last executing test programs: 3.843446394s ago: executing program 2 (id=272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000092900000000000000000001850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$cgroup_pid(r1, &(0x7f00000031c0), 0x12) 3.842664954s ago: executing program 2 (id=273): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18001f000000ffffffff13000000000095be427ee7fdc4063294ac2fa1661ac3020bf4393ffc0046b04f909d0135c763f72e7b04d96dccf61ffcdb4ffe7c05d989eac53ca1fee8a71d812a4ce6e38639ddefb14ec87a2a33071a1f1d9dd998f967a1bfbb411228ce75ed33a636ef82bdfad3db1f6b0204a483c4a90530e39d90c86234ddf17c904321d71c5ee9961eadf29479603a7022efb57d69cfc2ee45b842f29c8e270f49"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000004340)={&(0x7f0000004300)='ext4_drop_inode\x00', r0}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r3 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) mount$bind(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x84000, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005f00)={r3, r2, 0x0, 0x0, 0x0}, 0x30) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='ext4_drop_inode\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2800052, &(0x7f0000000500), 0x41, 0x4d1, &(0x7f0000001440)="$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") ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) 3.7698035s ago: executing program 0 (id=274): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000092900000000000000000001850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) 3.686020647s ago: executing program 0 (id=276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000088a8"], 0x0) 3.628317871s ago: executing program 2 (id=277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) close_range(r1, 0xffffffffffffffff, 0x0) 3.617332743s ago: executing program 0 (id=278): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.546074648s ago: executing program 0 (id=279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) 3.545493878s ago: executing program 0 (id=280): setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000380), 0x5}, 0x38) socket(0x0, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x7d0d3000) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwrite64(r4, &(0x7f0000000280)='+', 0x1, 0x0) 3.475718844s ago: executing program 2 (id=281): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000780)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 2.843615376s ago: executing program 1 (id=291): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) 2.842902866s ago: executing program 1 (id=294): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000ad90000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmsg$unix(r4, &(0x7f0000000880)={&(0x7f0000000440)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x162) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}}) 2.825233088s ago: executing program 1 (id=295): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000092900000000000000000001850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$cgroup_pid(r1, &(0x7f00000031c0), 0x12) 1.122888998s ago: executing program 0 (id=297): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb653, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="002207000000ab34f5ac1d95"], 0x0}, 0x0) 1.122545658s ago: executing program 1 (id=298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000002300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x414e, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.121852018s ago: executing program 4 (id=299): r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000302015b800000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28811, r2, 0x0) ftruncate(r2, 0xc17a) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 1.034633635s ago: executing program 4 (id=300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000088a8"], 0x0) 1.034122945s ago: executing program 4 (id=301): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 926.775244ms ago: executing program 4 (id=304): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18001f000000ffffffff13000000000095be427ee7fdc4063294ac2fa1661ac3020bf4393ffc0046b04f909d0135c763f72e7b04d96dccf61ffcdb4ffe7c05d989eac53ca1fee8a71d812a4ce6e38639ddefb14ec87a2a33071a1f1d9dd998f967a1bfbb411228ce75ed33a636ef82bdfad3db1f6b0204a483c4a90530e39d90c86234ddf17c904321d71c5ee9961eadf29479603a7022efb57d69cfc2ee45b842f29c8e270f49"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000004340)={&(0x7f0000004300)='ext4_drop_inode\x00', r0}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r3 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) mount$bind(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x84000, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005f00)={r3, r2, 0x0, 0x0, 0x0}, 0x30) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='ext4_drop_inode\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2800052, &(0x7f0000000500), 0x41, 0x4d1, &(0x7f0000001440)="$eJzs3VFrXFkdAPD/vcnspt2sk3V92F1wXdyVdNHOJI1tgw9tBdGnglrfY0wmIWSSCcmkbUKRFD+AIKKCTz75IvgBBOlHEKGg76JFEW31wQd1ZO7ciWky06Q4mesmvx/c3HPuuTf//xmYO3PmHu4N4Nx6LyJuRcRIRHwYEeV8e5ovc+3KXme/Z08fLLSXJFqtO39JIsm3df9Xkq9f6xwSYxHx9a9EfCvpFXl3db5er23mtWpzbaO6tbN7eWVtfrm2XFufmZm+Nnt99urs1Mk7k/ZvmoiIG1968oPv/vTLN375uXu/m/vTpW+30xrP2w/2Y5A6XS9lr0XXaERsnkawgoxmPQQA4KPgzYj4eER8Ovv+X46R7NscAAAAcJa0bo7HP5OIFgAAAHBmpdkc2CSt5NNnxyNNK5XOHN5PxMW03thqfnapsb2+2GmfiFK6tFKvTeVzhSeilLTr0/kc2279yqH6TES8ERHfL1/I6pWFRn2x6B8/AAAA4Jx47dD4/+/lzvj/kI1CkgMAAAAGZ6LoBAAAAIBTZ/wPAAAAZ5/xPwAAAJxpX719u720us+/Xry7s73auHt5sba1WlnbXqgsNDY3KsuNxnJ2z7614/5fvdHY+Hysb9+vNmtbzerWzu7cWmN7vTm38twjsAEAAIAheuNTj36bRMTeFy5kS9vbRScFDEX6Mjv/4fTyAIZvpOgEgMKMFp0AUJhS0QkAhUuOaf9Yv4ZfDT4XAADgdEy+ffT6f7nopICheKnr/wDAmeD6P5xfJTMA4dzre30/1/fmHUeu/9/ss2Or9dJJAQAAAzWeLUlaya8FjkeaVioRr2ePBSglSyv12lQ+PvhNufRquz6dHZkcO2cYAAAAAAAAAAAAAAAAAAAAAAAAAOhotZJoAQAAAGdaRPrHJLubf8Rk+YPxw78PvJL8o5ytI+Lej+/88P58s7k53d7+1/3tzR/l268U8QsGAAAAnBNPTv4kvu44vTuOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBBevb0wUJ3GWbcP38xIiZ6xR+NsWw9FqWIuPi3JEYPHJdExMgA4u89jIi3esVP2mnFRJ5Fr/gXhh4/2T8uHUBsOO8etc8/t3q9/9J4L1v3fv+P5sv/qv/5L90//430Of+8fsIY7zz+ebVv/IcR74z2Pv904ydZtKPx3z9h/G9+Y3f3QPXVg22tn0RM9vz8SZ6LVW2ubVS3dnYvr6zNL9eWa+szM9PXZq/PXp2dqi6t1Gv5357xv/fJX/z7Rf2/2Cf+xH7/e7/+H5yw//96fP/pm51iqVf8S+/3/vx9q0/8NP/s+0xebrdPdst7nfJB7/7s1+++qP+Lffo/dkz/L52w/x9+7Tu/P+GuAMAQbO3srs7X67VNBYUCCq/E/0UaCkcKRZ+ZAACAQfvvl/6iMwEAAAAAAAAAAAAAAAAAAIDzaxi3Ezscc6+YrgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvNB/AgAA//+tR9Pt") ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) 909.431175ms ago: executing program 1 (id=306): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000ad90000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmsg$unix(r3, &(0x7f0000000880)={&(0x7f0000000440)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x162) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}}) 864.467798ms ago: executing program 2 (id=282): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000002c0), 0x10, 0x0}, 0x0) 206.429623ms ago: executing program 1 (id=309): setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000380), 0x5}, 0x38) socket(0x0, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x7d0d3000) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwrite64(r4, &(0x7f0000000280)='+', 0x1, 0x0) 205.561013ms ago: executing program 4 (id=311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000088a8"], 0x0) 176.063906ms ago: executing program 3 (id=314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) 122.15922ms ago: executing program 3 (id=315): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000092900000000000000000001850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) 108.525031ms ago: executing program 3 (id=316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000002300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x414e, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 57.085575ms ago: executing program 2 (id=282): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000002c0), 0x10, 0x0}, 0x0) 22.486098ms ago: executing program 3 (id=317): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000780)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 22.121538ms ago: executing program 4 (id=313): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10.926809ms ago: executing program 3 (id=318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000092900000000000000000001850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$cgroup_pid(r1, &(0x7f00000031c0), 0x12) 0s ago: executing program 3 (id=319): r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000302015b800000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28811, r2, 0x0) ftruncate(r2, 0xc17a) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') kernel console output (not intermixed with test programs): tclass=fifo_file permissive=1 [ 13.097178][ T30] audit: type=1400 audit(1722311236.426:64): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.100584][ T30] audit: type=1400 audit(1722311236.426:65): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.150' (ED25519) to the list of known hosts. [ 19.782867][ T30] audit: type=1400 audit(1722311243.126:66): avc: denied { integrity } for pid=279 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 19.806208][ T30] audit: type=1400 audit(1722311243.146:67): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.807236][ T279] cgroup: Unknown subsys name 'net' [ 19.829076][ T30] audit: type=1400 audit(1722311243.146:68): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.855817][ T30] audit: type=1400 audit(1722311243.176:69): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.855977][ T279] cgroup: Unknown subsys name 'devices' [ 19.969687][ T279] cgroup: Unknown subsys name 'hugetlb' [ 19.975107][ T279] cgroup: Unknown subsys name 'rlimit' [ 20.136724][ T30] audit: type=1400 audit(1722311243.476:70): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.159673][ T30] audit: type=1400 audit(1722311243.476:71): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.168372][ T282] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.184403][ T30] audit: type=1400 audit(1722311243.476:72): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.215561][ T30] audit: type=1400 audit(1722311243.546:73): avc: denied { relabelto } for pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.220576][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.241036][ T30] audit: type=1400 audit(1722311243.546:74): avc: denied { write } for pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.274998][ T30] audit: type=1400 audit(1722311243.566:75): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.539916][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.546968][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.554347][ T290] device bridge_slave_0 entered promiscuous mode [ 21.566290][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.573167][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.580621][ T290] device bridge_slave_1 entered promiscuous mode [ 21.623594][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.630491][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.638121][ T289] device bridge_slave_0 entered promiscuous mode [ 21.644919][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.651850][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.658936][ T289] device bridge_slave_1 entered promiscuous mode [ 21.731996][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.738883][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.745943][ T293] device bridge_slave_0 entered promiscuous mode [ 21.756995][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.763876][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.771070][ T293] device bridge_slave_1 entered promiscuous mode [ 21.802214][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.809149][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.816199][ T292] device bridge_slave_0 entered promiscuous mode [ 21.823306][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.830205][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.837668][ T292] device bridge_slave_1 entered promiscuous mode [ 21.848432][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.855283][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.862900][ T291] device bridge_slave_0 entered promiscuous mode [ 21.882823][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.889882][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.896988][ T291] device bridge_slave_1 entered promiscuous mode [ 21.973383][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.980334][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.987421][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.994226][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.034388][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.041332][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.048458][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.055289][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.084022][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.090900][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.098023][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.104760][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.124809][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.131669][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.138766][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.145540][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.173593][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.180458][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.187567][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.194373][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.206003][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.213176][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.220475][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.227827][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.234905][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.242272][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.249329][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.256277][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.263218][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.270171][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.277002][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.307118][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.314675][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.322657][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.329500][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.336643][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.344592][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.351459][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.358702][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.366078][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.373372][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.381335][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.389093][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.396998][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.403755][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.410904][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.418941][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.426194][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.445236][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.452811][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.461155][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.468514][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.488897][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.497371][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.505444][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.512313][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.519547][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.527261][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.535342][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.542198][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.553577][ T289] device veth0_vlan entered promiscuous mode [ 22.569092][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.577284][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.585647][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.593465][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.601604][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.609582][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.617255][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.625388][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.633301][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.640180][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.647546][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.656051][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.664053][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.671016][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.678258][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.685559][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.695932][ T289] device veth1_macvtap entered promiscuous mode [ 22.704865][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.713049][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.721160][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.728631][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.736398][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.744244][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.752112][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.760076][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.768169][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.782582][ T293] device veth0_vlan entered promiscuous mode [ 22.800449][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.809367][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.818311][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.826022][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.834424][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.842413][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.850429][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.858886][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.866995][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.873762][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.881066][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.889172][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.897402][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.905504][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.913721][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.921062][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.933685][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.942006][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.956257][ T290] device veth0_vlan entered promiscuous mode [ 22.963737][ T293] device veth1_macvtap entered promiscuous mode [ 22.971842][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.979274][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.987335][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.995809][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.003568][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.011705][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.019283][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.035011][ T291] device veth0_vlan entered promiscuous mode [ 23.048299][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.056219][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.064575][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.072602][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.080491][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.088539][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.096560][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.104370][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.112061][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.120140][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.128308][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.136252][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.144609][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.151921][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.170322][ T291] device veth1_macvtap entered promiscuous mode [ 23.177905][ T291] IPv6: veth0_to_batadv: Failed to add prefix route for address fe80::3c; dropping [ 23.195339][ T292] device veth0_vlan entered promiscuous mode [ 23.203801][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.212484][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.220732][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.228240][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.236248][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.244668][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.253054][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.271836][ T290] device veth1_macvtap entered promiscuous mode [ 23.280781][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.289458][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.297523][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.305292][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.314415][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.322808][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.331129][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.347833][ T292] device veth1_macvtap entered promiscuous mode [ 23.382397][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.390538][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.398761][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.406921][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.415511][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.457662][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.460320][ T323] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.467629][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.490419][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.498602][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.559401][ T331] tipc: Can't bind to reserved service type 0 [ 23.691284][ T338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 23.757810][ T348] netlink: 'syz.4.12': attribute type 17 has an invalid length. [ 23.808150][ T348] netlink: 'syz.4.12': attribute type 27 has an invalid length. [ 23.950309][ T337] loop1: detected capacity change from 0 to 40427 [ 24.008712][ T337] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 24.017317][ T337] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 24.077713][ T337] F2FS-fs (loop1): Found nat_bits in checkpoint [ 24.103462][ T375] netlink: 'syz.0.23': attribute type 17 has an invalid length. [ 24.149870][ T337] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 24.157382][ T337] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 24.285268][ T390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 24.398105][ T313] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.709067][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 24.838033][ T313] usb 4-1: config 0 has no interfaces? [ 24.888861][ T425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 24.958033][ T313] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 24.969471][ T421] loop4: detected capacity change from 0 to 40427 [ 24.972389][ T313] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 25.004517][ T313] usb 4-1: Product: syz [ 25.008714][ T313] usb 4-1: Manufacturer: syz [ 25.014069][ T313] usb 4-1: config 0 descriptor?? [ 25.029346][ T421] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 25.036889][ T421] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 25.056028][ T421] F2FS-fs (loop4): Found nat_bits in checkpoint [ 25.096733][ T421] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 25.103664][ T421] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 25.217989][ T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.302584][ T394] usb 4-1: USB disconnect, device number 2 [ 25.530930][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 25.530942][ T30] audit: type=1400 audit(1722311248.876:137): avc: denied { name_bind } for pid=439 comm="syz.1.45" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 25.558275][ T30] audit: type=1400 audit(1722311248.876:138): avc: denied { node_bind } for pid=439 comm="syz.1.45" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.585401][ T30] audit: type=1400 audit(1722311248.906:139): avc: denied { create } for pid=439 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 25.605562][ T30] audit: type=1400 audit(1722311248.906:140): avc: denied { write } for pid=439 comm="syz.1.45" path="socket:[15273]" dev="sockfs" ino=15273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 25.675750][ T30] audit: type=1400 audit(1722311248.906:141): avc: denied { nlmsg_read } for pid=439 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 25.789843][ T30] audit: type=1400 audit(1722311249.136:142): avc: denied { create } for pid=456 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.808911][ T311] usb 1-1: config 0 has an invalid interface number: 207 but max is 1 [ 25.816953][ T311] usb 1-1: config 0 has no interface number 1 [ 25.823237][ T30] audit: type=1400 audit(1722311249.136:143): avc: denied { bind } for pid=456 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.823648][ T311] usb 1-1: config 0 interface 207 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 25.851407][ T459] xt_CT: You must specify a L4 protocol and not use inversions on it [ 25.853252][ T311] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 25.878055][ T30] audit: type=1400 audit(1722311249.136:144): avc: denied { setopt } for pid=456 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.900032][ T30] audit: type=1400 audit(1722311249.136:145): avc: denied { write } for pid=456 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.941265][ T30] audit: type=1400 audit(1722311249.286:146): avc: denied { write } for pid=469 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.048133][ T311] usb 1-1: New USB device found, idVendor=12d1, idProduct=7990, bcdDevice=be.8f [ 26.067661][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.076010][ T311] usb 1-1: Product: syz [ 26.087961][ T311] usb 1-1: Manufacturer: syz [ 26.092437][ T311] usb 1-1: SerialNumber: syz [ 26.093684][ T472] loop4: detected capacity change from 0 to 40427 [ 26.105727][ T311] usb 1-1: config 0 descriptor?? [ 26.140264][ T472] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 26.155458][ T472] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 26.169613][ T472] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.208236][ T472] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 26.215127][ T472] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 26.237969][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.439798][ T313] usb 1-1: USB disconnect, device number 2 [ 26.678002][ T6] usb 2-1: device descriptor read/64, error -71 [ 26.887667][ T497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 27.067969][ T6] usb 2-1: device descriptor read/64, error -71 [ 27.337957][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.348452][ T294] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.437979][ T311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.597963][ T294] usb 3-1: Using ep0 maxpacket: 32 [ 27.608080][ T6] usb 2-1: device descriptor read/64, error -71 [ 27.678023][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 27.718075][ T294] usb 3-1: config 0 has no interfaces? [ 27.798047][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 27.807519][ T311] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 27.817390][ T311] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 27.848045][ T294] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 27.857236][ T294] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 27.865479][ T294] usb 3-1: Product: syz [ 27.869573][ T294] usb 3-1: Manufacturer: syz [ 27.877862][ T294] usb 3-1: config 0 descriptor?? [ 27.961446][ T528] loop4: detected capacity change from 0 to 40427 [ 27.988223][ T311] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 27.997290][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.005227][ T6] usb 2-1: device descriptor read/64, error -71 [ 28.008464][ T528] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 28.014533][ T311] usb 4-1: Product: syz [ 28.023048][ T311] usb 4-1: Manufacturer: syz [ 28.023254][ T528] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 28.027681][ T311] usb 4-1: SerialNumber: syz [ 28.041311][ T311] usb 4-1: config 0 descriptor?? [ 28.048543][ T528] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.058117][ T521] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 28.074209][ T528] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 28.081223][ T528] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 28.120359][ T311] usb 3-1: USB disconnect, device number 2 [ 28.148383][ T6] usb usb2-port1: attempt power cycle [ 28.376674][ T313] usb 4-1: USB disconnect, device number 3 [ 28.655650][ T539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 28.668082][ T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.838034][ T6] usb 2-1: device descriptor read/8, error -71 [ 28.997959][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.047972][ T6] usb 2-1: device descriptor read/8, error -71 [ 29.357995][ T311] usb 3-1: config 0 has an invalid interface number: 207 but max is 1 [ 29.369421][ T311] usb 3-1: config 0 has no interface number 1 [ 29.380774][ T311] usb 3-1: config 0 interface 207 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 29.402072][ T311] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 29.538032][ T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 29.578069][ T311] usb 3-1: New USB device found, idVendor=12d1, idProduct=7990, bcdDevice=be.8f [ 29.590194][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.606709][ T311] usb 3-1: Product: syz [ 29.615053][ T311] usb 3-1: Manufacturer: syz [ 29.623774][ T311] usb 3-1: SerialNumber: syz [ 29.638264][ T311] usb 3-1: config 0 descriptor?? [ 29.748124][ T6] usb 2-1: config 0 has an invalid interface number: 171 but max is 1 [ 29.756233][ T6] usb 2-1: config 0 has an invalid descriptor of length 166, skipping remainder of the config [ 29.766418][ T6] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 29.775109][ T6] usb 2-1: config 0 has no interface number 0 [ 29.781212][ T6] usb 2-1: config 0 interface 171 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 29.796958][ T567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 29.882171][ T313] usb 3-1: USB disconnect, device number 3 [ 29.968009][ T6] usb 2-1: New USB device found, idVendor=06f8, idProduct=3002, bcdDevice=7c.0e [ 29.987969][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.996235][ T6] usb 2-1: Product: syz [ 30.007970][ T6] usb 2-1: Manufacturer: syz [ 30.012395][ T6] usb 2-1: SerialNumber: syz [ 30.024871][ T6] usb 2-1: config 0 descriptor?? [ 30.040408][ T576] loop3: detected capacity change from 0 to 40427 [ 30.050436][ T576] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 30.058251][ T576] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 30.081523][ T576] F2FS-fs (loop3): Found nat_bits in checkpoint [ 30.121410][ T576] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 30.128345][ T576] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 30.198129][ T394] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 30.223573][ T585] loop0: detected capacity change from 0 to 40427 [ 30.306630][ T39] usb 2-1: USB disconnect, device number 5 [ 30.378945][ T585] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 30.407859][ T585] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 30.448178][ T394] usb 5-1: Using ep0 maxpacket: 32 [ 30.474690][ T585] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.514214][ T585] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 30.521209][ T585] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 30.568087][ T394] usb 5-1: config 0 has no interfaces? [ 30.688884][ T394] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 30.698479][ T394] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 30.706917][ T394] usb 5-1: Product: syz [ 30.722238][ T394] usb 5-1: Manufacturer: syz [ 30.736800][ T394] usb 5-1: config 0 descriptor?? [ 30.857835][ T603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 30.895469][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 30.895483][ T30] audit: type=1400 audit(1722311254.236:153): avc: denied { shutdown } for pid=606 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.039478][ T394] usb 5-1: USB disconnect, device number 2 [ 31.057981][ T39] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.124136][ T30] audit: type=1400 audit(1722311254.466:154): avc: denied { create } for pid=622 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.143374][ T30] audit: type=1400 audit(1722311254.466:155): avc: denied { bind } for pid=622 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.187952][ T30] audit: type=1400 audit(1722311254.466:156): avc: denied { connect } for pid=622 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.297969][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 31.317988][ T20] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.343243][ T630] loop1: detected capacity change from 0 to 40427 [ 31.391870][ T630] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 31.399497][ T630] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 31.410080][ T630] F2FS-fs (loop1): Found nat_bits in checkpoint [ 31.418047][ T39] usb 3-1: config 0 has no interfaces? [ 31.452213][ T630] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 31.459308][ T630] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 31.504386][ T638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=638 comm=syz.0.114 [ 31.517307][ T638] Zero length message leads to an empty skb [ 31.550661][ T30] audit: type=1400 audit(1722311254.896:157): avc: denied { ioctl } for pid=642 comm="syz.4.116" path="/dev/input/event0" dev="devtmpfs" ino=164 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.557397][ T640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 31.583975][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 31.630527][ T39] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 31.645769][ T39] usb 3-1: Product: syz [ 31.650657][ T39] usb 3-1: Manufacturer: syz [ 31.685502][ T39] usb 3-1: config 0 descriptor?? [ 31.898052][ T20] usb 4-1: config 0 has an invalid interface number: 207 but max is 1 [ 31.916197][ T20] usb 4-1: config 0 has no interface number 1 [ 31.922246][ T20] usb 4-1: config 0 interface 207 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 31.931285][ T39] usb 3-1: USB disconnect, device number 4 [ 31.941449][ T20] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 31.947787][ T652] loop0: detected capacity change from 0 to 40427 [ 32.008878][ T652] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 32.016669][ T652] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 32.027845][ T652] F2FS-fs (loop0): Found nat_bits in checkpoint [ 32.118428][ T652] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 32.125549][ T652] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 32.158038][ T20] usb 4-1: New USB device found, idVendor=12d1, idProduct=7990, bcdDevice=be.8f [ 32.167184][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.178167][ T20] usb 4-1: Product: syz [ 32.182163][ T20] usb 4-1: Manufacturer: syz [ 32.186582][ T20] usb 4-1: SerialNumber: syz [ 32.191935][ T20] usb 4-1: config 0 descriptor?? [ 32.233774][ T678] xt_CT: You must specify a L4 protocol and not use inversions on it [ 32.523852][ T39] usb 4-1: USB disconnect, device number 4 [ 32.578335][ T30] audit: type=1400 audit(1722311255.926:158): avc: denied { setopt } for pid=693 comm="syz.4.136" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.746813][ T708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 32.777744][ T698] loop2: detected capacity change from 0 to 40427 [ 32.789258][ T698] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 32.797542][ T698] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 32.812689][ T698] F2FS-fs (loop2): Found nat_bits in checkpoint [ 32.825937][ T30] audit: type=1400 audit(1722311256.166:159): avc: denied { create } for pid=714 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 32.862832][ T698] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 32.870080][ T698] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 32.989153][ T735] netlink: 48 bytes leftover after parsing attributes in process `syz.4.153'. [ 32.997971][ T20] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.272986][ T744] xt_CT: You must specify a L4 protocol and not use inversions on it [ 33.274276][ T746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=746 comm=syz.4.157 [ 33.437957][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 33.488703][ T743] loop0: detected capacity change from 0 to 40427 [ 33.510140][ T743] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 33.528036][ T743] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 33.540237][ T743] F2FS-fs (loop0): Found nat_bits in checkpoint [ 33.568063][ T20] usb 2-1: config 0 has no interfaces? [ 33.573154][ T775] xt_CT: You must specify a L4 protocol and not use inversions on it [ 33.599510][ T743] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 33.606370][ T743] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 33.684382][ T30] audit: type=1400 audit(1722311257.026:160): avc: denied { create } for pid=779 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.705089][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 33.705996][ T30] audit: type=1400 audit(1722311257.046:161): avc: denied { write } for pid=779 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.717351][ T20] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 33.742848][ T20] usb 2-1: Product: syz [ 33.747051][ T20] usb 2-1: Manufacturer: syz [ 33.752232][ T20] usb 2-1: config 0 descriptor?? [ 33.838042][ T39] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.878046][ T313] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 34.026889][ T312] usb 2-1: USB disconnect, device number 6 [ 34.148048][ T313] usb 5-1: Using ep0 maxpacket: 16 [ 34.268093][ T39] usb 4-1: config 0 has an invalid interface number: 207 but max is 1 [ 34.276168][ T313] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 34.289080][ T39] usb 4-1: config 0 has no interface number 1 [ 34.295157][ T39] usb 4-1: config 0 interface 207 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 34.306053][ T39] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 34.448137][ T313] usb 5-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.40 [ 34.457110][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.471099][ T39] usb 4-1: New USB device found, idVendor=12d1, idProduct=7990, bcdDevice=be.8f [ 34.486666][ T313] usb 5-1: Product: syz [ 34.493758][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.504838][ T313] usb 5-1: Manufacturer: syz [ 34.510075][ T313] usb 5-1: SerialNumber: syz [ 34.515239][ T39] usb 4-1: Product: syz [ 34.520431][ T39] usb 4-1: Manufacturer: syz [ 34.525639][ T39] usb 4-1: SerialNumber: syz [ 34.543450][ T39] usb 4-1: config 0 descriptor?? [ 34.558670][ T313] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 34.572934][ T806] xt_CT: You must specify a L4 protocol and not use inversions on it [ 34.710741][ T798] loop0: detected capacity change from 0 to 40427 [ 34.728120][ T798] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 34.741170][ T798] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 34.766088][ T798] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.793928][ T39] usb 4-1: USB disconnect, device number 5 [ 34.812091][ T798] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 34.819268][ T798] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 34.880959][ T819] loop1: detected capacity change from 0 to 40427 [ 34.901358][ T819] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 34.909199][ T819] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 34.920280][ T819] F2FS-fs (loop1): Found nat_bits in checkpoint [ 34.949678][ T819] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 34.956547][ T819] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 34.964109][ T778] UDC core: couldn't find an available UDC or it's busy: -16 [ 34.971441][ T778] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.979379][ T312] usb 5-1: USB disconnect, device number 3 [ 35.423384][ T30] audit: type=1400 audit(1722311258.766:162): avc: denied { create } for pid=841 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 35.487316][ T852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 35.689623][ T876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 35.946108][ T907] xt_CT: You must specify a L4 protocol and not use inversions on it [ 35.954381][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 35.954393][ T30] audit: type=1400 audit(1722311259.306:173): avc: denied { ioctl } for pid=904 comm="syz.1.219" path="socket:[17302]" dev="sockfs" ino=17302 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.981620][ T862] loop4: detected capacity change from 0 to 40427 [ 36.071244][ T862] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 36.082179][ T862] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 36.097511][ T882] loop3: detected capacity change from 0 to 40427 [ 36.114338][ T862] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.144668][ T882] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 36.156735][ T882] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 36.182803][ T929] netlink: 64 bytes leftover after parsing attributes in process `syz.1.229'. [ 36.215773][ T882] F2FS-fs (loop3): Found nat_bits in checkpoint [ 36.232635][ T862] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 36.242437][ T862] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.274294][ T940] xt_CT: You must specify a L4 protocol and not use inversions on it [ 36.352795][ T882] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 36.353018][ T30] audit: type=1400 audit(1722311259.696:174): avc: denied { ioctl } for pid=943 comm="syz.0.234" path="cgroup:[4026532287]" dev="nsfs" ino=4026532287 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.359899][ T882] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 37.001577][ T30] audit: type=1400 audit(1722311260.346:175): avc: denied { create } for pid=949 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 37.137466][ T30] audit: type=1400 audit(1722311260.476:176): avc: denied { create } for pid=963 comm="syz.4.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.197021][ T30] audit: type=1400 audit(1722311260.516:177): avc: denied { write } for pid=966 comm="syz.4.242" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.260611][ T977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 37.271773][ T30] audit: type=1400 audit(1722311260.576:178): avc: denied { ioctl } for pid=972 comm="syz.2.245" path="socket:[18276]" dev="sockfs" ino=18276 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.563061][ T984] loop2: detected capacity change from 0 to 40427 [ 37.638903][ T984] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 37.656809][ T984] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 37.725539][ T984] F2FS-fs (loop2): Found nat_bits in checkpoint [ 37.725941][ T980] loop4: detected capacity change from 0 to 40427 [ 37.814847][ T984] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 37.818421][ T980] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 37.830017][ T984] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 37.847221][ T980] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 37.856160][ T30] audit: type=1400 audit(1722311261.196:179): avc: denied { name_bind } for pid=1009 comm="syz.0.259" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 37.882179][ T980] F2FS-fs (loop4): Found nat_bits in checkpoint [ 37.956544][ T980] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 37.967722][ T980] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 38.412480][ T30] audit: type=1400 audit(1722311261.756:180): avc: denied { read write } for pid=1027 comm="syz.3.265" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.436091][ T30] audit: type=1400 audit(1722311261.756:181): avc: denied { open } for pid=1027 comm="syz.3.265" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.602606][ T30] audit: type=1404 audit(1722311261.946:182): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 38.635205][ T1050] ======================================================= [ 38.635205][ T1050] WARNING: The mand mount option has been deprecated and [ 38.635205][ T1050] and is ignored by this kernel. Remove the mand [ 38.635205][ T1050] option from the mount to silence this warning. [ 38.635205][ T1050] ======================================================= [ 38.731865][ T1050] loop2: detected capacity change from 0 to 512 [ 38.944920][ T293] syz-executor (293) used greatest stack depth: 20880 bytes left [ 39.007996][ T20] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 39.438653][ T328] device bridge_slave_1 left promiscuous mode [ 39.445790][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.454964][ T328] device bridge_slave_0 left promiscuous mode [ 39.461747][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.471258][ T328] device veth1_macvtap left promiscuous mode [ 39.478867][ T328] device veth0_vlan left promiscuous mode [ 39.696891][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.703925][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.711738][ T1122] device bridge_slave_0 entered promiscuous mode [ 39.718761][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.725689][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.732965][ T1122] device bridge_slave_1 entered promiscuous mode [ 39.777055][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.783918][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.791284][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.798248][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.815520][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.823574][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.830968][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.840699][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.849126][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.856139][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.874705][ T1122] device veth0_vlan entered promiscuous mode [ 39.881478][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.890098][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.899167][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.906767][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.914049][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.922157][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.929020][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.936162][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.944129][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.958866][ T1122] device veth1_macvtap entered promiscuous mode [ 39.965386][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.973501][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.981561][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.996982][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.005589][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.013931][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.022046][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.548803][ T328] device bridge_slave_1 left promiscuous mode [ 40.554860][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.562143][ T328] device bridge_slave_0 left promiscuous mode [ 40.568134][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.575696][ T328] device veth1_macvtap left promiscuous mode [ 40.581870][ T328] device veth0_vlan left promiscuous mode [ 41.345731][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 41.345744][ T30] audit: type=1400 audit(1722311264.686:358): avc: denied { map_create } for pid=1129 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.400707][ T30] audit: type=1400 audit(1722311264.686:359): avc: denied { read write } for pid=1130 comm="syz.0.297" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.498355][ T30] audit: type=1400 audit(1722311264.686:360): avc: denied { open } for pid=1130 comm="syz.0.297" path="/dev/raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.531359][ T30] audit: type=1400 audit(1722311264.686:361): avc: denied { ioctl } for pid=1130 comm="syz.0.297" path="/dev/raw-gadget" dev="devtmpfs" ino=162 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.559444][ T30] audit: type=1400 audit(1722311264.696:362): avc: denied { map_read map_write } for pid=1129 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.587444][ T30] audit: type=1400 audit(1722311264.796:363): avc: denied { read } for pid=1142 comm="syz.4.301" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 41.613164][ T30] audit: type=1400 audit(1722311264.796:364): avc: denied { open } for pid=1142 comm="syz.4.301" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 41.614488][ T1153] loop4: detected capacity change from 0 to 512 [ 41.636449][ T524] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 41.649763][ T30] audit: type=1400 audit(1722311264.796:365): avc: denied { ioctl } for pid=1142 comm="syz.4.301" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 41.676145][ T30] audit: type=1404 audit(1722311264.796:366): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 41.691666][ T30] audit: type=1400 audit(1722311264.806:367): avc: denied { read write } for pid=1122 comm="syz-executor" name="loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 41.729808][ T1153] EXT4-fs error (device loop4): ext4_find_extent:929: inode #4: comm syz.4.304: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 41.746788][ T1153] EXT4-fs warning (device loop4): ext4_enable_quotas:6410: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 41.763248][ T1153] EXT4-fs (loop4): mount failed [ 42.017685][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.024708][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.032204][ T524] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 42.033424][ T1167] device bridge_slave_0 entered promiscuous mode [ 42.043305][ T524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.090246][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.104858][ T1175] overlayfs: failed to resolve './file1': -2 [ 42.120440][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.130624][ T1167] device bridge_slave_1 entered promiscuous mode [ 42.277423][ T524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.287128][ T524] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 42.299993][ T524] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 42.308834][ T524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.308925][ T1179] input: syz0 as /devices/virtual/input/input4 [ 42.324444][ T524] usb 1-1: config 0 descriptor?? [ 42.367985][ T524] usb 1-1: can't set config #0, error -71 [ 42.378997][ T524] usb 1-1: USB disconnect, device number 3 SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: netlink_send_ext: short netlink write wrote=-1, want=40 (errno 13: Permission denied) loop exited with status 67 SYZFAIL: netlink_send_ext: short netlink write wrote=-1, want=40 (errno 13: Permission denied) loop exited with status 67 SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=2 req=282 state=1 status=1 (errno 9: Bad file descriptor) [ 42.779462][ T289] syz-executor (289) used greatest stack depth: 20344 bytes left [ 43.508464][ T45] device bridge_slave_1 left promiscuous mode [ 43.514441][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.521607][ T45] device bridge_slave_0 left promiscuous mode [ 43.527541][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.535243][ T45] device bridge_slave_1 left promiscuous mode [ 43.541309][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.548524][ T45] device bridge_slave_0 left promiscuous mode [ 43.554434][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.561996][ T45] device veth1_macvtap left promiscuous mode [ 43.567794][ T45] device veth0_vlan left promiscuous mode [ 45.589272][ T45] device bridge_slave_1 left promiscuous mode [ 45.595344][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.602736][ T45] device bridge_slave_0 left promiscuous mode [ 45.608707][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.616257][ T45] device bridge_slave_1 left promiscuous mode [ 45.622271][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.629533][ T45] device bridge_slave_0 left promiscuous mode [ 45.635436][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.643051][ T45] device bridge_slave_1 left promiscuous mode [ 45.649010][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.656181][ T45] device bridge_slave_0 left promiscuous mode [ 45.662186][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.670000][ T45] device veth1_macvtap left promiscuous mode [ 45.675796][ T45] device veth0_vlan left promiscuous mode [ 45.681564][ T45] device veth1_macvtap left promiscuous mode [ 45.687368][ T45] device veth0_vlan left promiscuous mode [ 45.693143][ T45] device veth1_macvtap left promiscuous mode [ 45.699055][ T45] device veth0_vlan left promiscuous mode