1777089848.658:193): avc: denied { write } for pid=1173 comm="syz.4.258" path="socket:[20950]" dev="sockfs" ino=20950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.397404][ T1195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.263'. [ 68.430390][ T1195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'. [ 70.452609][ T1228] fuse: Unknown parameter 'fd0x0000000000000006' [ 70.871542][ T30] audit: type=1400 audit(1777089852.288:194): avc: denied { create } for pid=1242 comm="syz.4.278" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.531259][ T30] audit: type=1400 audit(1777089852.948:195): avc: denied { unlink } for pid=282 comm="syz-executor" name="file0" dev="tmpfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.686080][ T1256] netlink: 'syz.0.282': attribute type 1 has an invalid length. [ 71.796099][ T1256] netlink: 8980 bytes leftover after parsing attributes in process `syz.0.282'. [ 71.805225][ T1256] netlink: 'syz.0.282': attribute type 1 has an invalid length. [ 71.844878][ T1257] device syzkaller0 entered promiscuous mode [ 72.947850][ T1273] fuse: Unknown parameter 'group_id00000000000000000000׃ %?Th<ɑ{KϖeQ' [ 72.966867][ T1270] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=94 sclass=netlink_audit_socket pid=1270 comm=syz.1.287 [ 73.064542][ T1285] input: syz0 as /devices/virtual/input/input5 [ 73.556203][ T1292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.292'. [ 73.895600][ T30] audit: type=1400 audit(1777089855.318:196): avc: denied { mount } for pid=1296 comm="syz.2.294" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.410490][ T1311] device syzkaller0 entered promiscuous mode [ 75.033359][ T1319] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.053005][ T1319] fuse: Unknown parameter 'group_id00000000000000000000׃ %?Th<ɑ{KϖeQ' [ 77.628810][ T1357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.310'. [ 77.639196][ T1357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 77.885914][ T435] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.901371][ T435] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.980681][ T435] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.732673][ T1370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'. [ 78.743078][ T1370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 79.851816][ T285] Bluetooth: hci0: command 0x1003 tx timeout [ 79.859762][ T826] Bluetooth: hci0: sending frame failed (-49) [ 81.807397][ T1415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.326'. [ 81.824330][ T1415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 81.942775][ T285] Bluetooth: hci0: command 0x1001 tx timeout [ 82.188271][ T826] Bluetooth: hci0: sending frame failed (-49) [ 83.736151][ T1443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.334'. [ 83.785656][ T1443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 84.354719][ T285] Bluetooth: hci0: command 0x1009 tx timeout [ 84.687470][ T1455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.330'. [ 85.218179][ T1491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 86.192098][ T1507] netlink: 104 bytes leftover after parsing attributes in process `syz.2.354'. [ 86.564672][ T1517] overlayfs: overlapping lowerdir path [ 86.571333][ T1517] overlayfs: overlapping lowerdir path [ 86.616273][ T1523] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.676269][ T1523] fuse: Unknown parameter 'group_id00000000000000000000׃ %?Th<ɑ{KϖeQ' [ 88.777655][ T30] audit: type=1400 audit(1777089870.198:197): avc: denied { create } for pid=1569 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.809303][ T30] audit: type=1400 audit(1777089870.218:198): avc: denied { write } for pid=1569 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.103507][ T1605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 90.402175][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.364200][ T1621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.389'. [ 91.374008][ T1621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 91.837955][ T1634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.393'. [ 91.850466][ T1634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 92.411879][ T310] Bluetooth: hci0: command 0x1003 tx timeout [ 92.418085][ T826] Bluetooth: hci0: sending frame failed (-49) [ 92.571194][ T1647] tipc: Started in network mode [ 92.576305][ T1647] tipc: Node identity aa93c61366f3, cluster identity 4711 [ 92.583652][ T1647] tipc: Enabled bearer , priority 0 [ 92.593874][ T1646] tipc: Disabling bearer [ 93.420085][ T1657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 95.373124][ T434] Bluetooth: hci0: command 0x1001 tx timeout [ 95.405062][ T826] Bluetooth: hci0: sending frame failed (-49) [ 95.423636][ T1673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.403'. [ 95.437802][ T1673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 96.998495][ T1704] fuse: Unknown parameter 'group_id00000000000000000000׃ %?Th<ɑ{KϖeQ' [ 98.309534][ T310] Bluetooth: hci0: command 0x1009 tx timeout [ 98.704251][ T1727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.419'. [ 98.725685][ T1727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 98.873334][ T1728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'. [ 99.035117][ T1737] input: syz0 as /devices/virtual/input/input6 [ 99.316234][ T434] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.345061][ T1751] fuse: Unknown parameter 'group_id00000000000000000000׃ %?Th<ɑ{KϖeQ' [ 99.671798][ T434] usb 4-1: device descriptor read/64, error -71 [ 100.067367][ T434] usb 4-1: device descriptor read/64, error -71 [ 100.367327][ T30] audit: type=1400 audit(1777089881.788:199): avc: denied { getopt } for pid=1767 comm="syz.1.432" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.193608][ T1771] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 101.236618][ T1771] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 101.375286][ T1792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.437'. [ 101.388620][ T1792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 101.637812][ T434] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.931940][ T434] usb 4-1: device descriptor read/64, error -71 [ 103.492139][ T1838] input: syz0 as /devices/virtual/input/input7 [ 103.811779][ T1775] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.061775][ T1775] usb 1-1: Using ep0 maxpacket: 16 [ 104.691989][ T1775] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.716403][ T1775] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.902071][ T1775] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.911645][ T1775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.920686][ T1775] usb 1-1: Product: syz [ 104.925807][ T1775] usb 1-1: Manufacturer: syz [ 104.930483][ T1775] usb 1-1: SerialNumber: syz [ 106.401391][ T1888] device syzkaller0 entered promiscuous mode [ 106.456803][ T1775] usb 1-1: USB disconnect, device number 2 [ 106.845555][ T1738] udevd[1738]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.950717][ T1916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.477'. [ 107.963676][ T1916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 111.236346][ T1972] device syzkaller0 entered promiscuous mode [ 111.266114][ T1973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 111.285947][ T1973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 111.354820][ T1973] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.362052][ T1973] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.888114][ T1980] netlink: 104 bytes leftover after parsing attributes in process `syz.4.494'. [ 113.657166][ T2011] input: syz0 as /devices/virtual/input/input8 [ 114.399734][ T2021] netlink: 104 bytes leftover after parsing attributes in process `syz.3.506'. [ 114.539740][ T409] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.686083][ T2026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 114.911819][ T409] usb 3-1: Using ep0 maxpacket: 16 [ 115.032021][ T409] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.113746][ T409] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.481860][ T409] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.511274][ T409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.541782][ T409] usb 3-1: Product: syz [ 115.545976][ T409] usb 3-1: Manufacturer: syz [ 115.550596][ T409] usb 3-1: SerialNumber: syz [ 115.717266][ T2051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 115.951915][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.152651][ T409] usb 3-1: USB disconnect, device number 2 [ 116.161794][ T307] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 116.331791][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 116.491909][ T26] usb 5-1: unable to get BOS descriptor or descriptor too short [ 116.541859][ T307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.552184][ T307] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 116.563714][ T307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.575082][ T307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.585142][ T307] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 116.618511][ T2064] fuse: Unknown parameter 'group_id00000000000000000000׃ %?Th<ɑ{KϖeQ' [ 116.751396][ T307] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.760782][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.769226][ T307] usb 1-1: SerialNumber: syz [ 117.221932][ T26] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 117.256482][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.266017][ T26] usb 5-1: Product: syz [ 117.270313][ T26] usb 5-1: Manufacturer: syz [ 117.278111][ T26] usb 5-1: SerialNumber: syz [ 117.460334][ T307] usb 1-1: USB disconnect, device number 3 [ 118.044706][ T26] usb 5-1: unit 0 not found! [ 118.133522][ T26] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 118.202123][ T26] usb 5-1: unit 0 not found! [ 118.909583][ T26] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 119.151886][ T26] usb 5-1: unit 0 not found! [ 119.155668][ T2110] fuse: Unknown parameter 'group_id00000000000000000000׃ %?Th<ɑ{KϖeQ' [ 119.263123][ T26] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 120.137070][ T2104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 120.154742][ T26] usb 5-1: USB disconnect, device number 3 [ 121.971963][ T26] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 122.411832][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.502103][ T26] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 122.814632][ T26] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.082033][ T26] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.244061][ T2162] fuse: Unknown parameter 'group_id00000000000000000000׃ %?Th<ɑ{KϖeQ' [ 123.301759][ T26] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 123.411888][ T26] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.471866][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 123.581779][ T26] usb 3-1: SerialNumber: syz [ 123.877730][ T26] usb 3-1: USB disconnect, device number 3 [ 125.718376][ T2199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'. [ 126.349149][ T30] audit: type=1400 audit(1777089907.768:200): avc: denied { mount } for pid=2212 comm="syz.4.560" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 126.350984][ T2213] overlayfs: unrecognized mount option "/" or missing value [ 126.431480][ T30] audit: type=1400 audit(1777089907.768:201): avc: denied { mounton } for pid=2212 comm="syz.4.560" path="/101/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 126.491560][ T2218] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.514150][ T2218] fuse: Unknown parameter 'group_id00000000000000000000׃ %?Th<ɑ{KϖeQ' [ 126.532697][ T30] audit: type=1400 audit(1777089907.898:202): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 129.456034][ T2255] SELinux: failed to load policy [ 131.688022][ T2306] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 131.700671][ T2306] SELinux: failed to load policy [ 132.097286][ T2326] device syzkaller0 entered promiscuous mode [ 132.175010][ T2329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 133.885912][ T2347] SELinux: failed to load policy [ 134.469695][ T2366] device syzkaller0 entered promiscuous mode [ 134.547434][ T2370] fuse: Bad value for 'fd' [ 136.080300][ T2394] SELinux: failed to load policy [ 136.278299][ T2405] device syzkaller0 entered promiscuous mode [ 138.348275][ T2451] device syzkaller0 entered promiscuous mode [ 138.411149][ T2446] SELinux: failed to load policy [ 138.613776][ T2460] netlink: 120 bytes leftover after parsing attributes in process `syz.3.631'. [ 138.624081][ T2460] input: syz0 as /devices/virtual/input/input9 [ 139.251751][ T434] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 139.491819][ T434] usb 4-1: Using ep0 maxpacket: 16 [ 139.611859][ T434] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 139.623927][ T434] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.644967][ T434] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.115487][ T2484] device syzkaller0 entered promiscuous mode [ 140.241826][ T434] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.258145][ T434] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.266622][ T434] usb 4-1: Product: syz [ 140.270890][ T434] usb 4-1: Manufacturer: syz [ 140.275712][ T434] usb 4-1: SerialNumber: syz [ 140.856592][ T30] audit: type=1400 audit(1777089922.278:203): avc: denied { bind } for pid=2459 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.857589][ T2460] tc_dump_action: action bad kind [ 141.108267][ T30] audit: type=1400 audit(1777089922.278:204): avc: denied { write } for pid=2459 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.145759][ T30] audit: type=1400 audit(1777089922.278:205): avc: denied { read } for pid=2459 comm="syz.3.631" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 141.314441][ T30] audit: type=1400 audit(1777089922.278:206): avc: denied { open } for pid=2459 comm="syz.3.631" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 141.951880][ T434] usb 4-1: 0:2 : does not exist [ 141.961971][ T434] usb 4-1: USB disconnect, device number 4 [ 142.713044][ T2523] SELinux: failed to load policy [ 142.891897][ T409] Bluetooth: hci0: command 0x1003 tx timeout [ 143.026125][ T826] Bluetooth: hci0: sending frame failed (-49) [ 145.377981][ T26] Bluetooth: hci0: command 0x1001 tx timeout [ 145.550253][ T826] Bluetooth: hci0: sending frame failed (-49) [ 146.302807][ T2565] SELinux: failed to load policy [ 147.807816][ T26] Bluetooth: hci0: command 0x1009 tx timeout [ 147.967384][ T2597] device syzkaller0 entered promiscuous mode [ 148.351848][ T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.831829][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.861772][ T26] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.886426][ T2609] SELinux: failed to load policy [ 148.892816][ T26] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 148.911802][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.934602][ T26] usb 4-1: config 0 descriptor?? [ 149.757221][ T2635] device syzkaller0 entered promiscuous mode [ 150.042310][ T2649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 151.021000][ T410] usb 4-1: USB disconnect, device number 5 [ 152.761074][ T2672] device syzkaller0 entered promiscuous mode [ 153.574248][ T2696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 153.597971][ T2696] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.605390][ T2696] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.791806][ T2743] netlink: 104 bytes leftover after parsing attributes in process `syz.4.709'. [ 156.815895][ T2745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 156.826274][ T2745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 156.839054][ T2744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.707'. [ 156.901859][ T434] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.999622][ T2747] netlink: 104 bytes leftover after parsing attributes in process `syz.0.710'. [ 157.291805][ T434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.321455][ T434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.363785][ T434] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 157.395538][ T434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.425402][ T434] usb 3-1: config 0 descriptor?? [ 157.725311][ T2754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 158.294760][ T434] usbhid 3-1:0.0: can't add hid device: -71 [ 158.332350][ T434] usbhid: probe of 3-1:0.0 failed with error -71 [ 158.629667][ T434] usb 3-1: USB disconnect, device number 4 [ 160.438261][ T2799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 160.447827][ T2799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.724'. [ 161.144820][ T2813] netlink: 104 bytes leftover after parsing attributes in process `syz.2.727'. [ 161.485468][ T2822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 161.873633][ T2832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 163.469666][ T2849] SELinux: failed to load policy [ 163.500103][ T2857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 163.509469][ T2857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.740'. [ 163.746374][ T2862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.738'. [ 164.565288][ T2880] netlink: 104 bytes leftover after parsing attributes in process `syz.3.745'. [ 165.354744][ T2894] fuse: Unknown parameter 'group_id00000000000000000000׃ %?Th<ɑ{KϖeQ' [ 165.417645][ T2898] input: syz0 as /devices/virtual/input/input10 [ 165.721739][ T434] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 165.961747][ T434] usb 5-1: Using ep0 maxpacket: 16 [ 166.081849][ T434] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.096535][ T434] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.281817][ T434] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.301298][ T434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.306812][ T2915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.758'. [ 166.311793][ T434] usb 5-1: Product: syz [ 166.334443][ T434] usb 5-1: Manufacturer: syz [ 166.344441][ T434] usb 5-1: SerialNumber: syz [ 166.671816][ T434] usb 5-1: cannot find UAC_HEADER [ 166.677104][ T434] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 166.694612][ T2927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 166.695832][ T434] usb 5-1: USB disconnect, device number 4 [ 167.144836][ T2931] fuse: Unknown parameter 'group_id00000000000000000000׃ %?Th<ɑ{KϖeQ' [ 168.360719][ T30] audit: type=1400 audit(1777089949.778:207): avc: denied { read append } for pid=2946 comm="syz.3.769" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 168.448557][ T30] audit: type=1400 audit(1777089949.818:208): avc: denied { open } for pid=2946 comm="syz.3.769" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 168.538679][ T30] audit: type=1400 audit(1777089949.818:209): avc: denied { ioctl } for pid=2946 comm="syz.3.769" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 168.570028][ T30] audit: type=1400 audit(1777089949.818:210): avc: denied { write } for pid=2946 comm="syz.3.769" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 168.826271][ T2965] input: syz0 as /devices/virtual/input/input11 [ 169.121739][ T307] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 169.309375][ T2969] netlink: 120 bytes leftover after parsing attributes in process `syz.1.777'. [ 169.320719][ T2969] input: syz0 as /devices/virtual/input/input12 [ 169.374463][ T2971] netlink: 120 bytes leftover after parsing attributes in process `syz.3.778'. [ 169.388152][ T2971] input: syz0 as /devices/virtual/input/input13 [ 169.411747][ T307] usb 3-1: Using ep0 maxpacket: 16 [ 169.551844][ T307] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.562416][ T307] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.593024][ T2978] netlink: 104 bytes leftover after parsing attributes in process `syz.0.780'. [ 169.671773][ T409] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 169.751747][ T310] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 169.831802][ T307] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.841003][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.849075][ T307] usb 3-1: Product: syz [ 169.853397][ T307] usb 3-1: Manufacturer: syz [ 169.858045][ T307] usb 3-1: SerialNumber: syz [ 169.941806][ T409] usb 4-1: Using ep0 maxpacket: 16 [ 169.991776][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 170.071852][ T409] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 170.080658][ T409] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.090812][ T409] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.121790][ T310] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 170.130532][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.140819][ T310] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.171823][ T307] usb 3-1: cannot find UAC_HEADER [ 170.176959][ T307] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 170.184825][ T307] usb 3-1: USB disconnect, device number 5 [ 170.261769][ T409] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.270887][ T409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.279355][ T409] usb 4-1: Product: syz [ 170.311826][ T310] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.326033][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.334145][ T409] usb 4-1: Manufacturer: syz [ 170.338750][ T409] usb 4-1: SerialNumber: syz [ 170.344448][ T310] usb 2-1: Product: syz [ 170.348623][ T310] usb 2-1: Manufacturer: syz [ 170.358244][ T310] usb 2-1: SerialNumber: syz [ 170.480537][ T2987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.783'. [ 170.492355][ T2987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.783'. [ 170.645777][ T2989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.782'. [ 170.664452][ T2969] tc_dump_action: action bad kind [ 170.669711][ T2971] tc_dump_action: action bad kind [ 170.956597][ T409] usb 4-1: 0:2 : does not exist [ 170.964827][ T409] usb 4-1: USB disconnect, device number 6 [ 171.281803][ T310] usb 2-1: 0:2 : does not exist [ 171.298790][ T1713] udevd[1713]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 171.317796][ T310] usb 2-1: USB disconnect, device number 4 [ 172.301927][ T30] audit: type=1400 audit(1777089953.698:211): avc: denied { read } for pid=3021 comm="syz.0.793" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 172.394528][ T30] audit: type=1400 audit(1777089953.698:212): avc: denied { open } for pid=3021 comm="syz.0.793" path="/148/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 172.494739][ T30] audit: type=1400 audit(1777089953.698:213): avc: denied { ioctl } for pid=3021 comm="syz.0.793" path="/148/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 172.602230][ T30] audit: type=1400 audit(1777089953.718:214): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 174.190486][ T3049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.797'. [ 174.811741][ T410] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 175.191724][ T410] usb 3-1: Using ep0 maxpacket: 32 [ 175.441795][ T410] usb 3-1: unable to get BOS descriptor or descriptor too short [ 176.268667][ T3092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 176.415929][ T3093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 176.425325][ T3093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.813'. [ 176.863409][ T410] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 176.882775][ T410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.905401][ T410] usb 3-1: Product: syz [ 176.915776][ T410] usb 3-1: Manufacturer: syz [ 176.922472][ T410] usb 3-1: SerialNumber: syz [ 177.777001][ T3117] input: syz0 as /devices/virtual/input/input14 [ 177.802095][ T410] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 177.842104][ T410] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 178.252089][ T410] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 178.277777][ T410] usb 3-1: USB disconnect, device number 6 [ 178.289860][ T3125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.821'. [ 178.308145][ T3127] netlink: 120 bytes leftover after parsing attributes in process `syz.0.824'. [ 178.345461][ T3127] input: syz0 as /devices/virtual/input/input15 [ 178.621783][ T433] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 179.091793][ T433] usb 1-1: Using ep0 maxpacket: 16 [ 179.212002][ T433] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 179.251238][ T433] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.398073][ T3141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 179.424312][ T433] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.599208][ T410] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 179.601896][ T433] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.627090][ T433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.645288][ T433] usb 1-1: Product: syz [ 179.655367][ T433] usb 1-1: Manufacturer: syz [ 179.665444][ T433] usb 1-1: SerialNumber: syz [ 179.746210][ T3145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 179.758267][ T3145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.829'. [ 179.917363][ T3127] tc_dump_action: action bad kind [ 180.091742][ T410] usb 3-1: Using ep0 maxpacket: 16 [ 180.211790][ T433] usb 1-1: 0:2 : does not exist [ 180.211794][ T410] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.211812][ T410] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.237678][ T433] usb 1-1: USB disconnect, device number 4 [ 180.421840][ T410] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.437578][ T410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.468251][ T410] usb 3-1: Product: syz [ 180.481137][ T410] usb 3-1: Manufacturer: syz [ 180.496866][ T410] usb 3-1: SerialNumber: syz [ 180.821810][ T410] usb 3-1: cannot find UAC_HEADER [ 180.827017][ T410] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 180.871848][ T410] usb 3-1: USB disconnect, device number 7 [ 182.461619][ T3201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.845'. [ 182.571893][ T30] audit: type=1400 audit(1777089963.968:215): avc: denied { mounton } for pid=3196 comm="syz.1.846" path="/168/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 182.607309][ T3201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 183.994204][ T3222] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 184.015813][ T3222] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 184.333069][ T3228] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 184.334566][ T3232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.851'. [ 184.386831][ T3228] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 185.616494][ T3248] fuse: Bad value for 'group_id' [ 189.214313][ T3292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.866'. [ 190.163095][ T3306] overlayfs: overlapping lowerdir path [ 193.336067][ T3348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.880'. [ 193.981821][ T3365] netlink: 'syz.3.889': attribute type 1 has an invalid length. [ 193.989584][ T3365] netlink: 'syz.3.889': attribute type 1 has an invalid length. [ 194.021714][ T3365] netlink: 9000 bytes leftover after parsing attributes in process `syz.3.889'. [ 194.042703][ T3363] SELinux: failed to load policy [ 194.049274][ T3366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.881'. [ 195.947611][ T3402] SELinux: failed to load policy [ 200.453488][ T3469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 200.670259][ T3480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.917'. [ 203.768787][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 204.332567][ T3531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.936'. [ 204.478517][ T3531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.936'. [ 206.884107][ T3553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.943'. [ 213.281719][ T307] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 213.289359][ T409] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 214.001732][ T307] usb 3-1: Using ep0 maxpacket: 32 [ 214.006940][ T409] usb 1-1: Using ep0 maxpacket: 16 [ 214.131783][ T409] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.152244][ T409] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.161865][ T307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 214.180519][ T3663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 214.351804][ T409] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.366964][ T409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.376103][ T409] usb 1-1: Product: syz [ 214.380678][ T409] usb 1-1: Manufacturer: syz [ 214.411785][ T307] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 214.429654][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.438989][ T409] usb 1-1: SerialNumber: syz [ 214.469647][ T307] usb 3-1: Product: syz [ 214.492973][ T307] usb 3-1: Manufacturer: syz [ 214.511737][ T307] usb 3-1: SerialNumber: syz [ 214.781771][ T409] usb 1-1: 0:2 : does not exist [ 214.823472][ T409] usb 1-1: USB disconnect, device number 5 [ 215.052798][ T307] usb 3-1: unit 0 not found! [ 215.144147][ T3688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.982'. [ 215.154674][ T3688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'. [ 216.792581][ T307] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 216.861892][ T307] usb 3-1: unit 0 not found! [ 216.881113][ T3694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 216.962181][ T307] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 217.012151][ T307] usb 3-1: unit 0 not found! [ 217.073425][ T307] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 217.098995][ T3672] udevd[3672]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 217.176195][ T307] usb 3-1: USB disconnect, device number 8 [ 217.978090][ T30] audit: type=1400 audit(1777089999.398:216): avc: denied { append } for pid=3714 comm="syz.4.992" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 218.472880][ T3724] incfs: Can't find or create .index dir in ./file0 [ 218.479717][ T3724] incfs: mount failed -1 [ 219.001214][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.996'. [ 219.012692][ T3743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.996'. [ 220.042734][ T3756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1001'. [ 220.088600][ T3756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 221.101445][ T410] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 221.267791][ T3771] fuse: Unknown parameter 'group_id00000000000000000000' [ 222.394995][ T410] usb 2-1: Using ep0 maxpacket: 32 [ 222.551833][ T410] usb 2-1: unable to get BOS descriptor or descriptor too short [ 222.601742][ T307] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 222.801828][ T410] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 222.826299][ T410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.841750][ T307] usb 1-1: Using ep0 maxpacket: 32 [ 222.869142][ T410] usb 2-1: Product: syz [ 223.012106][ T410] usb 2-1: Manufacturer: syz [ 223.028805][ T410] usb 2-1: SerialNumber: syz [ 224.200718][ T410] usb 2-1: can't set config #1, error -71 [ 224.351780][ T307] usb 1-1: unable to get BOS descriptor or descriptor too short [ 224.410857][ T410] usb 2-1: USB disconnect, device number 5 [ 224.751960][ T307] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 224.794114][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.836468][ T307] usb 1-1: Product: syz [ 224.858140][ T307] usb 1-1: Manufacturer: syz [ 224.869972][ T307] usb 1-1: SerialNumber: syz [ 225.471875][ T307] usb 1-1: unit 0 not found! [ 225.582176][ T307] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 225.632033][ T307] usb 1-1: unit 0 not found! [ 225.810932][ T3828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 225.882943][ T307] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 226.144482][ T307] usb 1-1: unit 0 not found! [ 226.242223][ T307] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 226.253061][ T307] usb 1-1: USB disconnect, device number 6 [ 227.690530][ T3860] overlayfs: missing 'lowerdir' [ 227.709447][ T3860] incfs: Can't find or create .index dir in ./file0 [ 227.731482][ T3860] incfs: mount failed -1 [ 229.159670][ T3880] overlayfs: unrecognized mount option "/" or missing value [ 229.173008][ T3880] incfs: Can't find or create .index dir in ./file0 [ 229.189872][ T3880] incfs: mount failed -1 [ 229.338028][ T3886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 230.991778][ T26] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 231.411770][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.422155][ T26] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.431499][ T26] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 231.440581][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.449353][ T26] usb 3-1: config 0 descriptor?? [ 231.922383][ T3940] fuse: Bad value for 'user_id' [ 234.029922][ T410] usb 3-1: USB disconnect, device number 9 [ 234.518798][ T4000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1074'. [ 235.409877][ T4021] fuse: Bad value for 'fd' [ 235.501284][ T4025] input: syz0 as /devices/virtual/input/input16 [ 235.776660][ T4032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 235.793949][ T310] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 236.031772][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 236.231850][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.242325][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.472358][ T310] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.492193][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.535175][ T310] usb 1-1: Product: syz [ 236.539401][ T310] usb 1-1: Manufacturer: syz [ 236.544198][ T310] usb 1-1: SerialNumber: syz [ 237.081835][ T310] usb 1-1: cannot find UAC_HEADER [ 237.087250][ T310] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 237.115455][ T310] usb 1-1: USB disconnect, device number 7 [ 237.219619][ T4051] fuse: Bad value for 'fd' [ 237.353318][ T4058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'. [ 237.370085][ T4058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1093'. [ 238.735669][ T4081] overlayfs: missing 'lowerdir' [ 238.908988][ T4083] overlayfs: overlapping lowerdir path [ 239.063146][ T4091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'. [ 239.078433][ T4091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1102'. [ 239.489815][ T4095] fuse: Bad value for 'fd' [ 239.662483][ T4098] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1104'. [ 241.765260][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 241.826094][ T4132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'. [ 241.857704][ T4132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1112'. [ 242.480540][ T4149] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1121'. [ 244.151473][ T4161] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 244.167647][ T4161] SELinux: failed to load policy [ 245.557615][ T4179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 245.572609][ T4179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1127'. [ 246.601531][ T4194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1131'. [ 246.639408][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.646653][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.232886][ T4208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 247.270732][ T4208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1136'. [ 247.908549][ T4211] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 247.924104][ T4211] SELinux: failed to load policy [ 249.686377][ T4217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 249.696415][ T4217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 249.742313][ T4225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1141'. [ 249.988399][ T4238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1145'. [ 251.457168][ T4246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'. [ 251.590497][ T30] audit: type=1400 audit(1777090033.008:217): avc: denied { append } for pid=4247 comm="syz.1.1147" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 251.718752][ T4256] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 251.728400][ T4256] SELinux: failed to load policy [ 255.277723][ T4301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1160'. [ 255.291981][ T4304] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 255.322750][ T4304] SELinux: failed to load policy [ 256.083020][ T4318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 256.279840][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 256.307403][ T4328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1166'. [ 257.707885][ T4348] input: syz0 as /devices/virtual/input/input17 [ 258.198701][ T26] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 258.371133][ T4367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1177'. [ 259.201789][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 259.212097][ T4371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1179'. [ 259.511748][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1178'. [ 259.601808][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.635755][ T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.742151][ T4382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'. [ 259.769431][ T4385] fuse: Bad value for 'group_id' [ 259.861785][ T26] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.879484][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.916282][ T26] usb 2-1: Product: syz [ 260.067382][ T26] usb 2-1: Manufacturer: syz [ 260.083796][ T26] usb 2-1: SerialNumber: syz [ 260.592039][ T26] usb 2-1: cannot find UAC_HEADER [ 260.613112][ T26] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 260.851406][ T26] usb 2-1: USB disconnect, device number 6 [ 260.985918][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'. [ 260.997415][ T4406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1187'. [ 261.547852][ T4410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'. [ 262.816954][ T4422] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 262.867147][ T4422] SELinux: failed to load policy [ 262.943093][ T4431] fuse: Bad value for 'group_id' [ 262.953622][ T4433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1196'. [ 265.310977][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1201'. [ 265.328024][ T4458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1201'. [ 265.863334][ T4475] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 265.874751][ T4475] SELinux: failed to load policy [ 266.751180][ T4482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 266.763086][ T4482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1208'. [ 266.932127][ T4479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1209'. [ 267.054413][ T4496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'. [ 267.888536][ T4496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1210'. [ 268.122865][ T4505] fuse: Unknown parameter 'use00000000000000000000' [ 268.489131][ T4513] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 268.498929][ T4513] SELinux: failed to load policy [ 269.271630][ T4520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1220'. [ 269.370523][ T4518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1218'. [ 269.388927][ T4518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1218'. [ 269.877730][ T4537] overlayfs: missing 'lowerdir' [ 270.101377][ T4543] overlayfs: overlapping lowerdir path [ 270.523956][ T4548] fuse: Bad value for 'fd' [ 270.949106][ T4554] __nla_validate_parse: 5 callbacks suppressed [ 270.949131][ T4554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1233'. [ 270.972624][ T4554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1233'. [ 271.638254][ T4564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 271.802832][ T4576] overlayfs: missing 'lowerdir' [ 273.224458][ T30] audit: type=1400 audit(1777090054.648:218): avc: denied { setopt } for pid=4580 comm="syz.1.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 273.278362][ T4588] SELinux: ebitmap: truncated map [ 273.391358][ T4588] SELinux: failed to load policy [ 273.499496][ T4594] fuse: Unknown parameter 'use00000000000000000000' [ 273.633190][ T4599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 273.678872][ T4599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1244'. [ 276.857827][ T4612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1249'. [ 277.094020][ T4617] device syzkaller0 entered promiscuous mode [ 277.103908][ T420] Bluetooth: hci0: Frame reassembly failed (-84) [ 277.133198][ T4621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1251'. [ 277.287951][ T4625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1252'. [ 277.322312][ T4625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'. [ 278.108023][ T4635] fuse: Unknown parameter 'user_i00000000000000000000' [ 279.287303][ T307] Bluetooth: hci0: command 0x1003 tx timeout [ 279.293655][ T826] Bluetooth: hci0: sending frame failed (-49) [ 281.542614][ T4659] overlayfs: unrecognized mount option "/" or missing value [ 281.616643][ T288] Bluetooth: hci0: command 0x1001 tx timeout [ 281.622791][ T826] Bluetooth: hci0: sending frame failed (-49) [ 282.761610][ T4678] fuse: Unknown parameter 'user_i00000000000000000000' [ 284.296128][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'. [ 284.340533][ T4692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1276'. [ 284.536679][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1274'. [ 284.547179][ T4688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1274'. [ 284.575341][ T410] Bluetooth: hci0: command 0x1009 tx timeout [ 284.601021][ T4695] device syzkaller0 entered promiscuous mode [ 285.728113][ T4713] fuse: Unknown parameter 'user_i00000000000000000000' [ 286.600602][ T4729] fuse: Bad value for 'group_id' [ 286.627876][ T4727] device syzkaller0 entered promiscuous mode [ 286.748706][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1289'. [ 287.092072][ T4749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1292'. [ 287.108118][ T4749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1292'. [ 290.452100][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1306'. [ 292.452024][ T4822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1314'. [ 293.037038][ T4836] device syzkaller0 entered promiscuous mode [ 293.666151][ T4851] SELinux: failed to load policy [ 294.079657][ T4856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1327'. [ 294.128579][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'. [ 294.387765][ T4869] SELinux: ebitmap: truncated map [ 294.399476][ T4869] SELinux: failed to load policy [ 295.357973][ T4882] device syzkaller0 entered promiscuous mode [ 298.699517][ T4922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1347'. [ 301.101073][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 301.207118][ T4954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1357'. [ 308.233293][ T5015] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 308.253115][ T5015] SELinux: failed to load policy [ 308.293694][ T5018] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 308.341682][ T5018] SELinux: failed to load policy [ 308.425088][ T420] Bluetooth: hci0: Frame reassembly failed (-84) [ 310.814375][ T307] Bluetooth: hci0: command 0x1003 tx timeout [ 310.821616][ T5035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'. [ 310.831567][ T826] Bluetooth: hci0: sending frame failed (-49) [ 314.526927][ T307] Bluetooth: hci0: command 0x1001 tx timeout [ 314.558720][ T5049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1384'. [ 314.608681][ T826] Bluetooth: hci0: sending frame failed (-49) [ 314.912719][ T5062] fuse: Unknown parameter 'user_id00000000000000000000' [ 316.108192][ T5075] fuse: Bad value for 'fd' [ 316.509185][ T5077] device syzkaller0 entered promiscuous mode [ 316.651673][ T307] Bluetooth: hci0: command 0x1009 tx timeout [ 317.894439][ T30] audit: type=1400 audit(1777090099.318:219): avc: denied { connect } for pid=5087 comm="syz.2.1397" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 318.147455][ T5100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 318.162861][ T5100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1399'. [ 318.261342][ T5101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1398'. [ 319.525792][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'. [ 323.930581][ T435] Bluetooth: hci0: Frame reassembly failed (-84) [ 324.381790][ T5142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1409'. [ 324.494790][ T5148] fuse: Unknown parameter '0x0000000000000004' [ 324.508125][ T5145] device syzkaller0 entered promiscuous mode [ 324.677736][ T5154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'. [ 324.711421][ T5154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1413'. [ 326.852388][ T26] Bluetooth: hci0: command 0x1003 tx timeout [ 326.858468][ T826] Bluetooth: hci0: sending frame failed (-49) [ 329.122655][ T410] Bluetooth: hci0: command 0x1001 tx timeout [ 329.128714][ T826] Bluetooth: hci0: sending frame failed (-49) [ 329.503779][ T5200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 329.519303][ T5200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1426'. [ 331.495349][ T5211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 331.596150][ T310] Bluetooth: hci0: command 0x1009 tx timeout [ 331.915647][ T5216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'. [ 331.938912][ T5216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1430'. [ 334.350675][ T5244] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1437'. [ 334.469730][ T5245] input: syz0 as /devices/virtual/input/input18 [ 334.781797][ T307] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 335.090121][ T5259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1440'. [ 335.104804][ T5259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1440'. [ 337.520192][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 337.601818][ T307] usb 2-1: device descriptor read/all, error -71 [ 339.109009][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 339.616731][ T5278] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1445'. [ 339.634702][ T5278] input: syz0 as /devices/virtual/input/input19 [ 339.754799][ T5285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1447'. [ 339.788981][ T5285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'. [ 340.189392][ T5288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1448'. [ 340.202340][ T310] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 340.451650][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 340.581700][ T310] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 340.590417][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.600516][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.891732][ T310] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.900855][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.909227][ T310] usb 1-1: Product: syz [ 340.913544][ T310] usb 1-1: Manufacturer: syz [ 340.918131][ T310] usb 1-1: SerialNumber: syz [ 340.993195][ T5308] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1454'. [ 341.003369][ T5308] input: syz0 as /devices/virtual/input/input20 [ 341.242005][ T5315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1455'. [ 341.531772][ T310] usb 1-1: 0:2 : does not exist [ 341.546190][ T310] usb 1-1: USB disconnect, device number 8 [ 341.581681][ T288] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 341.762086][ T5283] udevd[5283]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 341.865854][ T288] usb 4-1: Using ep0 maxpacket: 16 [ 342.971198][ T5334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1461'. [ 342.989353][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 343.167350][ T5327] SELinux: failed to load policy [ 343.231748][ T288] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 343.241260][ T288] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.271647][ T288] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.661690][ T288] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.671261][ T288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.680590][ T288] usb 4-1: Product: syz [ 343.745164][ T5355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'. [ 343.859893][ T5353] fuse: Unknown parameter 'group_id00000000000000000000׃ %?Th<ɑ{KϖeQ' [ 343.965443][ T288] usb 4-1: Manufacturer: syz [ 343.970084][ T288] usb 4-1: SerialNumber: syz [ 344.014501][ T5361] netlink: 'syz.2.1470': attribute type 1 has an invalid length. [ 344.022516][ T288] usb 4-1: can't set config #1, error -71 [ 344.032857][ T288] usb 4-1: USB disconnect, device number 7 [ 344.038730][ T5361] netlink: 'syz.2.1470': attribute type 1 has an invalid length. [ 344.047604][ T5361] netlink: 9000 bytes leftover after parsing attributes in process `syz.2.1470'. [ 344.239098][ T5366] overlayfs: overlapping lowerdir path [ 346.733434][ T5370] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1472'. [ 346.751298][ T5370] input: syz0 as /devices/virtual/input/input21 [ 347.141701][ T1775] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 348.432404][ T1775] usb 1-1: Using ep0 maxpacket: 16 [ 349.335255][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1476'. [ 349.374463][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'. [ 349.554361][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1477'. [ 349.661690][ T1775] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 349.670692][ T1775] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.771794][ T1775] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.005227][ T5401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1478'. [ 350.068750][ T1775] usb 1-1: string descriptor 0 read error: -71 [ 353.168832][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1481'. [ 353.203431][ T5405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1481'. [ 353.284197][ T1775] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.294011][ T1775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.325272][ T5407] fuse: Bad value for 'fd' [ 356.000593][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1482'. [ 356.034411][ T5414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1482'. [ 356.207117][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 356.225025][ T5418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1485'. [ 356.415618][ T1775] usb 1-1: can't set config #1, error -71 [ 356.421073][ T5422] netlink: 4956 bytes leftover after parsing attributes in process `syz.1.1488'. [ 356.422724][ T1775] usb 1-1: USB disconnect, device number 9 [ 358.012698][ T5434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 363.110941][ T5457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1496'. [ 363.121135][ T5457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1496'. [ 365.600498][ T5467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1498'. [ 365.611092][ T5463] overlayfs: overlapping lowerdir path [ 365.705641][ T5476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1499'. [ 368.337128][ T5497] netlink: 4956 bytes leftover after parsing attributes in process `syz.1.1507'. [ 368.623809][ T5509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1510'. [ 368.638633][ T5509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1510'. [ 369.527407][ T5501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1506'. [ 372.238251][ T5517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'. [ 372.307952][ T5526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1508'. [ 372.645760][ T5540] overlayfs: overlapping lowerdir path [ 374.198588][ T5557] fuse: Unknown parameter 'group_id00000000000000000000׃ %?Th<ɑ{KϖeQ' [ 376.245646][ T5567] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1526'. [ 376.258885][ T5567] input: syz0 as /devices/virtual/input/input22 [ 376.878520][ T5578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'. [ 376.896411][ T5578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1528'. [ 377.129617][ T310] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 377.263877][ T5585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 377.275534][ T5585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1529'. [ 377.631632][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 377.809287][ T5589] overlayfs: overlapping lowerdir path [ 379.292632][ T310] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 379.301348][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.311788][ T310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.351675][ T310] usb 4-1: string descriptor 0 read error: -71 [ 379.361191][ T310] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.380135][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.427121][ T310] usb 4-1: can't set config #1, error -71 [ 379.499562][ T310] usb 4-1: USB disconnect, device number 8 [ 379.556974][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'. [ 379.596458][ T5601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1533'. [ 382.027568][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1540'. [ 382.727073][ T5638] overlayfs: overlapping lowerdir path [ 384.176686][ T5640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'. [ 384.190155][ T5640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1542'. [ 384.483367][ T5650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 384.495019][ T5650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1545'. [ 387.393388][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'. [ 387.758607][ T5670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 387.778549][ T5670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1550'. [ 388.306372][ T5666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1549'. [ 389.956540][ T5695] overlayfs: overlapping lowerdir path [ 391.363473][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1563'. [ 391.383764][ T5719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1563'. [ 394.958682][ T5763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 395.351826][ T5773] SELinux: failed to load policy [ 399.563842][ T5820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 401.166822][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'. [ 403.642143][ T5868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53957 sclass=netlink_route_socket pid=5868 comm=syz.4.1601 [ 404.072546][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1602'. [ 404.092696][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1602'. [ 406.100339][ T5905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53957 sclass=netlink_route_socket pid=5905 comm=syz.4.1612 [ 407.253414][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1617'. [ 407.264865][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1617'. [ 412.116320][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1634'. [ 412.128608][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1634'. [ 414.731664][ T6025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1644'. [ 416.366937][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1649'. [ 416.378397][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1649'. [ 418.281644][ T6075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1657'. [ 419.976585][ T6102] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 420.113595][ T6102] SELinux: failed to load policy [ 420.541958][ T6113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1668'. [ 421.842241][ T6128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1671'. [ 427.976983][ T6234] input: syz0 as /devices/virtual/input/input23 [ 428.358760][ T1775] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 428.631614][ T1775] usb 3-1: Using ep0 maxpacket: 16 [ 428.761838][ T1775] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 428.783169][ T1775] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.848369][ T1775] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.150210][ T1775] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.159539][ T1775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.200513][ T1775] usb 3-1: Product: syz [ 429.204843][ T1775] usb 3-1: Manufacturer: syz [ 429.210550][ T1775] usb 3-1: SerialNumber: syz [ 429.774897][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1709'. [ 429.786491][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1709'. [ 429.803736][ T1775] usb 3-1: 0:2 : does not exist [ 429.876083][ T1775] usb 3-1: USB disconnect, device number 10 [ 430.112591][ T6270] fuse: Unknown parameter '0x0000000000000006' [ 431.896823][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1724'. [ 434.194913][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1724'. [ 434.507761][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1728'. [ 437.384512][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 437.425732][ T6370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1739'. [ 440.584593][ T6392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1745'. [ 441.819766][ T6416] overlayfs: missing 'lowerdir' [ 441.951500][ T6402] SELinux: failed to load policy [ 442.739189][ T6424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1752'. [ 443.036865][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1754'. [ 444.297774][ T6448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1759'. [ 446.876272][ T6471] overlayfs: missing 'lowerdir' [ 448.204806][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1769'. [ 448.217201][ T6486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1767'. [ 448.227692][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1767'. [ 449.301717][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1772'. [ 449.311189][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1772'. [ 449.942629][ T6506] general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] PREEMPT SMP KASAN [ 449.954502][ T6506] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 449.963045][ T6506] CPU: 1 PID: 6506 Comm: syz.4.1774 Not tainted syzkaller #0 [ 449.970423][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 449.980494][ T6506] RIP: 0010:sk_psock_verdict_data_ready+0x143/0x1d0 [ 449.987257][ T6506] Code: 24 50 48 c7 44 24 48 01 00 00 00 43 80 3c 2e 00 74 08 4c 89 ff e8 dd ec d0 fd 41 bc c0 00 00 00 4d 03 27 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 be ec d0 fd 48 8b 7c 24 18 48 8d [ 450.006875][ T6506] RSP: 0018:ffffc90000c377e0 EFLAGS: 00010206 [ 450.012970][ T6506] RAX: 0000000000000018 RBX: 1ffff92000186f00 RCX: 0000000000080000 [ 450.020950][ T6506] RDX: ffffc90003b95000 RSI: 0000000000003e32 RDI: 0000000000003e33 [ 450.028921][ T6506] RBP: ffffc90000c378b0 R08: ffffc90000c3783f R09: ffffc90000c37820 [ 450.036892][ T6506] R10: dffffc0000000000 R11: fffff52000186f08 R12: 00000000000000c0 [ 450.044862][ T6506] R13: dffffc0000000000 R14: 1ffff11025224184 R15: ffff888129120c20 [ 450.052836][ T6506] FS: 00007f5ce877f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 450.061766][ T6506] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.068348][ T6506] CR2: 0000001b2e919ff8 CR3: 000000011cef9000 CR4: 00000000003506a0 [ 450.076324][ T6506] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 450.084294][ T6506] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 450.092262][ T6506] Call Trace: [ 450.095537][ T6506] [ 450.098472][ T6506] ? sk_psock_start_verdict+0xc0/0xc0 [ 450.103847][ T6506] ? _raw_spin_lock+0x94/0xf0 [ 450.108643][ T6506] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 450.114447][ T6506] ? skb_queue_tail+0xcb/0xf0 [ 450.119147][ T6506] unix_stream_sendmsg+0x7d1/0xc90 [ 450.124379][ T6506] ? unix_stream_sendmsg+0x721/0xc90 [ 450.129662][ T6506] ? unix_show_fdinfo+0xa0/0xa0 [ 450.134536][ T6506] ? __asan_set_shadow_00+0xe/0x10 [ 450.139736][ T6506] ? slab_free_freelist_hook+0xc2/0x190 [ 450.145292][ T6506] ? security_socket_sendmsg+0x82/0xa0 [ 450.150817][ T6506] ? unix_show_fdinfo+0xa0/0xa0 [ 450.155670][ T6506] ____sys_sendmsg+0x5b7/0x8f0 [ 450.160483][ T6506] ? __sys_sendmsg_sock+0x40/0x40 [ 450.165504][ T6506] ? import_iovec+0x7c/0xb0 [ 450.170078][ T6506] ___sys_sendmsg+0x236/0x2e0 [ 450.174754][ T6506] ? __sys_sendmsg+0x280/0x280 [ 450.179518][ T6506] ? __fdget+0x1a1/0x230 [ 450.183824][ T6506] __x64_sys_sendmsg+0x206/0x2f0 [ 450.188762][ T6506] ? ___sys_sendmsg+0x2e0/0x2e0 [ 450.193609][ T6506] ? __kasan_check_write+0x14/0x20 [ 450.198719][ T6506] ? switch_fpu_return+0x15d/0x2c0 [ 450.203944][ T6506] x64_sys_call+0x4b/0x9a0 [ 450.208382][ T6506] do_syscall_64+0x4c/0xa0 [ 450.212822][ T6506] ? clear_bhb_loop+0x50/0xa0 [ 450.217530][ T6506] ? clear_bhb_loop+0x50/0xa0 [ 450.223593][ T6506] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 450.229577][ T6506] RIP: 0033:0x7f5ce9d24dd9 [ 450.234018][ T6506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.253621][ T6506] RSP: 002b:00007f5ce877f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.262038][ T6506] RAX: ffffffffffffffda RBX: 00007f5ce9f9dfa0 RCX: 00007f5ce9d24dd9 [ 450.270005][ T6506] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000005 [ 450.277977][ T6506] RBP: 00007f5ce9dbad69 R08: 0000000000000000 R09: 0000000000000000 [ 450.285943][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.293909][ T6506] R13: 00007f5ce9f9e038 R14: 00007f5ce9f9dfa0 R15: 00007ffc06c1dc78 [ 450.301887][ T6506] [ 450.304912][ T6506] Modules linked in: [ 450.318713][ T30] audit: type=1400 audit(1777090231.738:220): avc: denied { read } for pid=82 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 450.427321][ T30] audit: type=1400 audit(1777090231.738:221): avc: denied { search } for pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.523268][ T30] audit: type=1400 audit(1777090231.738:222): avc: denied { write } for pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.566380][ T6506] ---[ end trace d6eab1c32e8b8025 ]--- [ 450.572351][ T6506] RIP: 0010:sk_psock_verdict_data_ready+0x143/0x1d0 [ 450.579031][ T6506] Code: 24 50 48 c7 44 24 48 01 00 00 00 43 80 3c 2e 00 74 08 4c 89 ff e8 dd ec d0 fd 41 bc c0 00 00 00 4d 03 27 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 be ec d0 fd 48 8b 7c 24 18 48 8d [ 450.599812][ T6506] RSP: 0018:ffffc90000c377e0 EFLAGS: 00010206 [ 450.601950][ T30] audit: type=1400 audit(1777090231.738:223): avc: denied { add_name } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.606626][ T6506] RAX: 0000000000000018 RBX: 1ffff92000186f00 RCX: 0000000000080000 [ 450.634639][ T6506] RDX: ffffc90003b95000 RSI: 0000000000003e32 RDI: 0000000000003e33 [ 450.642958][ T6506] RBP: ffffc90000c378b0 R08: ffffc90000c3783f R09: ffffc90000c37820 [ 450.651018][ T6506] R10: dffffc0000000000 R11: fffff52000186f08 R12: 00000000000000c0 [ 450.651594][ T30] audit: type=1400 audit(1777090231.738:224): avc: denied { create } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 450.659217][ T6506] R13: dffffc0000000000 R14: 1ffff11025224184 R15: ffff888129120c20 [ 450.687557][ T6506] FS: 00007f5ce877f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 450.696659][ T6506] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.703454][ T6506] CR2: 00007ffcfc183d40 CR3: 000000011cef9000 CR4: 00000000003506a0 [ 450.711471][ T6506] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 450.711591][ T30] audit: type=1400 audit(1777090231.738:225): avc: denied { append open } for pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 450.719689][ T6506] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 450.750534][ T6506] Kernel panic - not syncing: Fatal exception [ 450.756974][ T6506] Kernel Offset: disabled [ 450.761287][ T6506] Rebooting in 86400 seconds..