last executing test programs: 40.590819636s ago: executing program 4 (id=1047): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x0, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, 0x0, 0x25, 0x0, @val=@target_btf_id=r5}, 0x40) r6 = socket(0x1, 0x2, 0x0) ioctl$TCSBRKP(r6, 0x8902, 0x1000000000000) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}}}, 0x24}}, 0x20000010) syz_open_procfs$userns(r2, &(0x7f0000000380)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 39.695170199s ago: executing program 4 (id=1050): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x9, 0x2002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdir(0x0, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073117a000000000085ffeb0000000000950000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000001680)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x24, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) 36.644316366s ago: executing program 4 (id=1060): socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x4822, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000"], 0x4c}}, 0x0) 36.59984346s ago: executing program 4 (id=1061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) pipe2(0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000804000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x75, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) 33.076857586s ago: executing program 4 (id=1073): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}}}, 0x24}}, 0x20000010) syz_open_procfs$userns(r1, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 32.176304299s ago: executing program 4 (id=1076): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1208, &(0x7f0000001540)="$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") r2 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) sendfile(r2, r2, 0x0, 0x100000000) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) 20.696105421s ago: executing program 3 (id=1103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) dup2(r1, r1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) setpriority(0x3, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1358, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xc}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x1ac, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x800}, @TCA_FLOW_EMATCHES={0x198, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1b95}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x0, 0x0, 0x0, {{}, {0x0, 0x1, 0x0, 'q'}}}, @TCF_EM_CANID={0x14}]}, @TCA_EMATCH_TREE_LIST={0x160, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18}, @TCF_EM_NBYTE={0x14, 0x0, 0x0, 0x0, {{}, {0x0, 0x1, 0x0, "bd"}}}, @TCF_EM_IPSET={0x10}, @TCF_EM_IPT={0xc4, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_DATA={0x44, 0x5, "e93960abc8e8b9b1c81a41853875755a9770e081d310740b960c37033ba39d472cc4af7b9bb85a8913424a78440f5f73db6d47b8a6d86b99ee42a383110af408"}, @TCA_EM_IPT_MATCH_DATA={0x5f, 0x5, "a76be08d91c8b97ef380ae3db16a20b3132c296f57657e232f80868d017fb69afa39f98c1606993a10b0391407bfaa93840b27d3c07b16d0667b6e8fdd5ee8b3e823d5466a3dae5c0ba3ee56080486af6ee09566fd175540c2121f"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_CMP={0x18, 0x0, 0x0, 0x0, {{}, {0x3}}}, @TCF_EM_IPT={0x44, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}, @TCA_FLOW_RSHIFT={0x8}]}}, @filter_kind_options=@f_fw={{0x7}, {0x116c, 0x2, [@TCA_FW_POLICE={0x1088, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x11, 0x4, 0xde, 0x9, 0x6, {0x0, 0x1, 0xf25f, 0x432, 0x9, 0x5}, {0x6, 0x1, 0x10, 0xfffa, 0x4, 0xdb}, 0x0, 0xfffff6fb, 0x800}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0x1, 0x1, 0x7, 0x3001, 0x6, 0x5, 0x0, 0xffffffd3, 0x6, 0xc0, 0x8cc, 0x8, 0x0, 0x10001, 0x8, 0x7fffffff, 0x4, 0xffffff38, 0x6, 0x80000000, 0xffff7dd3, 0x8, 0x1, 0x8001, 0x5, 0x8c21, 0x7, 0x40, 0xa0ad, 0x0, 0x9, 0x8, 0x400, 0x5, 0xff8e3394, 0x81, 0x0, 0x2, 0x2, 0x0, 0x0, 0x6, 0x10, 0x0, 0x6, 0x5, 0x6063, 0xf7, 0xb0, 0x9, 0x7ff, 0x8, 0x6, 0x0, 0x10001, 0x7, 0x80, 0x4, 0x3, 0x8, 0x3, 0x4, 0x2, 0x6, 0x80000001, 0x1, 0x40, 0x10, 0x1ff, 0x6, 0x7, 0x0, 0x5, 0x8, 0x40, 0x5, 0x1, 0x80000, 0x3, 0xffffffff, 0xd, 0x391c, 0x3f95646, 0x89, 0x4, 0x36cd2556, 0x8, 0xfffffd08, 0x0, 0x3, 0x4, 0x5, 0x7d, 0x0, 0xfffffffa, 0xab, 0x400, 0x0, 0x80000000, 0x4, 0x80, 0xc, 0x10, 0x6, 0xccb5, 0x8, 0x9, 0xfffff001, 0xe0, 0xffffffff, 0x8, 0x2196, 0x6, 0xe, 0x8, 0x3, 0x81, 0x6, 0x5041, 0x40, 0x34159518, 0x5, 0xfffff15b, 0x10, 0x1, 0xbe, 0x1, 0xee77, 0x6, 0x9, 0x8001, 0xd, 0x6, 0xffffff27, 0x6, 0x7, 0x62, 0x9, 0x4, 0x0, 0x101, 0x9, 0x6, 0x1000, 0x1, 0x5, 0x7, 0x779, 0xffffffff, 0x6, 0xf809, 0x7, 0xc, 0x9, 0x722, 0x6c, 0x5, 0xe, 0x80000001, 0x200, 0x2, 0x0, 0x7, 0x5, 0x2e, 0x233, 0x6, 0x5, 0x0, 0x401, 0x7fffffff, 0x0, 0x0, 0x4, 0x5, 0x9, 0x200, 0x1, 0xf3, 0x7ff, 0x7, 0x5, 0x1ff, 0xf658, 0x100, 0x4, 0x0, 0x200, 0x9, 0xffc00000, 0x3ff, 0x9, 0x2, 0x2, 0xf, 0xdd, 0x2, 0x7ff, 0x68b3, 0x5d3, 0x0, 0x0, 0x2, 0x77bc, 0x2, 0x4, 0xc, 0x9, 0x2, 0x1, 0x7f, 0x3, 0x5, 0x8, 0x4200, 0x3, 0xff, 0x80000001, 0x2, 0x9, 0x1, 0x7fffffff, 0x6, 0x4, 0x47, 0x7fffffff, 0x1ff, 0x7, 0xc, 0x4, 0x80000001, 0x9, 0x4b6d, 0x8, 0x4, 0x8, 0xe, 0x9, 0x7, 0xf8d, 0x65e3, 0x0, 0x7fffffff, 0x2, 0x8cb, 0x4, 0x6, 0x8, 0x1, 0x4, 0x8, 0x80, 0x10001, 0x40]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd26, 0x4, 0xa082, 0x6, 0x2, 0x7, 0x0, 0xa, 0xa, 0x7, 0x4, 0x40, 0x8c48, 0x4, 0x9922, 0x7, 0x5e, 0x7, 0x2, 0x8, 0x6, 0x4, 0xcec, 0x4, 0x3, 0x8001, 0xf697, 0x3, 0x4, 0x0, 0x40, 0x5, 0x23a, 0x7, 0x7ff, 0x3ff, 0xf0, 0x2, 0x9, 0x9, 0x8001, 0x2, 0x5, 0x9, 0x6, 0x0, 0x1, 0xffffffff, 0x9, 0x1, 0x8, 0x3e51d698, 0x7fff, 0x3, 0x3, 0x9, 0x1, 0x1000, 0x100, 0x5, 0x612, 0x5, 0xb, 0x1, 0x8, 0x0, 0x6, 0x2, 0x200, 0x54d, 0x1542, 0x4, 0x7, 0x1, 0x2f6e, 0x7, 0x0, 0x1, 0xc23, 0x1000, 0x9, 0x10000, 0x1, 0x7, 0x81, 0x3, 0x3, 0x0, 0xb, 0x3, 0x4, 0x10001, 0x5, 0x1000, 0x0, 0x11ed, 0x0, 0x6, 0x3, 0x2, 0x81, 0x4, 0x5ebd, 0xffff, 0x8001, 0x7ff, 0xa, 0xffffc194, 0x10, 0x1b, 0xb2d0, 0x28, 0x35d, 0x5, 0x7987, 0x80, 0x1, 0x5, 0x9, 0x0, 0x3ff, 0x7f, 0x4, 0x10000, 0x800, 0x40, 0x9, 0x7, 0x1, 0x9611, 0x7, 0xfffffff1, 0x2, 0x6, 0x4, 0x8, 0x3, 0x6, 0x10001, 0xf, 0x4, 0xfff, 0xa19, 0x8, 0x1, 0x9, 0xf5, 0x5, 0x3, 0x4000, 0x7, 0x10001, 0x2, 0x8, 0x2, 0x0, 0x81, 0x7, 0x20000000, 0x8ed, 0x5, 0xd, 0x10, 0x3, 0x8, 0x7fffffff, 0x6, 0x7, 0x2, 0x6, 0x5, 0xfffffffd, 0x9, 0x2, 0x200, 0xfff, 0x80, 0x5, 0x3131, 0xea03, 0x3f, 0xfffffffe, 0x6d5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x3000, 0x14, 0x0, 0x2, 0x3, 0x8, 0x0, 0x89, 0x1, 0x0, 0x9, 0x7f, 0x0, 0x6, 0x3, 0x9, 0xfffffffe, 0x8000, 0x2, 0x5, 0x4, 0x8, 0x3, 0x9, 0x6, 0x39, 0x3, 0x7, 0x4, 0x2ee, 0x46, 0x4, 0x8, 0x5, 0x7, 0xa, 0x6, 0x7, 0x9, 0x2, 0x7, 0x3, 0x8, 0x9, 0xfff, 0xd, 0x9f5feb2, 0xcf, 0x80, 0x4, 0x84ee, 0x9, 0x7, 0xffffffff, 0x40, 0x3, 0xbee9, 0x6, 0x7, 0x2, 0x0, 0x8, 0x91, 0x3, 0xfffffffa, 0x6, 0x3, 0x10001]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x103}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x6, 0x10, 0x15, 0x0, 0x81, 0x8, 0x7ff, 0x6, 0x30, 0x6, 0x4, 0x3, 0xc1ae, 0xffffffff, 0x1, 0x8, 0x3, 0x9, 0xf664, 0x6, 0x1ff, 0xd6, 0x6edcde1f, 0xe7, 0x26, 0x886, 0xfff, 0x6, 0xcd3e, 0xb5, 0x664, 0x6, 0x0, 0x8001, 0x7f, 0xb0, 0x3, 0xaab2, 0x4, 0x4, 0x0, 0xfffffeff, 0x9, 0x98b, 0x9, 0xc, 0xae, 0x6, 0x0, 0x6, 0xfffffff8, 0x4, 0x5, 0x9, 0x8, 0x132e, 0x5, 0x1, 0x0, 0x1ff, 0x3, 0x1, 0xdc, 0x9, 0x401, 0xcb8, 0xe8f, 0x8, 0x8000, 0xd, 0x3, 0x4, 0x1, 0x7fff, 0x401, 0xfffffff8, 0x8b94, 0xcd9b, 0x5, 0x3, 0xff, 0x80000000, 0x6, 0x3, 0xa, 0x10, 0xfffffff4, 0xffff, 0x3, 0x8452, 0x5, 0x8, 0x7fffffff, 0x400, 0x1ff, 0x4, 0x3, 0x2, 0x5, 0x6, 0x16, 0x1, 0xca4f, 0x2b4e, 0x8000, 0xd8, 0x6, 0x9, 0x4, 0xfffffff8, 0x26645d84, 0x1, 0x2, 0x3, 0x5, 0x1, 0x4, 0x1, 0x101, 0x3, 0xeba8, 0xffff181f, 0x6, 0x6, 0x8, 0x2, 0x3, 0x7, 0x3, 0x8, 0x5, 0x8, 0x6, 0x1ff, 0xf72b, 0x7ff, 0x4, 0x8000, 0xff, 0xc5, 0xd9, 0xc7f, 0x8e, 0x3, 0x2, 0x10000, 0x4, 0x0, 0x10000, 0xfffffffa, 0xe, 0xb2a7, 0x1, 0x6, 0x7, 0x101, 0x0, 0x2, 0x3, 0xfffffffb, 0xbf8, 0x5, 0x101, 0x8, 0x1ec, 0x2, 0x5, 0x5, 0x9, 0x604, 0x1, 0x2, 0x7f, 0xb34, 0x10, 0x1, 0x3, 0x1, 0x2, 0x5, 0x80000000, 0x9, 0x2f2d, 0x9, 0x6, 0x7, 0x8000, 0xfffffff7, 0x3, 0x7, 0x9, 0x4f77, 0x5, 0x0, 0x52, 0x8, 0x5, 0x7f, 0x9, 0x9, 0x2, 0x1, 0xffffffc0, 0x101, 0x1, 0xffff04cc, 0xff, 0x63, 0x9, 0x1f000, 0xc, 0x0, 0x200, 0x93, 0x189d, 0x2e0, 0x9, 0x2, 0x7fffffff, 0x80, 0x8000, 0xffffffff, 0x8, 0xd, 0x0, 0xc8c0, 0x5, 0xd, 0x10001, 0x2, 0xfff, 0x4, 0x9, 0x2, 0xbecc, 0x3, 0x5, 0x8, 0x5, 0x2, 0xa987, 0x10, 0x3, 0x400, 0x2, 0xff, 0x80000000, 0x8, 0x0, 0x0, 0x9, 0x80000000, 0xce, 0x0, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0x401, 0x800, 0x800, 0x7658, 0x8, 0x1, 0x141, 0x8, 0x8, 0x9, 0x6, 0x4, 0x9b87, 0x1200, 0xe9fe, 0x8ff, 0x0, 0x895, 0xfd5b, 0x3, 0x10, 0x8, 0x0, 0x7f, 0xe, 0x9, 0xf0, 0x3ff, 0x8, 0x5, 0x6, 0x2, 0x800, 0xffffffff, 0x400, 0x10, 0x1, 0x40, 0xffff7fff, 0x3, 0xf, 0x9, 0x80000000, 0x10, 0x0, 0x3, 0x1, 0x1, 0x400, 0x7, 0x59c, 0x9, 0xec, 0x2, 0xfffffff7, 0x7, 0x0, 0x40, 0x8, 0x3, 0x7fff, 0x65, 0x0, 0x0, 0x10001, 0x0, 0x4, 0x0, 0xffffffff, 0x537, 0x6, 0x80000000, 0x2, 0x47f, 0x8, 0x7fffffff, 0x9, 0x6, 0xed, 0x291, 0x9, 0x0, 0x4, 0xa, 0x8, 0x0, 0x1bf, 0x101, 0x1, 0x7, 0x3ff, 0x5, 0x0, 0x6544, 0x4, 0x9, 0x4, 0x6, 0xa, 0x5, 0x1, 0x74, 0x4, 0x2, 0x10, 0x8, 0x10001, 0xffffffdb, 0x1ff, 0x2, 0x1, 0x3, 0xb542, 0x9, 0x9, 0x7fff, 0x0, 0x9, 0x1, 0x4, 0x4, 0x27d93884, 0x5, 0x101, 0x3, 0x4, 0x3, 0x8, 0xb1f7, 0x5, 0xfffff44d, 0x7, 0x9, 0x200, 0xa, 0xb, 0x5, 0x3, 0xf, 0x7f, 0x18000000, 0x7, 0x7f, 0x6, 0x6, 0x7f, 0x8001, 0xfffffffd, 0x6, 0x401, 0xfff, 0x9, 0x4, 0x2, 0x8000, 0x3, 0xca, 0x41efa423, 0x18, 0x7, 0x6, 0x6, 0x2, 0xfff, 0x1ff, 0xda8, 0x20000, 0x3, 0x3, 0x0, 0x10000, 0x0, 0xfffffffe, 0x7, 0x8, 0x7f44, 0xfffffffa, 0x200, 0x9, 0xfffffffb, 0x5, 0x8, 0x10000000, 0xb1, 0x8, 0x3, 0x3, 0x7, 0x7, 0x3, 0x8346, 0x10000, 0x7, 0x46c, 0x0, 0x0, 0x0, 0x1, 0x80000001, 0x80000001, 0x6, 0x0, 0x2, 0x3, 0x1, 0x1000, 0x210, 0x8001, 0x101, 0x0, 0x0, 0x3, 0x9a70, 0x81, 0x5, 0xd, 0x7546, 0x5, 0x2, 0x4c1c, 0x4, 0x8000, 0x10001, 0xfffffff7, 0x4, 0x8, 0x4, 0x6, 0x9, 0xfffffff9, 0xe2a8, 0x8, 0x6, 0x401, 0x2, 0xaf, 0xfffffffe, 0x0, 0x0, 0x1000, 0x4, 0xfffffff5, 0x6, 0x3, 0xb8a, 0x10001, 0xfbd8, 0x3, 0x2f9, 0x79cf, 0xe, 0xe, 0x8, 0x3]}]}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gretap0\x00'}, @TCA_FW_ACT={0xc4, 0x4, [@m_sample={0xc0, 0xc, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0x2, 0x8000, 0x9}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x9, 0x4, 0x1, 0xfffffff9}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x21}]}, {0x54, 0x6, "9d2e645d303b05e4ef070a5fc69851d9fd79322f8faae2edfc775d36198d1b65d9af1ed2e1b05e7085498a1c437d52fde39865cc7fbf0516e863cee36f40719ac9e7c221d35698de4a9632559bda031f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}]}]}}]}, 0x1358}}, 0x4008080) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf30}, {&(0x7f00000007c0)=""/154, 0x60}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x9dce, 0x10}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 19.182439074s ago: executing program 3 (id=1107): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) dup2(r1, r1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) setpriority(0x3, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1358, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xc}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x1ac, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x800}, @TCA_FLOW_EMATCHES={0x198, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1b95}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x0, 0x0, 0x0, {{}, {0x0, 0x1, 0x0, 'q'}}}, @TCF_EM_CANID={0x14}]}, @TCA_EMATCH_TREE_LIST={0x160, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18}, @TCF_EM_NBYTE={0x14, 0x0, 0x0, 0x0, {{}, {0x0, 0x1, 0x0, "bd"}}}, @TCF_EM_IPSET={0x10}, @TCF_EM_IPT={0xc4, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_DATA={0x44, 0x5, "e93960abc8e8b9b1c81a41853875755a9770e081d310740b960c37033ba39d472cc4af7b9bb85a8913424a78440f5f73db6d47b8a6d86b99ee42a383110af408"}, @TCA_EM_IPT_MATCH_DATA={0x5f, 0x5, "a76be08d91c8b97ef380ae3db16a20b3132c296f57657e232f80868d017fb69afa39f98c1606993a10b0391407bfaa93840b27d3c07b16d0667b6e8fdd5ee8b3e823d5466a3dae5c0ba3ee56080486af6ee09566fd175540c2121f"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_CMP={0x18, 0x0, 0x0, 0x0, {{}, {0x3}}}, @TCF_EM_IPT={0x44, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}, @TCA_FLOW_RSHIFT={0x8}]}}, @filter_kind_options=@f_fw={{0x7}, {0x116c, 0x2, [@TCA_FW_POLICE={0x1088, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x11, 0x4, 0xde, 0x9, 0x6, {0x0, 0x1, 0xf25f, 0x432, 0x9, 0x5}, {0x6, 0x1, 0x10, 0xfffa, 0x4, 0xdb}, 0x0, 0xfffff6fb, 0x800}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0x1, 0x1, 0x7, 0x3001, 0x6, 0x5, 0x0, 0xffffffd3, 0x6, 0xc0, 0x8cc, 0x8, 0x0, 0x10001, 0x8, 0x7fffffff, 0x4, 0xffffff38, 0x6, 0x80000000, 0xffff7dd3, 0x8, 0x1, 0x8001, 0x5, 0x8c21, 0x7, 0x40, 0xa0ad, 0x0, 0x9, 0x8, 0x400, 0x5, 0xff8e3394, 0x81, 0x0, 0x2, 0x2, 0x0, 0x0, 0x6, 0x10, 0x0, 0x6, 0x5, 0x6063, 0xf7, 0xb0, 0x9, 0x7ff, 0x8, 0x6, 0x0, 0x10001, 0x7, 0x80, 0x4, 0x3, 0x8, 0x3, 0x4, 0x2, 0x6, 0x80000001, 0x1, 0x40, 0x10, 0x1ff, 0x6, 0x7, 0x0, 0x5, 0x8, 0x40, 0x5, 0x1, 0x80000, 0x3, 0xffffffff, 0xd, 0x391c, 0x3f95646, 0x89, 0x4, 0x36cd2556, 0x8, 0xfffffd08, 0x0, 0x3, 0x4, 0x5, 0x7d, 0x0, 0xfffffffa, 0xab, 0x400, 0x0, 0x80000000, 0x4, 0x80, 0xc, 0x10, 0x6, 0xccb5, 0x8, 0x9, 0xfffff001, 0xe0, 0xffffffff, 0x8, 0x2196, 0x6, 0xe, 0x8, 0x3, 0x81, 0x6, 0x5041, 0x40, 0x34159518, 0x5, 0xfffff15b, 0x10, 0x1, 0xbe, 0x1, 0xee77, 0x6, 0x9, 0x8001, 0xd, 0x6, 0xffffff27, 0x6, 0x7, 0x62, 0x9, 0x4, 0x0, 0x101, 0x9, 0x6, 0x1000, 0x1, 0x5, 0x7, 0x779, 0xffffffff, 0x6, 0xf809, 0x7, 0xc, 0x9, 0x722, 0x6c, 0x5, 0xe, 0x80000001, 0x200, 0x2, 0x0, 0x7, 0x5, 0x2e, 0x233, 0x6, 0x5, 0x0, 0x401, 0x7fffffff, 0x0, 0x0, 0x4, 0x5, 0x9, 0x200, 0x1, 0xf3, 0x7ff, 0x7, 0x5, 0x1ff, 0xf658, 0x100, 0x4, 0x0, 0x200, 0x9, 0xffc00000, 0x3ff, 0x9, 0x2, 0x2, 0xf, 0xdd, 0x2, 0x7ff, 0x68b3, 0x5d3, 0x0, 0x0, 0x2, 0x77bc, 0x2, 0x4, 0xc, 0x9, 0x2, 0x1, 0x7f, 0x3, 0x5, 0x8, 0x4200, 0x3, 0xff, 0x80000001, 0x2, 0x9, 0x1, 0x7fffffff, 0x6, 0x4, 0x47, 0x7fffffff, 0x1ff, 0x7, 0xc, 0x4, 0x80000001, 0x9, 0x4b6d, 0x8, 0x4, 0x8, 0xe, 0x9, 0x7, 0xf8d, 0x65e3, 0x0, 0x7fffffff, 0x2, 0x8cb, 0x4, 0x6, 0x8, 0x1, 0x4, 0x8, 0x80, 0x10001, 0x40]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd26, 0x4, 0xa082, 0x6, 0x2, 0x7, 0x0, 0xa, 0xa, 0x7, 0x4, 0x40, 0x8c48, 0x4, 0x9922, 0x7, 0x5e, 0x7, 0x2, 0x8, 0x6, 0x4, 0xcec, 0x4, 0x3, 0x8001, 0xf697, 0x3, 0x4, 0x0, 0x40, 0x5, 0x23a, 0x7, 0x7ff, 0x3ff, 0xf0, 0x2, 0x9, 0x9, 0x8001, 0x2, 0x5, 0x9, 0x6, 0x0, 0x1, 0xffffffff, 0x9, 0x1, 0x8, 0x3e51d698, 0x7fff, 0x3, 0x3, 0x9, 0x1, 0x1000, 0x100, 0x5, 0x612, 0x5, 0xb, 0x1, 0x8, 0x0, 0x6, 0x2, 0x200, 0x54d, 0x1542, 0x4, 0x7, 0x1, 0x2f6e, 0x7, 0x0, 0x1, 0xc23, 0x1000, 0x9, 0x10000, 0x1, 0x7, 0x81, 0x3, 0x3, 0x0, 0xb, 0x3, 0x4, 0x10001, 0x5, 0x1000, 0x0, 0x11ed, 0x0, 0x6, 0x3, 0x2, 0x81, 0x4, 0x5ebd, 0xffff, 0x8001, 0x7ff, 0xa, 0xffffc194, 0x10, 0x1b, 0xb2d0, 0x28, 0x35d, 0x5, 0x7987, 0x80, 0x1, 0x5, 0x9, 0x0, 0x3ff, 0x7f, 0x4, 0x10000, 0x800, 0x40, 0x9, 0x7, 0x1, 0x9611, 0x7, 0xfffffff1, 0x2, 0x6, 0x4, 0x8, 0x3, 0x6, 0x10001, 0xf, 0x4, 0xfff, 0xa19, 0x8, 0x1, 0x9, 0xf5, 0x5, 0x3, 0x4000, 0x7, 0x10001, 0x2, 0x8, 0x2, 0x0, 0x81, 0x7, 0x20000000, 0x8ed, 0x5, 0xd, 0x10, 0x3, 0x8, 0x7fffffff, 0x6, 0x7, 0x2, 0x6, 0x5, 0xfffffffd, 0x9, 0x2, 0x200, 0xfff, 0x80, 0x5, 0x3131, 0xea03, 0x3f, 0xfffffffe, 0x6d5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x3000, 0x14, 0x0, 0x2, 0x3, 0x8, 0x0, 0x89, 0x1, 0x0, 0x9, 0x7f, 0x0, 0x6, 0x3, 0x9, 0xfffffffe, 0x8000, 0x2, 0x5, 0x4, 0x8, 0x3, 0x9, 0x6, 0x39, 0x3, 0x7, 0x4, 0x2ee, 0x46, 0x4, 0x8, 0x5, 0x7, 0xa, 0x6, 0x7, 0x9, 0x2, 0x7, 0x3, 0x8, 0x9, 0xfff, 0xd, 0x9f5feb2, 0xcf, 0x80, 0x4, 0x84ee, 0x9, 0x7, 0xffffffff, 0x40, 0x3, 0xbee9, 0x6, 0x7, 0x2, 0x0, 0x8, 0x91, 0x3, 0xfffffffa, 0x6, 0x3, 0x10001]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x103}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x6, 0x10, 0x15, 0x0, 0x81, 0x8, 0x7ff, 0x6, 0x30, 0x6, 0x4, 0x3, 0xc1ae, 0xffffffff, 0x1, 0x8, 0x3, 0x9, 0xf664, 0x6, 0x1ff, 0xd6, 0x6edcde1f, 0xe7, 0x26, 0x886, 0xfff, 0x6, 0xcd3e, 0xb5, 0x664, 0x6, 0x0, 0x8001, 0x7f, 0xb0, 0x3, 0xaab2, 0x4, 0x4, 0x0, 0xfffffeff, 0x9, 0x98b, 0x9, 0xc, 0xae, 0x6, 0x0, 0x6, 0xfffffff8, 0x4, 0x5, 0x9, 0x8, 0x132e, 0x5, 0x1, 0x0, 0x1ff, 0x3, 0x1, 0xdc, 0x9, 0x401, 0xcb8, 0xe8f, 0x8, 0x8000, 0xd, 0x3, 0x4, 0x1, 0x7fff, 0x401, 0xfffffff8, 0x8b94, 0xcd9b, 0x5, 0x3, 0xff, 0x80000000, 0x6, 0x3, 0xa, 0x10, 0xfffffff4, 0xffff, 0x3, 0x8452, 0x5, 0x8, 0x7fffffff, 0x400, 0x1ff, 0x4, 0x3, 0x2, 0x5, 0x6, 0x16, 0x1, 0xca4f, 0x2b4e, 0x8000, 0xd8, 0x6, 0x9, 0x4, 0xfffffff8, 0x26645d84, 0x1, 0x2, 0x3, 0x5, 0x1, 0x4, 0x1, 0x101, 0x3, 0xeba8, 0xffff181f, 0x6, 0x6, 0x8, 0x2, 0x3, 0x7, 0x3, 0x8, 0x5, 0x8, 0x6, 0x1ff, 0xf72b, 0x7ff, 0x4, 0x8000, 0xff, 0xc5, 0xd9, 0xc7f, 0x8e, 0x3, 0x2, 0x10000, 0x4, 0x0, 0x10000, 0xfffffffa, 0xe, 0xb2a7, 0x1, 0x6, 0x7, 0x101, 0x0, 0x2, 0x3, 0xfffffffb, 0xbf8, 0x5, 0x101, 0x8, 0x1ec, 0x2, 0x5, 0x5, 0x9, 0x604, 0x1, 0x2, 0x7f, 0xb34, 0x10, 0x1, 0x3, 0x1, 0x2, 0x5, 0x80000000, 0x9, 0x2f2d, 0x9, 0x6, 0x7, 0x8000, 0xfffffff7, 0x3, 0x7, 0x9, 0x4f77, 0x5, 0x0, 0x52, 0x8, 0x5, 0x7f, 0x9, 0x9, 0x2, 0x1, 0xffffffc0, 0x101, 0x1, 0xffff04cc, 0xff, 0x63, 0x9, 0x1f000, 0xc, 0x0, 0x200, 0x93, 0x189d, 0x2e0, 0x9, 0x2, 0x7fffffff, 0x80, 0x8000, 0xffffffff, 0x8, 0xd, 0x0, 0xc8c0, 0x5, 0xd, 0x10001, 0x2, 0xfff, 0x4, 0x9, 0x2, 0xbecc, 0x3, 0x5, 0x8, 0x5, 0x2, 0xa987, 0x10, 0x3, 0x400, 0x2, 0xff, 0x80000000, 0x8, 0x0, 0x0, 0x9, 0x80000000, 0xce, 0x0, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0x401, 0x800, 0x800, 0x7658, 0x8, 0x1, 0x141, 0x8, 0x8, 0x9, 0x6, 0x4, 0x9b87, 0x1200, 0xe9fe, 0x8ff, 0x0, 0x895, 0xfd5b, 0x3, 0x10, 0x8, 0x0, 0x7f, 0xe, 0x9, 0xf0, 0x3ff, 0x8, 0x5, 0x6, 0x2, 0x800, 0xffffffff, 0x400, 0x10, 0x1, 0x40, 0xffff7fff, 0x3, 0x0, 0x9, 0x80000000, 0x10, 0x7, 0x3, 0x1, 0x1, 0x400, 0x7, 0x59c, 0x9, 0xec, 0x2, 0xfffffff7, 0x7, 0x0, 0x40, 0x8, 0x3, 0x7fff, 0x65, 0x0, 0x0, 0x10001, 0x0, 0x4, 0x0, 0xffffffff, 0x537, 0x6, 0x80000000, 0x2, 0x47f, 0x8, 0x7fffffff, 0x9, 0x6, 0xed, 0x291, 0x9, 0x0, 0x4, 0xa, 0x8, 0x0, 0x1bf, 0x101, 0x1, 0x7, 0x3ff, 0x5, 0x0, 0x6544, 0x4, 0x9, 0x4, 0x6, 0xa, 0x5, 0x1, 0x74, 0x4, 0x2, 0x10, 0x8, 0x10001, 0xffffffdb, 0x1ff, 0x2, 0x1, 0x3, 0xb542, 0x9, 0x9, 0x7fff, 0x0, 0x9, 0x1, 0x4, 0x4, 0x27d93884, 0x5, 0x101, 0x3, 0x4, 0x3, 0x8, 0xb1f7, 0x5, 0xfffff44d, 0x7, 0x9, 0x200, 0xa, 0xb, 0x5, 0x3, 0xf, 0x7f, 0x18000000, 0x7, 0x7f, 0x6, 0x6, 0x7f, 0x8001, 0xfffffffd, 0x6, 0x401, 0xfff, 0x9, 0x4, 0x2, 0x8000, 0x3, 0xca, 0x41efa423, 0x18, 0x7, 0x6, 0x6, 0x2, 0xfff, 0x1ff, 0xda8, 0x20000, 0x3, 0x3, 0x0, 0x10000, 0x0, 0xfffffffe, 0x7, 0x8, 0x7f44, 0xfffffffa, 0x200, 0x9, 0xfffffffb, 0x5, 0x8, 0x10000000, 0xb1, 0x8, 0x3, 0x3, 0x7, 0x7, 0x3, 0x8346, 0x10000, 0x7, 0x46c, 0x0, 0x0, 0x0, 0x1, 0x80000001, 0x80000001, 0x6, 0x0, 0x2, 0x3, 0x1, 0x1000, 0x210, 0x8001, 0x101, 0x0, 0x0, 0x3, 0x9a70, 0x81, 0x5, 0xd, 0x7546, 0x5, 0x2, 0x4c1c, 0x4, 0x8000, 0x10001, 0xfffffff7, 0x4, 0x8, 0x4, 0x6, 0x9, 0xfffffff9, 0xe2a8, 0x8, 0x6, 0x401, 0x2, 0xaf, 0xfffffffe, 0x0, 0x0, 0x1000, 0x4, 0xfffffff5, 0x6, 0x3, 0xb8a, 0x10001, 0xfbd8, 0x3, 0x2f9, 0x79cf, 0xe, 0xe, 0x8, 0x3]}]}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gretap0\x00'}, @TCA_FW_ACT={0xc4, 0x4, [@m_sample={0xc0, 0xc, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0x2, 0x8000, 0x9}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x9, 0x4, 0x1, 0xfffffff9}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x21}]}, {0x54, 0x6, "9d2e645d303b05e4ef070a5fc69851d9fd79322f8faae2edfc775d36198d1b65d9af1ed2e1b05e7085498a1c437d52fde39865cc7fbf0516e863cee36f40719ac9e7c221d35698de4a9632559bda031f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}]}]}}]}, 0x1358}}, 0x4008080) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf30}, {&(0x7f00000007c0)=""/154, 0x60}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x9dce, 0x10}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.332046333s ago: executing program 2 (id=1110): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x2, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000002c0)={0x2}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) r4 = socket$unix(0x1, 0x2, 0x0) accept4$unix(r4, &(0x7f0000000100), &(0x7f0000000000)=0x6e, 0x80000) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x7ff) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x8201}], 0x1, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000000c0)={0x10000001}) 17.331195264s ago: executing program 3 (id=1111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) pipe2(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000804000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x75, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) 16.249880061s ago: executing program 2 (id=1113): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_CREATE_OPEN(r4, &(0x7f00000004c0)={0xa0}, 0xa0) write$FUSE_INIT(r4, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r4, &(0x7f0000000080)={0x20}, 0x20) write$FUSE_OPEN(r4, &(0x7f0000000040)={0x20}, 0x20) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) 15.121786023s ago: executing program 2 (id=1116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x9, 0x2002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdir(0x0, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073117a000000000085ffeb0000000000950000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000001680)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x24, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) 13.795424181s ago: executing program 2 (id=1117): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x88, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup2(r5, r4) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$netlink(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x8bc}, {0x0}], 0x2}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) 13.795019081s ago: executing program 3 (id=1118): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdir(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb8}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = dup2(r6, r5) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$netlink(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x8bc}, {0x0}], 0x2}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) 12.433163651s ago: executing program 2 (id=1120): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdir(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = dup2(r6, r5) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$netlink(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x8bc}, {0x0}], 0x2}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) 12.432490152s ago: executing program 3 (id=1121): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1208, &(0x7f0000001540)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0xfd14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) 10.913168624s ago: executing program 0 (id=1122): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}}}, 0x24}}, 0x20000010) syz_open_procfs$userns(0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 10.912713845s ago: executing program 1 (id=1123): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0xcdb8d547e3a06b3e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{0x0}], 0x1}, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x0, 0x1}, 0x10) write$cgroup_pid(r0, &(0x7f00000031c0), 0x12) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 10.911155095s ago: executing program 2 (id=1124): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1208, &(0x7f0000001540)="$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") r2 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0xfd14) sendfile(r2, r2, 0x0, 0x100000000) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0) mkdir(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) 9.398283028s ago: executing program 0 (id=1125): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 9.397971208s ago: executing program 1 (id=1126): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280), 0x8) r3 = socket(0x1, 0x2, 0x0) ioctl$TCSBRKP(r3, 0x8902, 0x1000000000000) syz_open_procfs$userns(r0, &(0x7f0000000380)) 7.736858603s ago: executing program 0 (id=1127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x9, 0x2002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdir(0x0, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073117a000000000085ffeb0000000000950000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000001680)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x24, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) 7.735999162s ago: executing program 1 (id=1128): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280), 0x8) ioctl$TCSBRKP(0xffffffffffffffff, 0x8902, 0x1000000000000) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs$userns(r1, &(0x7f0000000380)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 5.973911795s ago: executing program 0 (id=1129): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x88, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup2(r5, r4) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$netlink(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x8bc}, {0x0}], 0x2}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) 5.973622665s ago: executing program 1 (id=1130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x9, 0x2002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)) 4.118389396s ago: executing program 0 (id=1131): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x0, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, 0x0, 0x25, 0x0, @val=@target_btf_id=r4}, 0x40) r5 = socket(0x1, 0x2, 0x0) ioctl$TCSBRKP(r5, 0x8902, 0x1000000000000) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}}}, 0x24}}, 0x20000010) syz_open_procfs$userns(r1, &(0x7f0000000380)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 4.117950796s ago: executing program 1 (id=1132): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x8902, 0x1000000000000) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}}}, 0x24}}, 0x20000010) syz_open_procfs$userns(r1, &(0x7f0000000380)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) 2.163784934s ago: executing program 0 (id=1133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) pipe2(0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000804000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x75, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) 2.163463355s ago: executing program 1 (id=1134): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1208, &(0x7f0000001540)="$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") r2 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd14) sendfile(r2, r2, 0x0, 0x100000000) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) 0s ago: executing program 3 (id=1135): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}}}, 0x24}}, 0x20000010) syz_open_procfs$userns(0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) kernel console output (not intermixed with test programs): ready [ 217.420254][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.440993][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.449608][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.457734][ T694] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.464639][ T694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.478206][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.493653][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.508895][ T694] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.515772][ T694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.572102][ T679] usb 2-1: device descriptor read/8, error -71 [ 217.637897][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.655471][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.670778][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.689304][ T679] usb usb2-port1: unable to enumerate USB device [ 217.704287][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.712775][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.806590][ T3427] device veth0_vlan entered promiscuous mode [ 217.832322][ T3427] device veth1_macvtap entered promiscuous mode [ 217.915894][ T3455] overlayfs: failed to resolve './bus': -2 [ 217.962276][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.973117][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.985885][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.998458][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.012161][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.022411][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.034563][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.064340][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.075148][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.243651][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.254165][ T3459] loop4: detected capacity change from 0 to 8192 [ 218.293979][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.302382][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.310257][ T3459] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.310616][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.708175][ T3471] overlayfs: failed to resolve './bus': -2 [ 218.777875][ T3472] loop3: detected capacity change from 0 to 128 [ 218.790952][ T322] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 218.877780][ T3472] EXT4-fs (loop3): Test dummy encryption mode enabled [ 218.938569][ T3472] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 218.956313][ T3472] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038 (0x7fffffff) [ 219.429719][ T322] usb 5-1: device descriptor read/64, error -71 [ 219.454719][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 219.454737][ T30] audit: type=1326 audit(1721997818.276:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3479 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a5b92299 code=0x7ffc0000 [ 219.470151][ T3480] loop2: detected capacity change from 0 to 2048 [ 219.492840][ T30] audit: type=1326 audit(1721997818.276:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3479 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9a5b92299 code=0x7ffc0000 [ 219.516921][ T30] audit: type=1326 audit(1721997818.276:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3479 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a5b92299 code=0x7ffc0000 [ 219.540343][ T30] audit: type=1326 audit(1721997818.276:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3479 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9a5b92299 code=0x7ffc0000 [ 219.566648][ T403] device bridge_slave_1 left promiscuous mode [ 219.572296][ T30] audit: type=1326 audit(1721997818.276:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3479 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a5b92299 code=0x7ffc0000 [ 219.572811][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.596546][ T30] audit: type=1326 audit(1721997818.276:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3479 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9a5b92299 code=0x7ffc0000 [ 219.628384][ T30] audit: type=1326 audit(1721997818.276:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3479 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a5b92299 code=0x7ffc0000 [ 219.677460][ T30] audit: type=1326 audit(1721997818.276:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3479 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9a5b92299 code=0x7ffc0000 [ 219.707576][ T30] audit: type=1326 audit(1721997818.276:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3479 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a5b92299 code=0x7ffc0000 [ 219.732314][ T403] device bridge_slave_0 left promiscuous mode [ 219.738242][ T30] audit: type=1326 audit(1721997818.276:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3479 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9a5b92299 code=0x7ffc0000 [ 219.761901][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.789883][ T3480] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 219.805160][ T403] device veth1_macvtap left promiscuous mode [ 219.811182][ T403] device veth0_vlan left promiscuous mode [ 219.821081][ T3480] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 219.929747][ T322] usb 5-1: device descriptor read/64, error -71 [ 220.199260][ T322] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 220.700914][ T322] usb 5-1: device descriptor read/64, error -71 [ 220.734665][ T3503] syz.3.835[3503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.734729][ T3503] syz.3.835[3503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.119508][ T322] usb 5-1: device descriptor read/64, error -71 [ 221.249303][ T322] usb usb5-port1: attempt power cycle [ 221.659246][ T322] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 221.705841][ T3521] loop3: detected capacity change from 0 to 128 [ 221.727807][ T3521] EXT4-fs (loop3): Test dummy encryption mode enabled [ 221.742488][ T3521] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 221.755410][ T3521] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038 (0x7fffffff) [ 221.873988][ T3526] overlayfs: failed to resolve './bus': -2 [ 221.890703][ T322] usb 5-1: device descriptor read/8, error -71 [ 222.538262][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.563748][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.574769][ T322] usb 5-1: device descriptor read/8, error -71 [ 222.581507][ T3532] device bridge_slave_0 entered promiscuous mode [ 222.602266][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.609410][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.630383][ T3532] device bridge_slave_1 entered promiscuous mode [ 222.767743][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.774779][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.781910][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.788746][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.638658][ T322] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 223.657287][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.749782][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.780892][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.788632][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.804780][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.814622][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.822955][ T891] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.829865][ T891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.847695][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.858996][ T3555] syz.3.848[3555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.859070][ T3555] syz.3.848[3555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.871690][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.891921][ T322] usb 5-1: device descriptor read/8, error -71 [ 223.976054][ T891] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.982961][ T891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.012036][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.021236][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.029052][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.037347][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.163065][ T3532] device veth0_vlan entered promiscuous mode [ 224.334588][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.349744][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.358358][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.371498][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.383256][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.392082][ T322] usb 5-1: device descriptor read/8, error -71 [ 224.399583][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.408950][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.419114][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.442544][ T3532] device veth1_macvtap entered promiscuous mode [ 224.456569][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.464613][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.477856][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.498100][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.509337][ T322] usb usb5-port1: unable to enumerate USB device [ 224.520394][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.535566][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 224.535597][ T30] audit: type=1326 audit(1721997823.346:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481eb55299 code=0x7ffc0000 [ 224.566624][ T30] audit: type=1326 audit(1721997823.356:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481eb55299 code=0x7ffc0000 [ 224.602173][ T30] audit: type=1326 audit(1721997823.416:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f481eb55299 code=0x7ffc0000 [ 224.634283][ T3570] loop1: detected capacity change from 0 to 2048 [ 224.641428][ T30] audit: type=1326 audit(1721997823.416:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481eb55299 code=0x7ffc0000 [ 224.666218][ T403] device bridge_slave_1 left promiscuous mode [ 224.672354][ T30] audit: type=1326 audit(1721997823.416:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481eb55299 code=0x7ffc0000 [ 224.686320][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.703235][ T30] audit: type=1326 audit(1721997823.416:4855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f481eb55299 code=0x7ffc0000 [ 224.703458][ T403] device bridge_slave_0 left promiscuous mode [ 224.734497][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.742410][ T30] audit: type=1326 audit(1721997823.416:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481eb55299 code=0x7ffc0000 [ 224.766862][ T403] device veth1_macvtap left promiscuous mode [ 224.771058][ T30] audit: type=1326 audit(1721997823.416:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481eb55299 code=0x7ffc0000 [ 224.773141][ T403] device veth0_vlan left promiscuous mode [ 224.846701][ T3570] EXT4-fs (loop1): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 224.863863][ T30] audit: type=1326 audit(1721997823.416:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f481eb55299 code=0x7ffc0000 [ 224.887762][ T30] audit: type=1326 audit(1721997823.416:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481eb55299 code=0x7ffc0000 [ 224.915683][ T3570] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 225.244760][ T3585] overlayfs: failed to resolve './bus': -2 [ 226.708490][ T3603] syz.2.860[3603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.708555][ T3603] syz.2.860[3603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.779337][ T20] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 227.197792][ T3614] loop2: detected capacity change from 0 to 128 [ 227.269796][ T3614] EXT4-fs (loop2): Test dummy encryption mode enabled [ 227.277786][ T3614] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 227.290327][ T3614] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038 (0x7fffffff) [ 227.349228][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 227.532097][ T20] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 227.544357][ T20] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.860905][ T20] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 227.869850][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.878936][ T20] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 227.887656][ T20] usb 4-1: no configuration chosen from 1 choice [ 227.888322][ T3620] loop0: detected capacity change from 0 to 2048 [ 227.940941][ T3620] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 227.971982][ T3620] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 228.600529][ T3635] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.607439][ T3635] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.614919][ T3635] device bridge_slave_0 entered promiscuous mode [ 228.632236][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.639256][ T3635] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.649675][ T3635] device bridge_slave_1 entered promiscuous mode [ 228.763872][ T317] usb 4-1: USB disconnect, device number 16 [ 228.790925][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.797787][ T3635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.804934][ T3635] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.811788][ T3635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.868556][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.880043][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.895927][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.925906][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.940455][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.947367][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.966106][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.974520][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.981414][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.996624][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.569516][ T3650] overlayfs: failed to resolve './bus': -2 [ 229.735059][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.861154][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.873516][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.876367][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 229.876382][ T30] audit: type=1404 audit(1721997828.696:5011): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 229.910605][ T30] audit: type=1400 audit(1721997828.716:5012): avc: denied { read write } for pid=3427 comm="syz-executor" name="loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 229.935742][ T30] audit: type=1400 audit(1721997828.716:5013): avc: denied { read write } for pid=3656 comm="syz.0.873" name="vhost-vsock" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 229.986162][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.996556][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.012252][ T45] device bridge_slave_1 left promiscuous mode [ 230.020235][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.031340][ T45] device bridge_slave_0 left promiscuous mode [ 230.041242][ T30] audit: type=1400 audit(1721997828.726:5014): avc: denied { ioctl } for pid=3656 comm="syz.0.873" path="/dev/vhost-vsock" dev="devtmpfs" ino=172 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 230.068590][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.079856][ T30] audit: type=1400 audit(1721997828.726:5015): avc: denied { create } for pid=3656 comm="syz.0.873" dev="anon_inodefs" ino=31999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 230.108279][ T45] device veth1_macvtap left promiscuous mode [ 230.127037][ T45] device veth0_vlan left promiscuous mode [ 230.128387][ T30] audit: type=1400 audit(1721997828.726:5016): avc: denied { accept } for pid=3656 comm="syz.0.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=0 [ 230.153453][ T30] audit: type=1404 audit(1721997828.726:5017): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 230.168749][ T3665] loop0: detected capacity change from 0 to 2048 [ 230.187097][ T82] audit: audit_backlog=65 > audit_backlog_limit=64 [ 230.189217][ T30] audit: type=1400 audit(1721997828.766:5018): avc: denied { map_create } for pid=3651 comm="syz.3.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 230.236004][ T3667] audit: audit_backlog=65 > audit_backlog_limit=64 [ 230.394423][ T3665] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 230.595450][ T3665] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 230.731848][ T3635] device veth0_vlan entered promiscuous mode [ 230.739965][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.771206][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.858417][ T3635] device veth1_macvtap entered promiscuous mode [ 230.866658][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.875309][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.883903][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 230.900622][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.177428][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.186101][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.194485][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.359545][ T891] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 231.660852][ T891] usb 2-1: Using ep0 maxpacket: 32 [ 231.789260][ T891] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 231.809680][ T891] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.835001][ T891] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 231.857084][ T891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.881617][ T891] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 231.904992][ T891] usb 2-1: no configuration chosen from 1 choice [ 232.844400][ T3709] loop3: detected capacity change from 0 to 128 [ 232.890311][ T3709] EXT4-fs (loop3): Test dummy encryption mode enabled [ 232.902391][ T3709] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 232.915182][ T3709] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038 (0x7fffffff) [ 233.261373][ T3714] loop4: detected capacity change from 0 to 2048 [ 233.404870][ T3714] EXT4-fs (loop4): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 233.434893][ T3714] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 233.870042][ T455] usb 2-1: USB disconnect, device number 20 [ 234.040952][ T3732] loop3: detected capacity change from 0 to 128 [ 234.397529][ T3732] EXT4-fs (loop3): Test dummy encryption mode enabled [ 234.584694][ T3732] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 234.607717][ T3732] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038 (0x7fffffff) [ 234.653883][ T3740] loop4: detected capacity change from 0 to 256 [ 234.910658][ T30] kauditd_printk_skb: 359 callbacks suppressed [ 234.910676][ T30] audit: type=1400 audit(1721997833.676:5371): avc: denied { write } for pid=3731 comm="syz.3.891" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.940597][ T30] audit: type=1400 audit(1721997833.676:5372): avc: denied { add_name } for pid=3731 comm="syz.3.891" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.073322][ T30] audit: type=1400 audit(1721997833.676:5373): avc: denied { create } for pid=3731 comm="syz.3.891" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 235.144995][ T30] audit: type=1400 audit(1721997833.846:5374): avc: denied { append open } for pid=3731 comm="syz.3.891" path="/27/mnt/cgroup.controllers" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 235.185477][ T30] audit: type=1404 audit(1721997833.946:5375): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 235.217505][ T30] audit: type=1404 audit(1721997833.946:5376): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 235.246755][ T30] audit: type=1400 audit(1721997833.956:5377): avc: denied { prog_load } for pid=3737 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 235.286453][ T30] audit: type=1400 audit(1721997833.956:5378): avc: denied { execmem } for pid=3748 comm="syz.0.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 235.306045][ T30] audit: type=1400 audit(1721997834.016:5379): avc: denied { read } for pid=82 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 235.328435][ T30] audit: type=1400 audit(1721997834.016:5380): avc: denied { search } for pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.727057][ T3758] loop4: detected capacity change from 0 to 128 [ 235.800479][ T3758] EXT4-fs (loop4): Test dummy encryption mode enabled [ 235.809741][ T3758] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 235.822671][ T3758] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff) [ 236.061992][ T3767] loop1: detected capacity change from 0 to 8192 [ 236.213608][ T3767] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.529295][ T322] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 236.529331][ T891] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 236.779180][ T891] usb 1-1: Using ep0 maxpacket: 32 [ 236.909316][ T322] usb 2-1: device descriptor read/64, error -71 [ 236.929331][ T891] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 236.939868][ T891] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 236.948815][ T891] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 236.958323][ T891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.979682][ T891] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 236.988467][ T891] usb 1-1: no configuration chosen from 1 choice [ 237.011965][ T3782] loop3: detected capacity change from 0 to 2048 [ 237.129299][ T3782] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 237.179018][ T3782] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 237.299219][ T322] usb 2-1: device descriptor read/64, error -71 [ 238.084073][ T3794] loop2: detected capacity change from 0 to 256 [ 238.119791][ T322] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 238.409223][ T322] usb 2-1: device descriptor read/64, error -71 [ 238.809211][ T322] usb 2-1: device descriptor read/64, error -71 [ 238.929298][ T322] usb usb2-port1: attempt power cycle [ 239.265764][ T891] usb 1-1: USB disconnect, device number 21 [ 239.286971][ T3820] loop0: detected capacity change from 0 to 128 [ 239.339273][ T322] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 239.370148][ T3820] EXT4-fs (loop0): Test dummy encryption mode enabled [ 239.390771][ T3820] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 239.403406][ T3820] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038 (0x7fffffff) [ 239.549249][ T322] usb 2-1: device descriptor read/8, error -71 [ 239.649306][ T20] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 239.829282][ T322] usb 2-1: device descriptor read/8, error -71 [ 240.019248][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.030825][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.041268][ T20] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 240.050365][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.079239][ T30] kauditd_printk_skb: 185 callbacks suppressed [ 240.079254][ T30] audit: type=1326 audit(1721997838.896:5566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109c499299 code=0x7ffc0000 [ 240.109282][ T322] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 240.109437][ T30] audit: type=1326 audit(1721997838.936:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109c499299 code=0x7ffc0000 [ 240.143583][ T20] usb 4-1: config 0 descriptor?? [ 240.159441][ T30] audit: type=1326 audit(1721997838.976:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f109c499299 code=0x7ffc0000 [ 240.233389][ T30] audit: type=1326 audit(1721997838.976:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109c499299 code=0x7ffc0000 [ 240.244785][ T3832] loop4: detected capacity change from 0 to 2048 [ 240.277010][ T30] audit: type=1326 audit(1721997838.976:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109c499299 code=0x7ffc0000 [ 240.329482][ T30] audit: type=1326 audit(1721997838.976:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f109c499299 code=0x7ffc0000 [ 240.353022][ T322] usb 2-1: device descriptor read/8, error -71 [ 240.384171][ T30] audit: type=1326 audit(1721997838.976:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109c499299 code=0x7ffc0000 [ 240.424903][ T30] audit: type=1326 audit(1721997838.976:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109c499299 code=0x7ffc0000 [ 240.448969][ T30] audit: type=1326 audit(1721997838.976:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f109c499299 code=0x7ffc0000 [ 240.473391][ T30] audit: type=1326 audit(1721997838.976:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109c499299 code=0x7ffc0000 [ 240.499821][ T3832] EXT4-fs (loop4): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 240.556133][ T3832] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 240.639507][ T322] usb 2-1: device descriptor read/8, error -71 [ 240.668003][ T20] uclogic 0003:28BD:0075.0014: unknown main item tag 0x0 [ 240.679234][ T20] uclogic 0003:28BD:0075.0014: unknown main item tag 0x0 [ 240.686105][ T20] uclogic 0003:28BD:0075.0014: unknown main item tag 0x0 [ 240.699507][ T20] uclogic 0003:28BD:0075.0014: unknown main item tag 0x0 [ 240.713039][ T20] uclogic 0003:28BD:0075.0014: unknown main item tag 0x0 [ 240.720594][ T20] uclogic 0003:28BD:0075.0014: No inputs registered, leaving [ 240.737350][ T20] uclogic 0003:28BD:0075.0014: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.3-1/input0 [ 240.759462][ T322] usb usb2-port1: unable to enumerate USB device [ 240.782716][ T3845] loop2: detected capacity change from 0 to 256 [ 241.208358][ T3851] loop0: detected capacity change from 0 to 128 [ 241.232933][ T3851] EXT4-fs (loop0): Test dummy encryption mode enabled [ 241.240773][ T3851] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 241.253360][ T3851] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038 (0x7fffffff) [ 242.155354][ T317] usb 4-1: USB disconnect, device number 17 [ 242.403936][ T305] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 242.537281][ T3873] loop4: detected capacity change from 0 to 128 [ 242.550388][ T3873] EXT4-fs (loop4): Test dummy encryption mode enabled [ 242.565167][ T3873] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 242.574578][ T3875] loop2: detected capacity change from 0 to 2048 [ 242.577894][ T3873] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038 (0x7fffffff) [ 242.650732][ T3875] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 242.663461][ T305] usb 1-1: Using ep0 maxpacket: 32 [ 242.669614][ T3875] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 242.919465][ T305] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 242.929958][ T305] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 242.938992][ T305] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 242.948196][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.070712][ T305] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 243.104652][ T305] usb 1-1: no configuration chosen from 1 choice [ 243.669179][ T3893] loop2: detected capacity change from 0 to 256 [ 243.802388][ T3897] loop4: detected capacity change from 0 to 128 [ 243.889838][ T3897] EXT4-fs (loop4): Test dummy encryption mode enabled [ 243.897795][ T3897] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 243.910221][ T3897] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038 (0x7fffffff) [ 244.769236][ T305] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 245.141590][ T484] usb 1-1: USB disconnect, device number 22 [ 245.161985][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 245.162000][ T30] audit: type=1326 audit(1721997843.986:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3142aa5299 code=0x7ffc0000 [ 245.192158][ T30] audit: type=1326 audit(1721997843.986:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3142aa5299 code=0x7ffc0000 [ 245.215655][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.226531][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.236403][ T305] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 245.242056][ T30] audit: type=1326 audit(1721997844.016:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3142aa5299 code=0x7ffc0000 [ 245.245643][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.269000][ T30] audit: type=1326 audit(1721997844.016:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3142aa5299 code=0x7ffc0000 [ 245.291178][ T305] usb 4-1: config 0 descriptor?? [ 245.304090][ T30] audit: type=1326 audit(1721997844.016:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3142aa5299 code=0x7ffc0000 [ 245.339482][ T3921] loop0: detected capacity change from 0 to 2048 [ 245.361979][ T30] audit: type=1326 audit(1721997844.036:5691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3142aa5299 code=0x7ffc0000 [ 245.385813][ T30] audit: type=1326 audit(1721997844.036:5692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3142aa5299 code=0x7ffc0000 [ 245.411341][ T30] audit: type=1326 audit(1721997844.036:5693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3142aa5299 code=0x7ffc0000 [ 245.435068][ T30] audit: type=1326 audit(1721997844.046:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3142aa5299 code=0x7ffc0000 [ 245.460253][ T3921] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 245.480020][ T30] audit: type=1326 audit(1721997844.046:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3142aa5299 code=0x7ffc0000 [ 245.497832][ T3921] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 245.644132][ T3932] loop2: detected capacity change from 0 to 128 [ 245.791199][ T3935] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 245.833808][ T3932] EXT4-fs (loop2): Test dummy encryption mode enabled [ 245.846455][ T3936] overlayfs: failed to resolve './bus': -2 [ 245.876984][ T305] uclogic 0003:28BD:0075.0015: unknown main item tag 0x0 [ 245.917082][ T305] uclogic 0003:28BD:0075.0015: unknown main item tag 0x0 [ 245.954197][ T305] uclogic 0003:28BD:0075.0015: unknown main item tag 0x0 [ 245.973631][ T3932] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 245.986199][ T305] uclogic 0003:28BD:0075.0015: unknown main item tag 0x0 [ 245.994758][ T3932] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038 (0x7fffffff) [ 246.005381][ T305] uclogic 0003:28BD:0075.0015: unknown main item tag 0x0 [ 246.033959][ T305] uclogic 0003:28BD:0075.0015: No inputs registered, leaving [ 246.083246][ T305] uclogic 0003:28BD:0075.0015: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.3-1/input0 [ 246.791826][ T3952] syz.2.948[3952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.792081][ T3952] syz.2.948[3952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.907722][ T3948] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.925919][ T3948] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.936062][ T3948] device bridge_slave_0 entered promiscuous mode [ 246.952353][ T3948] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.959474][ T3948] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.967980][ T3948] device bridge_slave_1 entered promiscuous mode [ 247.139325][ T484] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 247.251453][ T45] device bridge_slave_1 left promiscuous mode [ 247.260386][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.271078][ T45] device bridge_slave_0 left promiscuous mode [ 247.273423][ T20] usb 4-1: USB disconnect, device number 18 [ 247.295738][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.344198][ T45] device veth1_macvtap left promiscuous mode [ 247.350461][ T45] device veth0_vlan left promiscuous mode [ 247.379315][ T484] usb 3-1: Using ep0 maxpacket: 32 [ 247.399352][ T3962] loop3: detected capacity change from 0 to 2048 [ 247.500893][ T3962] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 247.585633][ T3962] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 247.616440][ T3948] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.623431][ T3948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.630542][ T3948] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.637304][ T3948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.644897][ T484] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 247.655144][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.656046][ T484] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 247.671218][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.674894][ T484] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 247.687480][ T484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.696783][ T484] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 247.705339][ T484] usb 3-1: no configuration chosen from 1 choice [ 247.722002][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.729335][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.748912][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.757340][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.767079][ T484] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.773981][ T484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.787888][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.796197][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.804372][ T484] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.811259][ T484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.818527][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.826584][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.834600][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.842581][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.859593][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.867885][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.878241][ T3948] device veth0_vlan entered promiscuous mode [ 247.884605][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.902057][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.927179][ T3948] device veth1_macvtap entered promiscuous mode [ 247.942704][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.951261][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.968510][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 247.985162][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.002494][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.044404][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.057028][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.078899][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.095492][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.751652][ T3988] loop4: detected capacity change from 0 to 128 [ 248.774170][ T3986] loop0: detected capacity change from 0 to 8192 [ 248.800455][ T3988] EXT4-fs (loop4): Test dummy encryption mode enabled [ 248.812040][ T3986] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.861631][ T3988] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 248.874100][ T3988] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038 (0x7fffffff) [ 248.962461][ T3993] overlayfs: failed to resolve './bus': -2 [ 249.399213][ T20] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 249.669273][ T20] usb 1-1: device descriptor read/64, error -71 [ 249.762377][ T4011] loop3: detected capacity change from 0 to 2048 [ 249.839456][ T484] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 249.897851][ T322] usb 3-1: USB disconnect, device number 14 [ 249.947132][ T4011] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 250.149285][ T20] usb 1-1: device descriptor read/64, error -71 [ 250.169820][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 250.169870][ T30] audit: type=1326 audit(1721997848.996:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.3.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 250.213960][ T4011] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 250.269400][ T484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.281586][ T30] audit: type=1326 audit(1721997849.096:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.3.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 250.391727][ T30] audit: type=1326 audit(1721997849.096:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.3.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 250.394068][ T484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.426482][ T484] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 250.435733][ T484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.459199][ T20] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 250.471611][ T484] usb 2-1: config 0 descriptor?? [ 250.700703][ T4026] loop4: detected capacity change from 0 to 128 [ 250.720194][ T4026] EXT4-fs (loop4): Test dummy encryption mode enabled [ 250.735372][ T4026] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 250.748101][ T4026] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038 (0x7fffffff) [ 250.849238][ T20] usb 1-1: device descriptor read/64, error -71 [ 251.345221][ T484] uclogic 0003:28BD:0075.0016: unknown main item tag 0x0 [ 251.354733][ T484] uclogic 0003:28BD:0075.0016: unknown main item tag 0x0 [ 251.362366][ T484] uclogic 0003:28BD:0075.0016: unknown main item tag 0x0 [ 251.369452][ T484] uclogic 0003:28BD:0075.0016: unknown main item tag 0x0 [ 251.376322][ T484] uclogic 0003:28BD:0075.0016: unknown main item tag 0x0 [ 251.385160][ T484] uclogic 0003:28BD:0075.0016: No inputs registered, leaving [ 251.394385][ T484] uclogic 0003:28BD:0075.0016: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.1-1/input0 [ 251.619233][ T20] usb 1-1: device descriptor read/64, error -71 [ 251.723999][ T4049] loop2: detected capacity change from 0 to 128 [ 251.734320][ T4049] EXT4-fs (loop2): Test dummy encryption mode enabled [ 251.748597][ T20] usb usb1-port1: attempt power cycle [ 251.750330][ T4049] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 251.768344][ T4049] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038 (0x7fffffff) [ 251.797951][ T4053] overlayfs: failed to resolve './bus': -2 [ 252.379229][ T20] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 252.509340][ T30] audit: type=1326 audit(1721997851.336:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 252.525910][ T4061] loop3: detected capacity change from 0 to 2048 [ 252.543223][ T891] usb 2-1: USB disconnect, device number 25 [ 252.553582][ T30] audit: type=1326 audit(1721997851.336:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 252.580947][ T30] audit: type=1326 audit(1721997851.336:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 252.589228][ T679] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 252.619559][ T20] usb 1-1: device descriptor read/8, error -71 [ 252.626427][ T30] audit: type=1326 audit(1721997851.336:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 252.656543][ T30] audit: type=1326 audit(1721997851.336:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 252.681262][ T30] audit: type=1326 audit(1721997851.336:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 252.724756][ T30] audit: type=1326 audit(1721997851.336:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 252.749727][ T4061] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 252.764643][ T4061] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 252.999262][ T679] usb 5-1: Using ep0 maxpacket: 32 [ 253.157957][ T679] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 253.168516][ T679] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 253.180178][ T679] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 253.189246][ T679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.197767][ T679] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 253.209101][ T679] usb 5-1: no configuration chosen from 1 choice [ 253.239272][ T20] usb 1-1: device descriptor read/8, error -71 [ 253.360444][ T4077] loop3: detected capacity change from 0 to 128 [ 253.429932][ T4077] EXT4-fs (loop3): Test dummy encryption mode enabled [ 253.438143][ T4077] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 253.451381][ T4077] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038 (0x7fffffff) [ 253.519396][ T20] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 253.979722][ T20] usb 1-1: device descriptor read/8, error -71 [ 254.806953][ T891] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 254.969261][ T20] usb 1-1: device descriptor read/8, error -71 [ 255.179359][ T20] usb usb1-port1: unable to enumerate USB device [ 255.299740][ T891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.316003][ T891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.325828][ T891] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 255.335174][ T891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.343768][ T20] usb 5-1: USB disconnect, device number 27 [ 255.364656][ T4106] loop4: detected capacity change from 0 to 128 [ 255.381879][ T891] usb 2-1: config 0 descriptor?? [ 255.388698][ T4106] EXT4-fs (loop4): Test dummy encryption mode enabled [ 255.397040][ T4106] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 255.409682][ T4106] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038 (0x7fffffff) [ 255.494231][ T4110] overlayfs: failed to resolve './bus': -2 [ 255.808387][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 255.808405][ T30] audit: type=1326 audit(1721997854.626:5983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 255.837951][ T30] audit: type=1326 audit(1721997854.626:5984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 255.845673][ T4113] loop3: detected capacity change from 0 to 2048 [ 255.861628][ T30] audit: type=1326 audit(1721997854.626:5985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 255.891157][ T30] audit: type=1326 audit(1721997854.626:5986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 255.923642][ T891] uclogic 0003:28BD:0075.0017: unknown main item tag 0x0 [ 255.930900][ T30] audit: type=1326 audit(1721997854.626:5987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 255.955682][ T891] uclogic 0003:28BD:0075.0017: unknown main item tag 0x0 [ 255.962647][ T891] uclogic 0003:28BD:0075.0017: unknown main item tag 0x0 [ 255.969921][ T891] uclogic 0003:28BD:0075.0017: unknown main item tag 0x0 [ 255.976993][ T30] audit: type=1326 audit(1721997854.626:5988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 256.000530][ T891] uclogic 0003:28BD:0075.0017: unknown main item tag 0x0 [ 256.007820][ T891] uclogic 0003:28BD:0075.0017: No inputs registered, leaving [ 256.024338][ T891] uclogic 0003:28BD:0075.0017: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.1-1/input0 [ 256.036673][ T4113] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 256.066077][ T4113] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 256.081297][ T30] audit: type=1326 audit(1721997854.626:5989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 256.114399][ T30] audit: type=1326 audit(1721997854.626:5990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 256.142925][ T30] audit: type=1326 audit(1721997854.626:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 256.166515][ T30] audit: type=1326 audit(1721997854.626:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 257.129901][ T20] usb 2-1: USB disconnect, device number 26 [ 257.159212][ T4136] loop1: detected capacity change from 0 to 128 [ 257.258518][ T4136] EXT4-fs (loop1): Test dummy encryption mode enabled [ 257.281924][ T4136] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 257.295066][ T4136] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038 (0x7fffffff) [ 257.526508][ T4149] loop3: detected capacity change from 0 to 2048 [ 257.847882][ T4149] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 257.874821][ T4149] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 258.052784][ T4162] overlayfs: failed to resolve './bus': -2 [ 258.419269][ T4169] loop1: detected capacity change from 0 to 128 [ 258.480355][ T4169] EXT4-fs (loop1): Test dummy encryption mode enabled [ 258.507904][ T4169] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 258.539404][ T4169] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038 (0x7fffffff) [ 258.679751][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.686602][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.694453][ T4173] device bridge_slave_0 entered promiscuous mode [ 258.706972][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.713892][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.721322][ T4173] device bridge_slave_1 entered promiscuous mode [ 258.933208][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.940246][ T4173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.947290][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.954070][ T4173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.984231][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.993370][ T679] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.002599][ T679] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.016574][ T4183] loop3: detected capacity change from 0 to 128 [ 259.024986][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.033177][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.040061][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.044285][ T4183] EXT4-fs (loop3): Test dummy encryption mode enabled [ 259.047422][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.056014][ T4183] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 259.062227][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.075199][ T4183] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038 (0x7fffffff) [ 259.080694][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.111159][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.172815][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.192952][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.205341][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.214032][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.221836][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.231374][ T4173] device veth0_vlan entered promiscuous mode [ 259.610645][ T4173] device veth1_macvtap entered promiscuous mode [ 259.704859][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.713964][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.796926][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.911948][ T45] device bridge_slave_1 left promiscuous mode [ 259.935655][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.957672][ T45] device bridge_slave_0 left promiscuous mode [ 259.963761][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.983467][ T45] device veth1_macvtap left promiscuous mode [ 259.994619][ T45] device veth0_vlan left promiscuous mode [ 260.110428][ T4212] loop3: detected capacity change from 0 to 128 [ 260.119443][ T455] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 260.160266][ T4212] EXT4-fs (loop3): Test dummy encryption mode enabled [ 260.170849][ T4212] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 260.184243][ T4212] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038 (0x7fffffff) [ 260.267398][ T317] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 260.748262][ T4222] overlayfs: failed to resolve './bus': -2 [ 260.890001][ T455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.939609][ T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.066203][ T455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.070539][ T30] kauditd_printk_skb: 247 callbacks suppressed [ 261.070574][ T30] audit: type=1404 audit(1721997859.896:6240): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 261.076789][ T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.106412][ T455] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 261.108813][ T30] audit: type=1404 audit(1721997859.936:6241): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 261.115682][ T455] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.138434][ T317] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 261.148579][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.157632][ T455] usb 1-1: config 0 descriptor?? [ 261.194357][ T317] usb 3-1: config 0 descriptor?? [ 261.196855][ T30] audit: type=1400 audit(1721997859.986:6242): avc: denied { create } for pid=4223 comm="syz.3.1017" dev="anon_inodefs" ino=33668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 261.241088][ T30] audit: type=1400 audit(1721997859.986:6243): avc: denied { ioctl } for pid=4223 comm="syz.3.1017" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=33668 ioctlcmd=0xaa04 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 261.268228][ T30] audit: type=1400 audit(1721997859.986:6244): avc: denied { map_create } for pid=4223 comm="syz.3.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 261.885967][ T30] audit: type=1400 audit(1721997859.986:6245): avc: denied { bpf } for pid=4223 comm="syz.3.1017" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 261.920745][ T455] uclogic 0003:28BD:0075.0018: unknown main item tag 0x0 [ 261.927624][ T30] audit: type=1400 audit(1721997859.996:6246): avc: denied { map_read map_write } for pid=4223 comm="syz.3.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 261.950903][ T4232] loop3: detected capacity change from 0 to 128 [ 261.959629][ T455] uclogic 0003:28BD:0075.0018: unknown main item tag 0x0 [ 261.963668][ T30] audit: type=1400 audit(1721997859.996:6247): avc: denied { read } for pid=4223 comm="syz.3.1017" dev="nsfs" ino=4026532374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 261.966511][ T455] uclogic 0003:28BD:0075.0018: unknown main item tag 0x0 [ 261.998031][ T30] audit: type=1400 audit(1721997859.996:6248): avc: denied { open } for pid=4223 comm="syz.3.1017" path="net:[4026532374]" dev="nsfs" ino=4026532374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 262.026612][ T4232] EXT4-fs (loop3): Test dummy encryption mode enabled [ 262.034029][ T30] audit: type=1400 audit(1721997859.996:6249): avc: denied { create } for pid=4223 comm="syz.3.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 262.056332][ T4232] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 262.069543][ T4232] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038 (0x7fffffff) [ 262.128891][ T455] uclogic 0003:28BD:0075.0018: unknown main item tag 0x0 [ 262.167650][ T455] uclogic 0003:28BD:0075.0018: unknown main item tag 0x0 [ 262.185800][ T317] uclogic 0003:28BD:0075.0019: unknown main item tag 0x0 [ 262.211882][ T317] uclogic 0003:28BD:0075.0019: unknown main item tag 0x0 [ 262.248463][ T455] uclogic 0003:28BD:0075.0018: No inputs registered, leaving [ 262.282097][ T317] uclogic 0003:28BD:0075.0019: unknown main item tag 0x0 [ 262.311215][ T455] uclogic 0003:28BD:0075.0018: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.0-1/input0 [ 262.327917][ T317] uclogic 0003:28BD:0075.0019: unknown main item tag 0x0 [ 262.351148][ T317] uclogic 0003:28BD:0075.0019: unknown main item tag 0x0 [ 262.382959][ T317] uclogic 0003:28BD:0075.0019: No inputs registered, leaving [ 262.413540][ T317] uclogic 0003:28BD:0075.0019: hidraw1: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.2-1/input0 [ 263.160257][ T4252] overlayfs: failed to resolve './bus': -2 [ 263.491259][ T60] usb 3-1: USB disconnect, device number 15 [ 263.522660][ T6] usb 1-1: USB disconnect, device number 27 [ 264.197817][ T4271] overlayfs: failed to resolve './bus': -2 [ 264.810744][ T4282] loop4: detected capacity change from 0 to 128 [ 264.926249][ T4282] EXT4-fs (loop4): Test dummy encryption mode enabled [ 265.072886][ T4282] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 265.250773][ T4282] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038 (0x7fffffff) [ 265.462538][ T4291] loop3: detected capacity change from 0 to 128 [ 265.670790][ T4291] EXT4-fs (loop3): Test dummy encryption mode enabled [ 265.770614][ T4291] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 265.789613][ T4291] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038 (0x7fffffff) [ 266.257830][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 266.257847][ T30] audit: type=1400 audit(1721997865.076:6315): avc: denied { read write } for pid=4299 comm="syz.4.1036" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.379248][ T30] audit: type=1400 audit(1721997865.086:6316): avc: denied { open } for pid=4305 comm="syz.2.1037" path="/dev/raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.628794][ T26] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 266.679262][ T6] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 267.427712][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.438688][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.472412][ T26] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 267.562151][ T679] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 267.582326][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.600652][ T30] audit: type=1326 audit(1721997866.426:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.1.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaeb42d299 code=0x7ffc0000 [ 267.629893][ T26] usb 5-1: config 0 descriptor?? [ 267.825421][ T30] audit: type=1326 audit(1721997866.426:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.1.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fcaeb42d299 code=0x7ffc0000 [ 267.848983][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.849276][ T30] audit: type=1326 audit(1721997866.426:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.1.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaeb42d299 code=0x7ffc0000 [ 267.867055][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.883201][ T30] audit: type=1326 audit(1721997866.426:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.1.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fcaeb42d299 code=0x7ffc0000 [ 267.922954][ T6] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 267.942237][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.961466][ T30] audit: type=1326 audit(1721997866.426:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.1.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaeb42d299 code=0x7ffc0000 [ 267.962827][ T6] usb 3-1: config 0 descriptor?? [ 268.019291][ T679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.040156][ T679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.042740][ T30] audit: type=1326 audit(1721997866.426:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.1.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fcaeb42d299 code=0x7ffc0000 [ 268.064890][ T679] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 268.074359][ T30] audit: type=1326 audit(1721997866.426:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.1.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaeb42d299 code=0x7ffc0000 [ 268.105452][ T30] audit: type=1326 audit(1721997866.426:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.1.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaeb42d299 code=0x7ffc0000 [ 268.110514][ T679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.155018][ T26] uclogic 0003:28BD:0075.001A: unknown main item tag 0x0 [ 268.166338][ T26] uclogic 0003:28BD:0075.001A: unknown main item tag 0x0 [ 268.186091][ T679] usb 4-1: config 0 descriptor?? [ 268.201061][ T26] uclogic 0003:28BD:0075.001A: unknown main item tag 0x0 [ 268.208113][ T26] uclogic 0003:28BD:0075.001A: unknown main item tag 0x0 [ 268.217517][ T26] uclogic 0003:28BD:0075.001A: unknown main item tag 0x0 [ 268.226605][ T26] uclogic 0003:28BD:0075.001A: No inputs registered, leaving [ 268.248170][ T26] uclogic 0003:28BD:0075.001A: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.4-1/input0 [ 268.520842][ T6] uclogic 0003:28BD:0075.001B: unknown main item tag 0x0 [ 268.582762][ T4343] overlayfs: failed to resolve './bus': -2 [ 269.014368][ T6] uclogic 0003:28BD:0075.001B: unknown main item tag 0x0 [ 269.024096][ T6] uclogic 0003:28BD:0075.001B: unknown main item tag 0x0 [ 269.040748][ T679] uclogic 0003:28BD:0075.001C: unknown main item tag 0x0 [ 269.048770][ T6] uclogic 0003:28BD:0075.001B: unknown main item tag 0x0 [ 269.050000][ T679] uclogic 0003:28BD:0075.001C: unknown main item tag 0x0 [ 269.066044][ T6] uclogic 0003:28BD:0075.001B: unknown main item tag 0x0 [ 269.066785][ T679] uclogic 0003:28BD:0075.001C: unknown main item tag 0x0 [ 269.084401][ T679] uclogic 0003:28BD:0075.001C: unknown main item tag 0x0 [ 269.093137][ T679] uclogic 0003:28BD:0075.001C: unknown main item tag 0x0 [ 269.102941][ T679] uclogic 0003:28BD:0075.001C: No inputs registered, leaving [ 269.134340][ T6] uclogic 0003:28BD:0075.001B: No inputs registered, leaving [ 269.137125][ T679] uclogic 0003:28BD:0075.001C: hidraw1: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.3-1/input0 [ 269.222626][ T6] uclogic 0003:28BD:0075.001B: hidraw2: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.2-1/input0 [ 269.354949][ T679] usb 5-1: USB disconnect, device number 28 [ 269.393680][ T4353] loop1: detected capacity change from 0 to 128 [ 269.559084][ T4353] EXT4-fs (loop1): Test dummy encryption mode enabled [ 269.677497][ T4353] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 269.690213][ T4353] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038 (0x7fffffff) [ 270.112878][ T790] usb 3-1: USB disconnect, device number 16 [ 270.336227][ T4366] loop0: detected capacity change from 0 to 128 [ 270.391615][ T322] usb 4-1: USB disconnect, device number 19 [ 270.438192][ T4366] EXT4-fs (loop0): Test dummy encryption mode enabled [ 270.446527][ T4366] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 270.460280][ T4366] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038 (0x7fffffff) [ 272.536112][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 272.536128][ T30] audit: type=1326 audit(1721997871.356:6360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4383 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 272.565898][ T30] audit: type=1326 audit(1721997871.356:6361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4383 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 272.589945][ T30] audit: type=1326 audit(1721997871.356:6362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4383 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 272.613219][ T30] audit: type=1326 audit(1721997871.356:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4383 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 272.636580][ T30] audit: type=1326 audit(1721997871.356:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4383 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 272.691594][ T30] audit: type=1326 audit(1721997871.386:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4383 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 272.756233][ T30] audit: type=1326 audit(1721997871.386:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4383 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa80814299 code=0x7ffc0000 [ 272.839379][ T30] audit: type=1400 audit(1721997871.386:6367): avc: denied { write } for pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.924178][ T30] audit: type=1400 audit(1721997871.386:6368): avc: denied { remove_name } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.959247][ T20] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 272.999353][ T30] audit: type=1400 audit(1721997871.386:6369): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 273.269066][ T4403] loop1: detected capacity change from 0 to 128 [ 273.333248][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.333335][ T4405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1060'. [ 273.350247][ T4403] EXT4-fs (loop1): Test dummy encryption mode enabled [ 273.361570][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.377083][ T20] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 273.386183][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.386901][ T4403] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 273.398245][ T20] usb 3-1: config 0 descriptor?? [ 273.411649][ T4403] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038 (0x7fffffff) [ 273.779449][ T694] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 273.922564][ T4419] loop0: detected capacity change from 0 to 128 [ 273.969765][ T4419] EXT4-fs (loop0): Test dummy encryption mode enabled [ 273.977653][ T4419] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 273.990162][ T4419] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038 (0x7fffffff) [ 274.001385][ T20] uclogic 0003:28BD:0075.001D: unknown main item tag 0x0 [ 274.008374][ T20] uclogic 0003:28BD:0075.001D: unknown main item tag 0x0 [ 274.015576][ T20] uclogic 0003:28BD:0075.001D: unknown main item tag 0x0 [ 274.024189][ T20] uclogic 0003:28BD:0075.001D: unknown main item tag 0x0 [ 274.031439][ T20] uclogic 0003:28BD:0075.001D: unknown main item tag 0x0 [ 274.038610][ T20] uclogic 0003:28BD:0075.001D: No inputs registered, leaving [ 274.046728][ T20] uclogic 0003:28BD:0075.001D: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.2-1/input0 [ 274.209863][ T694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.239206][ T694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.252700][ T694] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 274.274973][ T694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.298062][ T694] usb 5-1: config 0 descriptor?? [ 275.474523][ T4433] loop1: detected capacity change from 0 to 128 [ 275.500027][ T4333] usb 3-1: USB disconnect, device number 17 [ 275.520920][ T4433] EXT4-fs (loop1): Test dummy encryption mode enabled [ 275.583433][ T4433] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 275.606749][ T4433] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038 (0x7fffffff) [ 275.641201][ T694] uclogic 0003:28BD:0075.001E: unknown main item tag 0x0 [ 275.658455][ T694] uclogic 0003:28BD:0075.001E: unknown main item tag 0x0 [ 275.665378][ T694] uclogic 0003:28BD:0075.001E: unknown main item tag 0x0 [ 275.680614][ T694] uclogic 0003:28BD:0075.001E: unknown main item tag 0x0 [ 275.687746][ T694] uclogic 0003:28BD:0075.001E: unknown main item tag 0x0 [ 275.776283][ T694] uclogic 0003:28BD:0075.001E: No inputs registered, leaving [ 275.823872][ T694] uclogic 0003:28BD:0075.001E: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.4-1/input0 [ 276.069214][ T4333] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 276.309218][ T4333] usb 3-1: Using ep0 maxpacket: 32 [ 276.390841][ T6] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 276.402078][ T4450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1071'. [ 276.418952][ T4452] loop1: detected capacity change from 0 to 128 [ 276.429734][ T4333] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 276.442834][ T4452] EXT4-fs (loop1): Test dummy encryption mode enabled [ 276.450140][ T4333] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 276.451678][ T4452] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 276.467483][ T4333] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 276.471800][ T4452] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038 (0x7fffffff) [ 276.489991][ T4333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.505810][ T4333] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 276.570468][ T4333] usb 3-1: no configuration chosen from 1 choice [ 276.866348][ T4333] usb 5-1: USB disconnect, device number 29 [ 277.059315][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.074228][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.091580][ T6] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 277.117073][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.131786][ T6] usb 1-1: config 0 descriptor?? [ 277.584717][ T4471] loop3: detected capacity change from 0 to 128 [ 277.640258][ T6] uclogic 0003:28BD:0075.001F: unknown main item tag 0x0 [ 277.647215][ T6] uclogic 0003:28BD:0075.001F: unknown main item tag 0x0 [ 277.654527][ T4471] EXT4-fs (loop3): Test dummy encryption mode enabled [ 277.661231][ T6] uclogic 0003:28BD:0075.001F: unknown main item tag 0x0 [ 277.662586][ T4471] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 277.668094][ T6] uclogic 0003:28BD:0075.001F: unknown main item tag 0x0 [ 277.680785][ T4471] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038 (0x7fffffff) [ 277.687465][ T6] uclogic 0003:28BD:0075.001F: unknown main item tag 0x0 [ 277.704326][ T6] uclogic 0003:28BD:0075.001F: No inputs registered, leaving [ 277.715086][ T6] uclogic 0003:28BD:0075.001F: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.0-1/input0 [ 277.800570][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 277.800585][ T30] audit: type=1400 audit(1721997876.626:6448): avc: denied { create } for pid=4474 comm="syz.4.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.943473][ T4475] loop4: detected capacity change from 0 to 8192 [ 278.113073][ T4475] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 278.162753][ T30] audit: type=1400 audit(1721997876.986:6449): avc: denied { mount } for pid=4474 comm="syz.4.1076" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 278.185083][ T30] audit: type=1326 audit(1721997876.996:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4464 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaeb42d299 code=0x7ffc0000 [ 278.209393][ T30] audit: type=1326 audit(1721997876.996:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4464 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaeb42d299 code=0x7ffc0000 [ 278.418177][ T4480] overlayfs: failed to resolve './bus': -2 [ 278.579258][ T790] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 278.708849][ T60] usb 3-1: USB disconnect, device number 18 [ 278.714899][ T4483] loop3: detected capacity change from 0 to 128 [ 278.731676][ T4483] EXT4-fs (loop3): Test dummy encryption mode enabled [ 278.743387][ T4483] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 278.755718][ T4483] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038 (0x7fffffff) [ 278.889234][ T790] usb 5-1: device descriptor read/64, error -71 [ 279.180570][ T60] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 279.275333][ T1527] usb 1-1: USB disconnect, device number 28 [ 279.281428][ T790] usb 5-1: device descriptor read/64, error -71 [ 279.349859][ T4495] loop0: detected capacity change from 0 to 128 [ 279.422634][ T4495] EXT4-fs (loop0): Test dummy encryption mode enabled [ 279.460861][ T4495] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 279.467866][ T4493] loop1: detected capacity change from 0 to 8192 [ 279.480242][ T4495] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038 (0x7fffffff) [ 279.512119][ T4493] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.618527][ T790] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 279.929305][ T4333] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 279.929337][ T790] usb 5-1: device descriptor read/64, error -71 [ 279.951364][ T4501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1082'. [ 279.958530][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.971149][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.981075][ T60] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 279.990199][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.998747][ T60] usb 3-1: config 0 descriptor?? [ 280.236396][ T4333] usb 2-1: device descriptor read/64, error -71 [ 280.399294][ T790] usb 5-1: device descriptor read/64, error -71 [ 280.405449][ T1527] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 280.490743][ T60] uclogic 0003:28BD:0075.0020: unknown main item tag 0x0 [ 280.497622][ T60] uclogic 0003:28BD:0075.0020: unknown main item tag 0x0 [ 280.504782][ T60] uclogic 0003:28BD:0075.0020: unknown main item tag 0x0 [ 280.512546][ T60] uclogic 0003:28BD:0075.0020: unknown main item tag 0x0 [ 280.519313][ T790] usb usb5-port1: attempt power cycle [ 280.519728][ T60] uclogic 0003:28BD:0075.0020: unknown main item tag 0x0 [ 280.531866][ T60] uclogic 0003:28BD:0075.0020: No inputs registered, leaving [ 280.539824][ T60] uclogic 0003:28BD:0075.0020: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.2-1/input0 [ 280.639206][ T4333] usb 2-1: device descriptor read/64, error -71 [ 280.769384][ T1527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.780293][ T1527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.789896][ T1527] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 280.798826][ T1527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.807884][ T1527] usb 4-1: config 0 descriptor?? [ 280.929215][ T4333] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 280.936681][ T790] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 281.109232][ T790] usb 5-1: device descriptor read/8, error -71 [ 281.158019][ T4513] loop0: detected capacity change from 0 to 128 [ 281.199347][ T4333] usb 2-1: device descriptor read/64, error -71 [ 281.249843][ T4513] EXT4-fs (loop0): Test dummy encryption mode enabled [ 281.257722][ T4513] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 281.270265][ T4513] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038 (0x7fffffff) [ 281.289212][ T30] audit: type=1400 audit(1721997880.106:6452): avc: denied { setopt } for pid=4474 comm="syz.4.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 281.309388][ T30] audit: type=1400 audit(1721997880.106:6453): avc: denied { read } for pid=4474 comm="syz.4.1076" path="socket:[34655]" dev="sockfs" ino=34655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 281.348487][ T1527] uclogic 0003:28BD:0075.0021: unknown main item tag 0x0 [ 281.355441][ T1527] uclogic 0003:28BD:0075.0021: unknown main item tag 0x0 [ 281.362672][ T1527] uclogic 0003:28BD:0075.0021: unknown main item tag 0x0 [ 281.369807][ T1527] uclogic 0003:28BD:0075.0021: unknown main item tag 0x0 [ 281.376664][ T1527] uclogic 0003:28BD:0075.0021: unknown main item tag 0x0 [ 281.383930][ T1527] uclogic 0003:28BD:0075.0021: No inputs registered, leaving [ 281.391725][ T1527] uclogic 0003:28BD:0075.0021: hidraw1: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.3-1/input0 [ 281.419279][ T790] usb 5-1: device descriptor read/8, error -71 [ 281.659304][ T4333] usb 2-1: device descriptor read/64, error -71 [ 281.723629][ T1527] usb 3-1: USB disconnect, device number 19 [ 281.749192][ T790] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 281.779328][ T4333] usb usb2-port1: attempt power cycle [ 281.919280][ T790] usb 5-1: device descriptor read/8, error -71 [ 282.069690][ T30] audit: type=1400 audit(1721997880.896:6454): avc: denied { accept } for pid=4522 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 282.126684][ T30] audit: type=1400 audit(1721997880.946:6455): avc: denied { read } for pid=4522 comm="syz.0.1087" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 282.149446][ T30] audit: type=1400 audit(1721997880.946:6456): avc: denied { open } for pid=4522 comm="syz.0.1087" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 282.189316][ T790] usb 5-1: device descriptor read/8, error -71 [ 282.195384][ T4333] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 282.319614][ T790] usb usb5-port1: unable to enumerate USB device [ 282.369244][ T4333] usb 2-1: device descriptor read/8, error -71 [ 282.614403][ T30] audit: type=1326 audit(1721997881.436:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a5b92299 code=0x7ffc0000 [ 282.639466][ T4333] usb 2-1: device descriptor read/8, error -71 [ 282.909221][ T4333] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 282.966392][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 282.966410][ T30] audit: type=1404 audit(1721997881.786:6491): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 282.989200][ T30] audit: type=1404 audit(1721997881.816:6492): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 283.004615][ T30] audit: type=1400 audit(1721997881.816:6493): avc: denied { read } for pid=4492 comm="syz.1.1080" path="socket:[34742]" dev="sockfs" ino=34742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.015384][ T6] usb 4-1: USB disconnect, device number 20 [ 283.028502][ T30] audit: type=1400 audit(1721997881.826:6494): avc: denied { ioctl } for pid=4492 comm="syz.1.1080" path="/dev/raw-gadget" dev="devtmpfs" ino=162 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.092636][ T30] audit: type=1400 audit(1721997881.916:6495): avc: denied { read write } for pid=3341 comm="syz-executor" name="loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.109253][ T4333] usb 2-1: device descriptor read/8, error -71 [ 283.124507][ T30] audit: type=1400 audit(1721997881.916:6496): avc: denied { open } for pid=3341 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.157907][ T30] audit: type=1400 audit(1721997881.916:6497): avc: denied { ioctl } for pid=3341 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.195905][ T30] audit: type=1400 audit(1721997881.946:6498): avc: denied { execmem } for pid=4534 comm="syz.3.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 283.217586][ T30] audit: type=1400 audit(1721997882.006:6499): avc: denied { read } for pid=82 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 283.239692][ T30] audit: type=1400 audit(1721997882.006:6500): avc: denied { search } for pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.931708][ T4333] usb 2-1: device descriptor read/8, error -71 [ 284.020402][ T4542] loop2: detected capacity change from 0 to 128 [ 284.027131][ T4540] loop0: detected capacity change from 0 to 8192 [ 284.039983][ T4544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'. [ 284.049475][ T4333] usb usb2-port1: unable to enumerate USB device [ 284.064501][ T4542] EXT4-fs (loop2): Test dummy encryption mode enabled [ 284.072329][ T4540] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 284.103641][ T4542] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 284.116388][ T4542] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038 (0x7fffffff) [ 284.379165][ T6] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 284.679182][ T6] usb 1-1: device descriptor read/64, error -71 [ 285.199269][ T6] usb 1-1: device descriptor read/64, error -71 [ 285.449200][ T20] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 285.469287][ T6] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 285.739232][ T6] usb 1-1: device descriptor read/64, error -71 [ 285.849278][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.860107][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.869693][ T20] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 285.878520][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.887815][ T20] usb 4-1: config 0 descriptor?? [ 286.169234][ T6] usb 1-1: device descriptor read/64, error -71 [ 286.289256][ T6] usb usb1-port1: attempt power cycle [ 286.360920][ T20] uclogic 0003:28BD:0075.0022: unknown main item tag 0x0 [ 286.367814][ T20] uclogic 0003:28BD:0075.0022: unknown main item tag 0x0 [ 286.374830][ T20] uclogic 0003:28BD:0075.0022: unknown main item tag 0x0 [ 286.381650][ T20] uclogic 0003:28BD:0075.0022: unknown main item tag 0x0 [ 286.388454][ T20] uclogic 0003:28BD:0075.0022: unknown main item tag 0x0 [ 286.395598][ T20] uclogic 0003:28BD:0075.0022: No inputs registered, leaving [ 286.403412][ T20] uclogic 0003:28BD:0075.0022: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.3-1/input0 [ 286.699203][ T6] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 286.889285][ T6] usb 1-1: device descriptor read/8, error -71 [ 287.169294][ T6] usb 1-1: device descriptor read/8, error -71 [ 287.449209][ T6] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 287.629239][ T6] usb 1-1: device descriptor read/8, error -71 [ 288.058709][ T4333] usb 4-1: USB disconnect, device number 21 [ 288.065458][ T790] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 288.094705][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 288.094720][ T30] audit: type=1404 audit(1721997886.916:6578): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 288.115691][ T6] usb 1-1: device descriptor read/8, error -71 [ 288.138030][ T30] audit: type=1400 audit(1721997886.916:6579): avc: denied { integrity } for pid=4581 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 288.163663][ T30] audit: type=1404 audit(1721997886.956:6580): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 288.180538][ T30] audit: type=1400 audit(1721997886.956:6581): avc: denied { read } for pid=4539 comm="syz.0.1091" path="socket:[35311]" dev="sockfs" ino=35311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 288.204524][ T30] audit: type=1400 audit(1721997886.986:6582): avc: denied { execmem } for pid=4584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 288.231345][ T30] audit: type=1400 audit(1721997886.986:6583): avc: denied { integrity } for pid=4584 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 288.254210][ T6] usb usb1-port1: unable to enumerate USB device [ 288.263532][ T30] audit: type=1400 audit(1721997887.006:6584): avc: denied { read } for pid=82 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 288.285671][ T30] audit: type=1400 audit(1721997887.006:6585): avc: denied { search } for pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.307658][ T30] audit: type=1400 audit(1721997887.006:6586): avc: denied { append } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 288.329976][ T30] audit: type=1400 audit(1721997887.006:6587): avc: denied { open } for pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 288.439289][ T790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.450087][ T790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.459715][ T790] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 288.468489][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.480528][ T790] usb 3-1: config 0 descriptor?? [ 288.809988][ T45] device bridge_slave_1 left promiscuous mode [ 288.815998][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.823533][ T45] device bridge_slave_0 left promiscuous mode [ 288.829560][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.837448][ T45] device veth1_macvtap left promiscuous mode [ 288.843359][ T45] device veth0_vlan left promiscuous mode [ 288.960874][ T790] uclogic 0003:28BD:0075.0023: unknown main item tag 0x0 [ 288.967765][ T790] uclogic 0003:28BD:0075.0023: unknown main item tag 0x0 [ 288.975288][ T790] uclogic 0003:28BD:0075.0023: unknown main item tag 0x0 [ 288.982212][ T790] uclogic 0003:28BD:0075.0023: unknown main item tag 0x0 [ 288.989032][ T790] uclogic 0003:28BD:0075.0023: unknown main item tag 0x0 [ 288.996121][ T790] uclogic 0003:28BD:0075.0023: No inputs registered, leaving [ 289.003919][ T790] uclogic 0003:28BD:0075.0023: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.2-1/input0 [ 289.422721][ T4593] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.430028][ T4593] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.437250][ T4593] device bridge_slave_0 entered promiscuous mode [ 289.447044][ T4593] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.454689][ T4593] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.471643][ T4593] device bridge_slave_1 entered promiscuous mode [ 289.568384][ T4593] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.575269][ T4593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.582396][ T4593] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.589245][ T4593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.622196][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.630318][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.637618][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.658054][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.666379][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.673264][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.680951][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.689084][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.696086][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.711346][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.719940][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.737965][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 289.751214][ T4593] device veth0_vlan entered promiscuous mode [ 289.758194][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.767482][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.775246][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.794029][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.802985][ T4593] device veth1_macvtap entered promiscuous mode [ 289.814478][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.828958][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.979822][ T4602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 290.031334][ T45] device bridge_slave_1 left promiscuous mode [ 290.041336][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.041949][ T4604] loop1: detected capacity change from 0 to 128 [ 290.058181][ T45] device bridge_slave_0 left promiscuous mode [ 290.073436][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.084593][ T45] device veth1_macvtap left promiscuous mode [ 290.090531][ T45] device veth0_vlan left promiscuous mode [ 290.120052][ T4604] EXT4-fs (loop1): Test dummy encryption mode enabled [ 290.128407][ T4604] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 290.141025][ T4604] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038 (0x7fffffff) [ 290.701041][ T790] usb 3-1: USB disconnect, device number 20 [ 293.099176][ T4333] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 293.459253][ T4333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.470132][ T4333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.479733][ T4333] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 293.488554][ T4333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.530250][ T4333] usb 4-1: config 0 descriptor?? [ 293.726830][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 293.726850][ T30] audit: type=1404 audit(1721997892.546:6708): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 293.749995][ T30] audit: type=1400 audit(1721997892.546:6709): avc: denied { integrity } for pid=4637 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=0 [ 293.773186][ T30] audit: type=1404 audit(1721997892.576:6710): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 293.788373][ T30] audit: type=1400 audit(1721997892.576:6711): avc: denied { read write } for pid=3427 comm="syz-executor" name="loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.812534][ T30] audit: type=1400 audit(1721997892.576:6712): avc: denied { open } for pid=3427 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.836623][ T30] audit: type=1400 audit(1721997892.576:6713): avc: denied { ioctl } for pid=3427 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.862177][ T30] audit: type=1400 audit(1721997892.596:6714): avc: denied { ioctl } for pid=4627 comm="syz.3.1111" path="/dev/raw-gadget" dev="devtmpfs" ino=162 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.000831][ T4333] uclogic 0003:28BD:0075.0024: unknown main item tag 0x0 [ 294.007725][ T4333] uclogic 0003:28BD:0075.0024: unknown main item tag 0x0 [ 294.014734][ T4333] uclogic 0003:28BD:0075.0024: unknown main item tag 0x0 [ 294.021557][ T4333] uclogic 0003:28BD:0075.0024: unknown main item tag 0x0 [ 294.028365][ T4333] uclogic 0003:28BD:0075.0024: unknown main item tag 0x0 [ 294.035442][ T4333] uclogic 0003:28BD:0075.0024: No inputs registered, leaving [ 294.043567][ T4333] uclogic 0003:28BD:0075.0024: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.3-1/input0 [ 294.836332][ T30] audit: type=1400 audit(1721997893.656:6715): avc: denied { execmem } for pid=4643 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 294.906694][ T30] audit: type=1400 audit(1721997893.686:6716): avc: denied { read } for pid=4645 comm="syz.1.1115" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 295.019001][ T30] audit: type=1400 audit(1721997893.686:6717): avc: denied { open } for pid=4645 comm="syz.1.1115" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 295.099487][ T4653] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.106365][ T4653] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.113923][ T4653] device bridge_slave_0 entered promiscuous mode [ 295.126978][ T4653] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.134247][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.141888][ T4653] device bridge_slave_1 entered promiscuous mode [ 295.221287][ T4653] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.228171][ T4653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.235540][ T4653] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.242529][ T4653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.259237][ T4333] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 295.275087][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.284760][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.293008][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.311442][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.319681][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.326646][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.334296][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.342761][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.349657][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.367799][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.375824][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.391535][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.403880][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.413208][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.420721][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.428605][ T4653] device veth0_vlan entered promiscuous mode [ 295.446014][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.455859][ T4653] device veth1_macvtap entered promiscuous mode [ 295.471902][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.484412][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.600416][ T601] device bridge_slave_1 left promiscuous mode [ 295.606618][ T601] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.614533][ T601] device bridge_slave_0 left promiscuous mode [ 295.619259][ T4333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.620767][ T601] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.639936][ T601] device veth1_macvtap left promiscuous mode [ 295.642356][ T4333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.645825][ T601] device veth0_vlan left promiscuous mode [ 295.671206][ T4333] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 295.686549][ T6] usb 4-1: USB disconnect, device number 22 [ 295.688359][ T4333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.722061][ T4333] usb 2-1: config 0 descriptor?? [ 296.180106][ T4663] loop2: detected capacity change from 0 to 128 [ 296.187556][ T4666] loop3: detected capacity change from 0 to 128 [ 296.238280][ T4663] EXT4-fs (loop2): Test dummy encryption mode enabled [ 296.247912][ T4663] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 296.261103][ T4333] uclogic 0003:28BD:0075.0025: unknown main item tag 0x0 [ 296.265230][ T4663] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038 (0x7fffffff) [ 296.268036][ T4333] uclogic 0003:28BD:0075.0025: unknown main item tag 0x0 [ 296.284515][ T4333] uclogic 0003:28BD:0075.0025: unknown main item tag 0x0 [ 296.299836][ T4666] EXT4-fs (loop3): Test dummy encryption mode enabled [ 296.313626][ T4666] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 296.326977][ T4666] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038 (0x7fffffff) [ 296.486650][ T4333] uclogic 0003:28BD:0075.0025: unknown main item tag 0x0 [ 296.562165][ T4333] uclogic 0003:28BD:0075.0025: unknown main item tag 0x0 [ 296.630518][ T4333] uclogic 0003:28BD:0075.0025: No inputs registered, leaving [ 296.697420][ T4333] uclogic 0003:28BD:0075.0025: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.1-1/input0 [ 297.544414][ T4680] loop2: detected capacity change from 0 to 128 [ 297.584192][ T4683] loop3: detected capacity change from 0 to 8192 [ 297.609658][ T4683] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 297.699331][ T4680] EXT4-fs (loop2): Test dummy encryption mode enabled [ 297.716031][ T4680] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 297.731309][ T4680] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038 (0x7fffffff) [ 297.862281][ T6] usb 2-1: USB disconnect, device number 31 [ 297.909288][ T1527] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 298.259180][ T1527] usb 4-1: device descriptor read/64, error -71 [ 298.699306][ T1527] usb 4-1: device descriptor read/64, error -71 [ 298.969261][ T1527] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 299.063629][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 299.063647][ T30] audit: type=1404 audit(1721997897.886:6762): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 299.092637][ T30] audit: type=1400 audit(1721997897.886:6763): avc: denied { read } for pid=4696 comm="syz.2.1124" dev="nsfs" ino=4026532532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 299.124481][ T30] audit: type=1400 audit(1721997897.886:6764): avc: denied { execmem } for pid=4691 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 299.147506][ T30] audit: type=1400 audit(1721997897.886:6765): avc: denied { prog_load } for pid=4693 comm="syz.0.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 299.167317][ T30] audit: type=1400 audit(1721997897.896:6766): avc: denied { execmem } for pid=4693 comm="syz.0.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 299.185336][ T4697] loop2: detected capacity change from 0 to 8192 [ 299.188102][ T30] audit: type=1400 audit(1721997897.896:6767): avc: denied { read } for pid=4693 comm="syz.0.1122" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 299.213930][ T30] audit: type=1400 audit(1721997897.896:6768): avc: denied { prog_load } for pid=4693 comm="syz.0.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 299.233178][ T30] audit: type=1404 audit(1721997897.916:6769): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 299.248014][ T30] audit: type=1400 audit(1721997897.916:6770): avc: denied { ioctl } for pid=4682 comm="syz.3.1121" path="/dev/raw-gadget" dev="devtmpfs" ino=162 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 299.253175][ T4697] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 299.272826][ T30] audit: type=1400 audit(1721997897.916:6771): avc: denied { prog_load } for pid=4682 comm="syz.3.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 299.569202][ T20] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 299.889181][ T20] usb 3-1: device descriptor read/64, error -71 [ 300.349243][ T20] usb 3-1: device descriptor read/64, error -71 [ 300.619201][ T20] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 301.079268][ T20] usb 3-1: device descriptor read/64, error -71 [ 301.509296][ T20] usb 3-1: device descriptor read/64, error -71 [ 301.629249][ T20] usb usb3-port1: attempt power cycle [ 302.059215][ T20] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 302.249243][ T20] usb 3-1: device descriptor read/8, error -71 [ 302.529272][ T20] usb 3-1: device descriptor read/8, error -71 [ 302.819249][ T20] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 303.029379][ T20] usb 3-1: device descriptor read/8, error -71 [ 303.309244][ T20] usb 3-1: device descriptor read/8, error -71 [ 303.429349][ T20] usb usb3-port1: unable to enumerate USB device [ 304.004321][ T4726] loop0: detected capacity change from 0 to 128 [ 304.090353][ T4726] EXT4-fs (loop0): Test dummy encryption mode enabled [ 304.098634][ T4726] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 304.111266][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 304.111278][ T4726] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff) [ 304.111280][ T30] audit: type=1400 audit(1721997902.936:6801): avc: denied { mount } for pid=4723 comm="syz.0.1129" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 304.589343][ T30] audit: type=1400 audit(1721997903.416:6802): avc: denied { write } for pid=4723 comm="syz.0.1129" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.611727][ T30] audit: type=1400 audit(1721997903.436:6803): avc: denied { add_name } for pid=4723 comm="syz.0.1129" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.637401][ T30] audit: type=1400 audit(1721997903.436:6804): avc: denied { create } for pid=4723 comm="syz.0.1129" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 304.660579][ T30] audit: type=1400 audit(1721997903.456:6805): avc: denied { append open } for pid=4723 comm="syz.0.1129" path="/5/mnt/cgroup.controllers" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 304.901295][ T30] audit: type=1400 audit(1721997903.726:6806): avc: denied { unmount } for pid=4653 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 307.813195][ T30] audit: type=1400 audit(1721997906.636:6807): avc: denied { create } for pid=4747 comm="syz.1.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 307.869244][ T30] audit: type=1400 audit(1721997906.666:6808): avc: denied { read } for pid=4749 comm="syz.0.1133" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 307.886027][ T4748] loop1: detected capacity change from 0 to 8192 [ 307.954021][ T30] audit: type=1400 audit(1721997906.666:6809): avc: denied { open } for pid=4749 comm="syz.0.1133" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 308.001725][ T4748] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 308.023899][ T30] audit: type=1400 audit(1721997906.666:6810): avc: denied { ioctl } for pid=4749 comm="syz.0.1133" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 308.101385][ T4754] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.108230][ T4754] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.115629][ T4754] device bridge_slave_0 entered promiscuous mode [ 308.127187][ T4754] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.134234][ T4754] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.141357][ T4754] device bridge_slave_1 entered promiscuous mode [ 308.192953][ T4754] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.199813][ T4754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.206906][ T4754] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.213710][ T4754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.237311][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.244712][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.252320][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.261635][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.269602][ T4333] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 308.277415][ T694] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.284460][ T694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.310257][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.318415][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.319655][ T1527] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 308.326412][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.340518][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.347718][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.356999][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.363856][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.371037][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.378799][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.387253][ T4754] device veth0_vlan entered promiscuous mode [ 308.400013][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.408951][ T4754] device veth1_macvtap entered promiscuous mode [ 308.424341][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.432627][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.590459][ T45] device bridge_slave_1 left promiscuous mode [ 308.596425][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.603812][ T45] device bridge_slave_0 left promiscuous mode [ 308.609188][ T1527] usb 2-1: device descriptor read/64, error -71 [ 308.609913][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.623727][ T45] device veth1_macvtap left promiscuous mode [ 308.629568][ T45] device veth0_vlan left promiscuous mode [ 308.639258][ T4333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.650009][ T4333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.659558][ T4333] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 308.668361][ T4333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.677945][ T4333] usb 1-1: config 0 descriptor?? [ 308.999237][ T1527] usb 2-1: device descriptor read/64, error -71 [ 309.171002][ T4333] uclogic 0003:28BD:0075.0026: unknown main item tag 0x0 [ 309.177911][ T4333] uclogic 0003:28BD:0075.0026: unknown main item tag 0x0 [ 309.184870][ T4333] uclogic 0003:28BD:0075.0026: unknown main item tag 0x0 [ 309.191816][ T4333] uclogic 0003:28BD:0075.0026: unknown main item tag 0x0 [ 309.198576][ T4333] uclogic 0003:28BD:0075.0026: unknown main item tag 0x0 [ 309.205818][ T4333] uclogic 0003:28BD:0075.0026: No inputs registered, leaving [ 309.213550][ T4333] uclogic 0003:28BD:0075.0026: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.0-1/input0 [ 309.269248][ T1527] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 309.539217][ T1527] usb 2-1: device descriptor read/64, error -71 [ 309.929441][ T1527] usb 2-1: device descriptor read/64, error -71 remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 1: Operation not permitted) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=4 req=1102 state=1 status=1 (errno 9: Bad file descriptor) [ 310.038162][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 310.038179][ T30] audit: type=1400 audit(1721997908.856:6824): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[14414]" dev="pipefs" ino=14414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 310.069266][ T1527] usb usb2-port1: attempt power cycle [ 310.213819][ T20] usb 1-1: USB disconnect, device number 33 [ 310.800123][ T45] device bridge_slave_1 left promiscuous mode [ 310.806143][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.813600][ T45] device bridge_slave_0 left promiscuous mode [ 310.819653][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.827307][ T45] device veth1_macvtap left promiscuous mode [ 310.833179][ T45] device veth0_vlan left promiscuous mode [ 312.010313][ T45] device bridge_slave_1 left promiscuous mode [ 312.016260][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.023663][ T45] device bridge_slave_0 left promiscuous mode [ 312.029713][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.037446][ T45] device bridge_slave_1 left promiscuous mode [ 312.043473][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.050800][ T45] device bridge_slave_0 left promiscuous mode [ 312.056717][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.064738][ T45] device bridge_slave_1 left promiscuous mode [ 312.070753][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.077990][ T45] device bridge_slave_0 left promiscuous mode [ 312.084082][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.092206][ T45] device veth1_macvtap left promiscuous mode [ 312.098003][ T45] device veth0_vlan left promiscuous mode [ 312.103868][ T45] device veth1_macvtap left promiscuous mode [ 312.109720][ T45] device veth0_vlan left promiscuous mode [ 312.115341][ T45] device veth1_macvtap left promiscuous mode [ 312.121148][ T45] device veth0_vlan left promiscuous mode