last executing test programs: 6.32234671s ago: executing program 0 (id=699): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r0, @ANYBLOB="010000000000000000000c00000014000580080001007564700008000100756470"], 0xf4}, 0x1, 0x0, 0x0, 0x700}, 0x0) 6.157483704s ago: executing program 0 (id=700): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX, @ANYRES8, @ANYRES8, @ANYRESOCT], 0x1, 0x5518, &(0x7f0000002480)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote, @in=@loopback}}]}, 0x50}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r8) 5.11023802s ago: executing program 0 (id=704): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f00000000c0), 0xe, 0x4da, &(0x7f0000000740)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',root', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x48, 0x0, &(0x7f0000000300)=[@enter_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x26, 0x0, &(0x7f0000000380)="5bb65593ce570b300e1160ef0a8a2f9c87887edfa385c21b627bb42c07b047963fbd3b5f3669"}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x100098e, &(0x7f0000000540)={[{@errors_remount}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@noload}]}, 0x1, 0x444, &(0x7f0000001f80)="$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") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x20000c2, &(0x7f0000000a00)={[{@barrier_val={'barrier', 0x3d, 0x3db1f87f}}, {@grpquota}, {@data_ordered}, {@init_itable}, {@mblk_io_submit}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$eJzs3c9rHG8ZAPBnJtlvf+VrUvVQC7bFVtKi3U0a2wYPtYLYU8Fa7zUmmxCyyYbspm1CkRTvCiIqePLkRfAPEKR/gggFvUsVRbTVgwd1ZWdnaxt3m0i3OzX5fGA67zvv7j7P27Az88687ARwaJ2LiJsRMRIRlyJiPN+e5sutdvudzutePH80316SaLXu/jmJJN/W/awkX5+IiJ2IOBoRX70V8Y3kv+M2trZX5mq16kZerzRX1yuNre3Ly6tzS9Wl6trMzPS12euzV2enBtLPiYi48aXff/87P/nyjV989sFv7/3x4jfbaY3l7a/2Y5A6XS9l/xddoxGx8S6CFWAkX5f6tH97ZIjJAACwp/Y5/kcj4lPZ+f94jGRnpwAAAMBB0vrCWPwjiWgBAAAAB1aazYFN0nI+F2As0rRc7szh/XgcT2v1RvMzi/XNtYXOXNmJKKWLy7XqVD5XeCJKSbs+nc+x7dav7KrPRMTJiPje+LGsXp6v1xaKvvgBAAAAh8SJXeP/v41n4/8jRecFAAAADNhE0QkAAAAA75zxPwAAABx8xv8AAABwoH3l9u320uo+/3rh/tbmSv3+5YVqY6W8ujlfnq9vrJeX6vWl7Df7Vvf6vFq9vv65WNt8WGlWG81KY2v73mp9c615b/m1R2ADAAAAQ3Ty7JPfJBGx8/lj2dL2QdFJAUOR7NGePSTkWV753RASAoZmpOgEgMKMFp0AUJhS0QkAhdvrOkDfyTu/HHwuAADAuzH5if73/10bgIMtLToBAGDo3P+Hw6v0+gzAq8VlAhTlI3u0v/39/1brf0oIAAAYuLFsSdJyfi9wLNK0XI74MHssQClZXK5Vp/Lxwa/HS0fa9ensncmec4YBAAAAAAAAAAAAAAAAAAAAAAAAgI5WK4kWAAAAcKBFpH9Isl/zj5gcvzC2+/rAB8nfx7N1RDz40d0fPJxrNjem29v/8nJ784f59itFXMEAAAAAduuO07vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpBfPH813l2HG/dMXI2KiZ/yzR7PV0ShFxPG/JjH6yvuSiBgZQPydxxFxqlf8pJ1WTEQni17xjxUYP42IEwOID4fZk/b+52av718a57J17+/faL68rf77vzS6+7+RPvufD/cZ4/TTn1X6xn8ccXq09/6nGz/pE//8PuN//Wvb2/3aWj+OmOx5/Elei1Vprq5XGlvbl5dX55aqS9W1mZnpa7PXZ6/OTlUWl2vV/N+eMb77yZ//6039P94n/sQe/b+wz/7/8+nD5x/rFEu94l883/v4e6pP/DQ/9n06L7fbJ7vlnU75VWd++qszb+r/Qp/+v/z79zjQtmNe3Gf/L9351rN9vhQAGILG1vbKXK1W3fh/LKTxXqShMJDCkfcjDYVOoeg9EwAAMGj/OekvOhMAAAAAAAAAAAAAAAAAAAA4vIbxc2K7Y+4U01UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf6dwAAAP//sf7Zeg==") bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x7, 0x7fe2, 0x1}, 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a841d", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) socket$packet(0x11, 0x2, 0x300) 3.979155152s ago: executing program 0 (id=710): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mlockall(0x1) rt_sigaction(0x3d, &(0x7f0000000080)={0x0, 0x0, 0x0, {[0x8]}}, &(0x7f0000000140)={&(0x7f00000000c0)="0080401f00c0651e00c0641e0060202e000000ba000000ab0050c01a0074000f00c0e00d0004801a", 0x0, &(0x7f0000000100)="0000601f0000401f00b8215e0030204e0000001300a4200e000020880094000f030000d40004200e"}, 0x8, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x45a, &(0x7f0000000940)="$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") creat(&(0x7f0000000280)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1014, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000f40)='./file0\x00', &(0x7f0000001c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f00000001c0)='./bus\x00', 0x181102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x1000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup(0xffffffffffffff9c, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003500)={r1, 0x0, 0x88, 0x1000, &(0x7f0000000200)="e16bd7536ccbf9b305918ecc6de4a856af0a4ff2cdf938f4a15ae65b45a9200c8fa4ed81738cbddd56c3ef8eba85d69fc824717fa6645f589ac648fb5b955aa3c7d6a9f3b68e2994ce782d7cf4d31ab7f1671ffc7c5134a73e2d6f078915589045d20e528f7460d673b9d201f94a69dded0ff2f9e9e674094cc03385f75f2c95e7342ec96ebe544f", &(0x7f0000002440)=""/4096, 0xaa, 0x0, 0xae, 0x78, &(0x7f0000003440)="a58b331999880cbe613fe7bb57641ae53ed23d30006014cdcf1c616ed64879aefdd0f94d156c9ab67b663bf03575c42f0e21c5e91639a530bbd436fe2ee51608ef8c837364a5984bafce9394bf88f90d8224c1dbb5834f0c63411b5630c800ca9be1fcf21ef0057e305e47ee27f6ea4e1a9b28ca8ecc30189752dc0e3cbf17a83da5d6a45eb5e39fb0fefa28e8c78c0cb25bd818d466fe9b4704a0414cde9a21ce03a13a006a06b7013550a283be", &(0x7f00000002c0)="9686dbd6db8f3a99c733c0c2bdf0193e43d12a2a356502dcd021b4b3da5af25a2fce63776078c696e0fab725e10858fb959df765476a62481c83a5406ac7332d9770f229a65031ed3ca9195232ea456250577a8e2ac45e363c1adf9aac996392f23f9e092650fe1ff9ffe0227c1e1baf731a0beb09d75fb3", 0x2, 0x0, 0x8}, 0x50) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x280090, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)=ANY=[@ANYBLOB="5800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000002000000000000000e00000000000000000000000000000000000000000000000000000000000000000014000300766574687461647600886918035c8a2fe586b45b2a592456b2b0b4c3c3e2820fe26ea1cb314900be40b8038b583c7f6b361ab165abe218102510f87161869585f76c70b63ba7711b28"], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.794837058s ago: executing program 3 (id=711): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) prlimit64(r0, 0xb, &(0x7f0000000000)={0x8, 0x1fd}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000200)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp], 0x7) (async) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x40) (async) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)="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", 0x17a, 0x805, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800ffffffff000000000000000000009500000000542900"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='br_fdb_add\x00', r3}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYBLOB], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) (async) pipe(&(0x7f0000000680)) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) 3.780682759s ago: executing program 0 (id=712): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r1, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000003007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x45c) 3.735842693s ago: executing program 3 (id=713): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) open(0x0, 0x0, 0xada66a977c02d739) prlimit64(0x0, 0x3, &(0x7f0000000280)={0x200008, 0x10000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x40000001, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000003c0)=0xae) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') preadv(r10, &(0x7f0000000040)=[{&(0x7f0000000140)=""/226, 0xe2}], 0x1, 0x5b, 0x0) openat(r6, &(0x7f0000000340)='.\x00', 0x0, 0x0) 3.430824378s ago: executing program 3 (id=716): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x12, {0x12, 0x0, "570b0259339f9fa5039beafe0a5ed571"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.831735927s ago: executing program 2 (id=720): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) syz_mount_image$fuse(0x0, &(0x7f0000002800)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x212300c, 0x0, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x77bd, 0x0, 0x0, 0x0, 0x9}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000380)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00', r8}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000180)='page_pool_release\x00', r1}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r9, 0x0, 0x2f, &(0x7f0000000000)={0x200, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r10 = fsopen(&(0x7f0000000140)='anon_inodefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 2.175032291s ago: executing program 2 (id=724): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x148, 0x2a8, 0x2a8, 0x148, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffb}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xffffffff, 0xffffff00, 'bridge_slave_0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98, 0x74}, {0x28}}}}, 0x240) 2.174798841s ago: executing program 0 (id=722): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mlockall(0x1) rt_sigaction(0x3d, &(0x7f0000000080)={0x0, 0x0, 0x0, {[0x8]}}, &(0x7f0000000140)={&(0x7f00000000c0)="0080401f00c0651e00c0641e0060202e000000ba000000ab0050c01a0074000f00c0e00d0004801a", 0x0, &(0x7f0000000100)="0000601f0000401f00b8215e0030204e0000001300a4200e000020880094000f030000d40004200e"}, 0x8, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x45a, &(0x7f0000000940)="$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") creat(&(0x7f0000000280)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1014, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000f40)='./file0\x00', &(0x7f0000001c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f00000001c0)='./bus\x00', 0x181102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x1000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup(0xffffffffffffff9c, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003500)={r1, 0x0, 0x88, 0x1000, &(0x7f0000000200)="e16bd7536ccbf9b305918ecc6de4a856af0a4ff2cdf938f4a15ae65b45a9200c8fa4ed81738cbddd56c3ef8eba85d69fc824717fa6645f589ac648fb5b955aa3c7d6a9f3b68e2994ce782d7cf4d31ab7f1671ffc7c5134a73e2d6f078915589045d20e528f7460d673b9d201f94a69dded0ff2f9e9e674094cc03385f75f2c95e7342ec96ebe544f", &(0x7f0000002440)=""/4096, 0xaa, 0x0, 0xae, 0x78, &(0x7f0000003440)="a58b331999880cbe613fe7bb57641ae53ed23d30006014cdcf1c616ed64879aefdd0f94d156c9ab67b663bf03575c42f0e21c5e91639a530bbd436fe2ee51608ef8c837364a5984bafce9394bf88f90d8224c1dbb5834f0c63411b5630c800ca9be1fcf21ef0057e305e47ee27f6ea4e1a9b28ca8ecc30189752dc0e3cbf17a83da5d6a45eb5e39fb0fefa28e8c78c0cb25bd818d466fe9b4704a0414cde9a21ce03a13a006a06b7013550a283be", &(0x7f00000002c0)="9686dbd6db8f3a99c733c0c2bdf0193e43d12a2a356502dcd021b4b3da5af25a2fce63776078c696e0fab725e10858fb959df765476a62481c83a5406ac7332d9770f229a65031ed3ca9195232ea456250577a8e2ac45e363c1adf9aac996392f23f9e092650fe1ff9ffe0227c1e1baf731a0beb09d75fb3", 0x2, 0x0, 0x8}, 0x50) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x280090, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)=ANY=[@ANYBLOB="5800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000002000000000000000e00000000000000000000000000000000000000000000000000000000000000000014000300766574687461647600886918035c8a2fe586b45b2a592456b2b0b4c3c3e2820fe26ea1cb314900be40b8038b583c7f6b361ab165abe218102510f87161869585f76c70b63ba7711b28"], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.111921496s ago: executing program 1 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x5, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x4b40, 0xfffffffffffffffc) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000000)=""/72) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff92900ddab4992020900"}]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_CAPBSET_DROP(0x18, 0x3) prctl$PR_SET_MM_MAP(0x17, 0x3, 0x0, 0xfffffffffffffdd7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) 2.075118659s ago: executing program 4 (id=728): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0xa0000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_CREATE_OPEN(r3, &(0x7f00000004c0)={0xa0}, 0xa0) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) 1.956804769s ago: executing program 4 (id=729): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x20000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() accept(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300004e4200008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000015c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be53", 0x9f, 0x2000c805, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 1.287982344s ago: executing program 2 (id=730): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000005000000000000000071123000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1.287795214s ago: executing program 2 (id=731): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003e00)={0x0, 0x0, "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", "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"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r3, r0, 0x0) read(r4, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r0, &(0x7f0000002e00)=""/4088, 0xff8) 1.09505556s ago: executing program 3 (id=732): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0xf4240, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 1.074547742s ago: executing program 3 (id=733): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000006a00010000ffffffea00000000000000000000000c000b"], 0x24}}, 0x0) 987.809429ms ago: executing program 3 (id=734): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18799cb61c", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380)}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073110900000000008510000002000000b7000000000000009500c2000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0100000001010400000000000000000a0000003c0001802c000180140003000000000007000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400200100000000000000000000000000000c00028005000100000000000800074000000000a8000d8008000100ac141400080002000000000014000500ff02000000000000000000040000000114000400fe80000000000000000000000000000014000400fc0200"/224], 0x13c}}, 0x0) 917.900375ms ago: executing program 4 (id=735): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) (async) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1a00000001070000fbffffffffffffff1a110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='workqueue_queue_work\x00', r4}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r6}, 0x10) (async) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) r9 = dup3(r8, r7, 0x0) sendmsg$key(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="02130000050000000000000000000000030018"], 0x28}}, 0x0) (async) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) (async) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r11, &(0x7f0000000080), 0x4) syz_usb_control_io$cdc_ecm(r10, &(0x7f0000000180)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="cc031e394dd51a48"], 0x0}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x2b, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xc0}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ldst={0x3, 0x1, 0x0, 0x1, 0xb, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x4, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[r0, 0xffffffffffffffff, r0, r0], &(0x7f0000000540)=[{0x4, 0x1, 0x0, 0x2}], 0x10, 0x5}, 0x90) sync_file_range(r13, 0x157, 0xf0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) (async) syz_usb_control_io(r10, &(0x7f0000000d80)={0x2c, &(0x7f0000000b80)={0x50, 0x4, 0xdc, {0xdc, 0x11, "8576ac718c74a503d621b90f83222c8a7e268186190199cf35cdb1edc896ab96ee493e1e31f0d3aa6e97cf0dbc31a024c5a944a758cb4b02c52abfdce2043e578cdb069f420273d0b0368a22710275eb9a9494720696ad8bb2cb36bddb47d24a0726e75aec0be472ec3182cefc5cf9422ad763c0b72c068943cc50685a40a011da64637a86def77d4d955c66c35dba3f3e89439be47e05b650f5795560a15c714d27d2d28a7d0eec66082eaa2558da23e4c200405108b5abbef5d32e225343d82e483f3512e68446d39ae2d2b34729792dbf992c56eab85a1b95"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, &(0x7f0000000cc0)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0xa, 0x1, 0x1b, 0x0, 0x4, [0xc00f]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x8, 0x3}]}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb9, 0x80, 0x9e, 0x10, "dae0723d", "194eb3f0"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6c, 0x10, 0x8, 0x9, 0x7, 0x8000, 0x7}}}, &(0x7f0000001240)={0x84, &(0x7f00000013c0)=ANY=[@ANYBLOB="400e0d000007800004caad00e86f2042258a42b2b25239e5253b42474ff6499784c99f77d6f466063d7915278641467c80cd2ee44daabc9400a6b3daa3201e1a86c4c5c29cad07d1b2614060bdfc4355e6099e0279df8dd9d38c519bb02848636c461e46e0fcb0314c58aa90eb2753611e6d09ca1168f5a2a5dc44e3c1e9ed1179809009594a49abe293096337f2ce5a"], &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x9d}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x76}, &(0x7f0000000e80)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000f80)={0x40, 0x7, 0x2, 0xfffd}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000001000)={0x40, 0xb, 0x2, "8ac4"}, &(0x7f0000001040)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000001080)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000010c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x0, &(0x7f0000001140)={0x40, 0x1a, 0x2, 0xc2}, &(0x7f0000001180)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000011c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001200)={0x40, 0x21, 0x1, 0x9}}) (async) syz_usb_control_io(r10, &(0x7f0000000680)={0x2c, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="000f3501027000022400000c18100a000300000000100c003fc000008de270140000ff0003100b0a10030000000481db59"], &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x2, 0x5, 0x9, "2469af02", "121f0668"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x94, 0x80, 0x4, 0xf, 0x6, 0x5, 0xb644}}}, &(0x7f0000000ac0)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="200b280000002aae2409fc97c9e876622eec85abe814b05b8b8f92f5f6b980c793b5538944ce087521e397d29fe4"], &(0x7f0000000700)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x1, 0x20, [0x9600]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x8001}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x5}, 0x0, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000900)={0x40, 0x13, 0x6}, &(0x7f0000000940)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "6fbc"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x4}}) syz_usb_disconnect(r10) (async) bind$vsock_stream(r9, &(0x7f0000000480)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 904.656656ms ago: executing program 4 (id=736): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xb4, &(0x7f0000000b00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a04007e3af5fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 836.092091ms ago: executing program 4 (id=737): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x4c, 0x2c, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x4, 0x2, [@m_simple={0x0, 0x1a, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x0, 0x3, '}[,w\x00'}, @TCA_DEF_PARMS={0x0, 0x2, {0x5, 0x85, 0x1, 0x2, 0x7ff}}, @TCA_DEF_DATA={0x0, 0x3, ',\x00'}, @TCA_DEF_DATA={0x0, 0x3, '-/\x00'}, @TCA_DEF_PARMS={0x0, 0x2, {0x2, 0x9, 0x5, 0x4}}, @TCA_DEF_PARMS={0x0, 0x2, {0x4c6, 0x7, 0x0, 0x6, 0x2}}, @TCA_DEF_PARMS={0x0, 0x2, {0x6, 0x10, 0xffffffffffffffff, 0x5, 0x4d}}, @TCA_DEF_DATA={0x0, 0x3, 'mangle\x00'}]}, {0x0, 0x6, "c3bf35e722eef6f249bf94cd2890797a7cde4fa40f27abf998d52e71964fdfd5f0a148d772f2b5adbaf726a53f273a954cd06837c9ff9c0545b554c14d611c1ce75093f88a40a7e6c47899f093b74cc1a69cc2488d62670a7ef41b87d397de2076320ba0759db98fc91c4b0f102cf44859504582a0f4d570c3eea886d514b76ab92c826d67e543c85f681195cd"}, {}, {0x0, 0x8, {0x1, 0x3}}}}, @m_pedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0x0, 0x4, {{{0x200, 0xffff, 0x1, 0x8, 0x7fff}, 0x8, 0x8, [{0xbc, 0xffffd8c8, 0x2502e130, 0x757, 0x8, 0x8}, {0x3, 0x29fc, 0x3, 0x0, 0x3, 0xf}]}, [{0x0, 0x6, 0x30a, 0x3, 0x101, 0x8}, {0x2, 0x8, 0x3, 0x9, 0x2, 0x1}, {0x750, 0x7, 0x0, 0x51ad, 0x6, 0x8}, {0x8, 0x1, 0x4, 0x100, 0xa6, 0x2}, {0xfffffffc, 0x1, 0x1000, 0x8, 0x3ff, 0xbe95}, {0x4, 0x430, 0x5, 0x4, 0x6, 0xf}, {0x8, 0x40d, 0x8, 0x1a5e27ba, 0x5, 0x8f4}, {0xff, 0x5, 0x0, 0x1, 0x80, 0xdff6}, {0x6, 0x2, 0x5, 0xf9b, 0x8, 0x5}, {0x3, 0x6, 0x4, 0x14e0000, 0x1, 0x7}, {0x4, 0x3fa3477e, 0x9, 0x9, 0x9, 0x5}, {0x5, 0x9, 0xff, 0x81, 0x3, 0x9}, {0x8a, 0x186, 0x45ac, 0x7ff, 0x8, 0xfffffff8}, {0x3, 0x2, 0xb, 0x6e, 0x9, 0x3}, {0x7d4, 0x3, 0x800, 0x9, 0x7, 0x2d0f}, {0x2, 0xfffffffe, 0x4f24cb24, 0x8, 0x2, 0x80000001}, {0x669ebe9b, 0x7, 0x7, 0x25, 0x56eb1997, 0xcf2}, {0x3ff, 0xfb4, 0xdd4, 0x5, 0x1a, 0x401}, {0x8, 0x5, 0x80, 0x3, 0x6, 0x9}, {0xf54a, 0x5, 0x5, 0x688, 0x2, 0x80000000}, {0x8, 0xff, 0x947f, 0xffff, 0x8cb, 0x100}, {0xffff97b4, 0x3, 0x0, 0x7, 0x9, 0xa07}, {0x5, 0x5, 0x1, 0x9000, 0x10000}, {0x2, 0x4ecb, 0x4, 0x7, 0x8, 0x3}, {0xfffffffd, 0x0, 0xc, 0x9, 0x4, 0x87}, {0x4, 0x2, 0xe74, 0x6, 0x9f8, 0x3}, {0xd78, 0x1, 0x7c5, 0x6, 0x2, 0x7}, {0x5, 0x5, 0x3, 0xfffffff9, 0x7fff, 0x3}, {0x8, 0x4, 0xb018, 0x5, 0x9, 0x32d3}, {0x4aa2, 0x2, 0x81, 0xffff, 0xb2, 0x1}, {0xa, 0x80, 0xfffffffa, 0x55, 0x2000, 0x5f50}, {0x10001, 0x7ff, 0x401, 0x6, 0xb, 0x9fa}, {0x0, 0xdc, 0xc, 0x1000, 0xe67, 0x5}, {0xd6d8, 0x7fffffff, 0x3b, 0x3, 0x3, 0x5}, {0x0, 0x60154ccd, 0xe5cf, 0x80000000, 0x1, 0x5}, {0x44af, 0x101, 0x7, 0xffffffff, 0x1, 0x8}, {0xe3, 0xffff, 0x7ff, 0x1, 0x730b0cbb, 0x7}, {0xe, 0x8, 0xfffffffd, 0x7fff, 0x0, 0x7}, {0x4, 0x7, 0x2, 0xffff1429, 0x9, 0x1}, {0x8, 0x831, 0x20b4e1da, 0x101, 0x6, 0x7c}, {0x4, 0x40, 0x8000, 0x8c9, 0x2, 0x7}, {0x80000, 0x9, 0x8, 0xc, 0x252f, 0xfffffffb}, {0x7fffffff, 0x7, 0x4, 0x5, 0xe, 0x5}, {0x5, 0x3, 0x2, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x9, 0x0, 0xfffffd74, 0x4, 0x1}, {0xfffff0ef, 0x7, 0x9, 0xc04, 0x8, 0x5}, {0x0, 0x3, 0x9, 0x2, 0x0, 0x5}, {0x2, 0xffff, 0x2, 0x8, 0x4, 0x3}, {0xfffffffd, 0x3, 0xf, 0x3, 0x6, 0xcc5}, {0xa, 0x8, 0xf3ec, 0x9, 0x9, 0xa}, {0x2, 0x8, 0x100, 0x2, 0x1, 0x3}, {0x26, 0x9, 0x6, 0x1ff, 0x5196, 0x2}, {0x10001, 0x2, 0x6, 0x8, 0xd6, 0x94f3}, {0x2, 0xf07d, 0xa, 0x4, 0xfffffe01, 0x1}, {0x80000000, 0x4, 0x1, 0x5, 0x4, 0x4}, {0x0, 0xa, 0x1, 0x14b3, 0x8, 0xd}, {0x8, 0x5000, 0x8000, 0xe6, 0xfffffffa, 0x101}, {0x9, 0x5, 0x5, 0x0, 0x8, 0xa7d3}, {0x1, 0x2, 0x2, 0x8, 0xffffffff, 0x7}, {0x9, 0xd, 0x5, 0xbca, 0x8, 0x62a4d99b}, {0x1000, 0x400, 0x4, 0x1deb6861, 0x7fff}, {0x7ff, 0x4, 0x1, 0x0, 0x5, 0x7}, {0x80000001, 0x3, 0x7, 0x676adc59, 0x7fff, 0xff}, {0x7fff, 0x2, 0x1000, 0xfffffff8, 0x3, 0x3}, {0x6, 0x3, 0xc402, 0x64e, 0x2, 0x1ec}, {0x9, 0x0, 0x6, 0x100, 0x401, 0x3}, {0xc, 0xf3, 0xfffffb5c, 0x1000, 0x10001, 0xa13}, {0x8, 0x400, 0x6, 0x0, 0x0, 0x1000}, {0x200, 0x7, 0x1, 0x3, 0x8b2, 0x7fffffff}, {0x6, 0x3, 0x2, 0x1, 0xfffffff9, 0x5}, {0x3, 0xa9, 0x1, 0x6, 0x3, 0x5c94}, {0x5, 0x519dd805, 0x5, 0x2, 0xfffff800, 0x5}, {0x836, 0xd, 0x8, 0x5, 0x280000, 0x8001}, {0x7f, 0x1, 0x6826, 0x6, 0x4, 0x7}, {0x1, 0x8, 0x7fffffff, 0xe98, 0x631, 0x3ff}, {0x6, 0x4, 0x8, 0x6, 0x2, 0x9}, {0x7fffffff, 0x1, 0x80000000, 0xfffffffe, 0x6, 0xb}, {0x8, 0x2, 0xd, 0x8, 0x85ec, 0x1}, {0x3, 0x8, 0x6, 0x5, 0x76f, 0x5f}, {0x40, 0xfffffffa, 0x2, 0x10001, 0x80000001, 0x401}, {0x7, 0x4, 0x6, 0x8000, 0x2, 0x9}, {0x0, 0x0, 0x0, 0xa, 0x8, 0x8}, {0x9, 0x7ff, 0x7, 0x949, 0x9}, {0xfffffc00, 0x10, 0x2, 0x800, 0x8, 0x4}, {0x1ff, 0x800, 0x2, 0x3, 0x100, 0x4000000}, {0x10001, 0x65ae54d8, 0x7f, 0xbd, 0xff}, {0x293, 0xfff, 0x6, 0x0, 0x9, 0x6}, {0x200, 0x2, 0x3, 0x7ff, 0x4}, {0x48e, 0x7ff, 0x8b1, 0x7, 0x7fffffff, 0x3}, {0xd, 0x9, 0x2, 0xb8000000, 0x7, 0x9}, {0x100, 0x4, 0x243, 0x8, 0x1, 0x7}, {0x73, 0xb, 0xc22, 0x10001, 0x8, 0x40000000}, {0x3, 0x6, 0x4e346765, 0x40, 0x4, 0x2}, {0x8, 0x400, 0xffff, 0x2, 0x4, 0xd}, {0x7, 0x4b9, 0x81, 0x5, 0x159, 0x8}, {0x4, 0x0, 0x122, 0x400, 0x186, 0x10}, {0x7f, 0x77a, 0x8, 0x2, 0x4, 0x4}, {0x8, 0x6, 0x4, 0x2, 0x4, 0x380000}, {0x80, 0x80, 0x7, 0x0, 0x6, 0x80000001}, {0xfcb, 0x7921, 0x10, 0xfb56, 0x1, 0x9}, {0x7ff, 0x80, 0x2, 0x6, 0x7, 0xf8}, {0x7, 0x0, 0x9, 0x4, 0xa0d, 0x80}, {0x0, 0x29, 0x1, 0x1, 0x6, 0x6}, {0x100, 0x1, 0x9, 0x5, 0x2ad40000, 0x2}, {0x80000000, 0x6, 0x2, 0xef0, 0x7f, 0x405e}, {0x8, 0x9, 0x0, 0xc, 0x5a, 0xffffffff}, {0x1, 0x7, 0x6, 0x7f, 0x40, 0x7}, {0x100, 0x6, 0x85b, 0x6, 0x2, 0x1}, {0x5, 0x0, 0xd99, 0x4ba2, 0x4, 0x7fffffff}, {0x4, 0x15d6a8cf, 0x5, 0x2, 0x9, 0x8}, {0x7fff, 0x9, 0x8, 0x9, 0x7}, {0x2a4c, 0x8, 0x2, 0x7f, 0x80000000, 0xdf}, {0xcb, 0x9b, 0x6b56, 0x9, 0x5, 0x7ff}, {0xffff, 0xfffffffd, 0xe, 0x40, 0x7ff, 0x2}, {0x5, 0xdf, 0x8, 0x4ae, 0x6d, 0x80000000}, {0x2, 0x4, 0x2, 0x5d, 0xffffbc98, 0x10000}, {0xe7c, 0x5, 0x2, 0x4e, 0xb63}, {0x1, 0x8000, 0x2, 0x5, 0xf451, 0x8001}, {0x80000000, 0x8001, 0x3, 0xffff, 0x7, 0xdd}, {0x58432e3b, 0x5, 0x8, 0xffff8b34, 0x3ea7, 0x40}, {0x0, 0x63, 0x5, 0x4, 0x2, 0x2}, {0xffff, 0x9, 0x2, 0xff, 0x4, 0x400}, {0x8, 0x5, 0x84b, 0x2, 0x80000001, 0x3}, {0xfff, 0xcc7, 0x2, 0x8, 0x2, 0x3}, {0x5, 0x10000, 0x84, 0x2, 0x6, 0x7}, {0x0, 0x4, 0x401, 0x7, 0xfff, 0x6}, {0x5, 0x4e88, 0x7, 0x44, 0x1, 0xcef}, {0x50000000, 0x9, 0xa1e4, 0x2, 0x6, 0x4}], [{0x2, 0x1}, {}, {0x7, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {}, {0x2}, {}, {0x5}, {0x2}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {}, {}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x2}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x7c58e13324b0978a}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x78bbd3d445f84c39}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x4}, {0x4}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x4}]}}, @TCA_PEDIT_PARMS_EX={0x0, 0x4, {{{0x7, 0x8, 0x10000000, 0x1000, 0x7}, 0x25, 0xf9, [{0x0, 0xa47, 0x3, 0x9b23, 0x4, 0x2}, {0xc5bb, 0x401, 0xffffff80, 0xfffffff9, 0x4e, 0x7}, {0x61, 0x2, 0x400, 0xff8, 0x941, 0x224}, {0x1, 0x7, 0x0, 0x200, 0x80000001, 0x2}, {0xfffffff8, 0x6, 0x6a82, 0xffffffff, 0xd, 0x10f}, {0xddff, 0x200, 0x20000, 0x5, 0x37, 0x8}, {0x8001, 0x8, 0xc7, 0xe4, 0x8000, 0x30000000}]}, [{0x4eaf, 0x6, 0x1, 0xffff8001, 0x1ff, 0x8ba}, {0xd73f, 0x1, 0x26, 0xfffffff9, 0x9, 0x7fff}, {0x9, 0x0, 0x6, 0x80000001, 0x3, 0x6}, {0x40, 0x10, 0x1, 0x31e7800, 0x7fffffff, 0x10001}, {0x6, 0x9c6, 0x80000001, 0x5, 0x5, 0x9}, {0x800, 0x7f, 0x3, 0x0, 0x5, 0x7}, {0x3, 0x1, 0x101, 0x7, 0x0, 0xa94b}, {0x7, 0x100, 0x97, 0x9, 0xb, 0x1}, {0x9, 0x6, 0x2, 0x8, 0xe7, 0xe}, {0xd, 0x3, 0x691, 0xfffffff5, 0xf, 0x5}, {0x7, 0x2, 0x6, 0x9, 0xddd, 0x2}, {0x6, 0x5, 0x80000000, 0x9, 0x40}, {0x5, 0x2d, 0x5, 0x3, 0x4, 0xa8}, {0x592, 0x40, 0x8, 0x800, 0x4, 0x69}, {0x7f, 0x5, 0xffffffff, 0x3, 0x6}, {0xcf, 0x4d7b, 0x7, 0x5, 0xa2a}, {0x4, 0x40, 0xcf7, 0x6, 0x1, 0x4}, {0x0, 0xe, 0x80000000, 0x1, 0xc2, 0x7}, {0x200, 0x5, 0x0, 0x0, 0x8, 0xfffffff8}, {0xf218, 0x7, 0x4, 0x6, 0x139, 0x7}, {0x5, 0x7ff, 0x4, 0xb, 0x8, 0x7}, {0xbc, 0x1, 0x0, 0xc, 0x1, 0x9}, {0x40, 0x3, 0x6, 0x0, 0xffffffff, 0x400}, {0x80, 0x5, 0x200, 0x5, 0x8}, {0x5, 0x6, 0x0, 0x1, 0x6, 0x1}, {0x28f, 0x1, 0x2, 0x8d6, 0x401, 0x4}, {0x7, 0x7, 0x7, 0x10000, 0xc2, 0x9}, {0x7, 0x28cf, 0xc, 0x401, 0x6c, 0x4}, {0x0, 0x800, 0xad2, 0x81, 0x80000000, 0x8}, {0xfffff001, 0x7, 0x1ff, 0xeadb, 0xfffffffe, 0x8}, {0x7, 0x5, 0x3, 0x800, 0x2, 0x7d}, {0x9, 0x9, 0xfffffffa, 0x8, 0xffff, 0x1}, {0x9, 0x28, 0x8, 0x317, 0xffff, 0xda6f}, {0x7, 0x88, 0x6, 0x9, 0x8001, 0x5}, {0x7, 0xfff, 0x7, 0x8, 0x4fc, 0x2}, {0x2, 0x5, 0x9, 0x81, 0x800, 0x2}, {0x20f0225d, 0xc3df, 0x9, 0x0, 0x9, 0xc}, {0xf, 0xfffffff7, 0x88c, 0x4, 0x400, 0x2}, {0x3, 0xdf, 0xd, 0x80000001, 0x100, 0x10001}, {0x2, 0x6, 0x1, 0x0, 0x7, 0x1}, {0x4, 0x6, 0xaf, 0x4, 0x7}, {0x3, 0x16e, 0x200, 0x9, 0x3, 0x6}, {0x0, 0x8, 0xb, 0x7da0, 0xfcf, 0x800}, {0x4, 0x9, 0x0, 0x2, 0xfffffff9, 0x9}, {0x8, 0x1ff, 0x4, 0x6, 0x1b0, 0x7}, {0x8, 0xc45, 0x200, 0x6, 0xcb7c, 0x9}, {0x1000, 0xff, 0x5, 0x8, 0x4, 0x800}, {0x8000, 0x9, 0x4, 0x1ff, 0x6, 0x7}, {0x0, 0xdfb, 0x1000, 0x0, 0x3, 0x2}, {0xffffffff, 0x5, 0xfffffffb, 0x2, 0x401, 0x30000}, {0x8, 0x0, 0x10001, 0x3, 0x1ff, 0x95}, {0x10000, 0x6, 0x6c02, 0x3bdc, 0x3}, {0x5, 0x7, 0xff, 0xfffffffe, 0x4, 0x9}, {0x2, 0x7, 0xf31, 0x2, 0x80, 0x7ff}, {0x0, 0x0, 0x1, 0x3, 0xbce, 0x5b}, {0x5, 0x7, 0x7, 0x1, 0x3}, {0x7, 0xf4c0000, 0x2, 0x53a, 0x0, 0xff}, {0x5, 0x9, 0x4, 0xfffffff8, 0x2, 0x4}, {0x3, 0x1, 0xfffffffb, 0x28a, 0x5, 0xc}, {0x6, 0x4, 0x8001, 0x100, 0x8, 0xfffffc00}, {0x81, 0xaa60, 0x2, 0x401, 0x8, 0x4}, {0x3ff, 0x7, 0x3, 0x8, 0x10001, 0x80}, {0x0, 0x3, 0x46, 0x6, 0x20, 0x2}, {0x3, 0x4, 0xffffc732, 0x0, 0x9, 0x8}, {0x800, 0x2, 0xfff, 0x8, 0x3, 0x100}, {0x6, 0x7, 0x7, 0x3, 0x9, 0x7}, {0x7, 0x2, 0x101, 0x8, 0x10, 0x5}, {0x9, 0x0, 0x0, 0x9, 0x6, 0x4ae}, {0x1, 0x2, 0xffffff02, 0x7fffffff, 0x6, 0x9}, {0x8000, 0xb, 0x8, 0x1, 0x4, 0x2}, {0x2, 0x2, 0x3, 0x6cd, 0x1ff, 0x2}, {0x2, 0x8, 0x6, 0x6, 0x88}, {0x7, 0x80000001, 0x42, 0xc, 0xbaa, 0x5}, {0x8001, 0x9518, 0xffff22f5, 0x8, 0x7, 0x9}, {0x8, 0x4959, 0x81, 0x3117, 0x1, 0x1}, {0x10000, 0x84fd, 0x7, 0x8, 0x1, 0x7fffffff}, {0x6d, 0x4, 0x1, 0x401, 0x1ff}, {0x2, 0xffffffff, 0x6, 0x400, 0x5, 0xfffffffa}, {0x8, 0x6, 0x5, 0x3, 0xd, 0x5}, {0x0, 0x10000, 0x5, 0x2, 0x2, 0x7}, {0x2, 0xc2c9, 0xfffffff5, 0x5, 0x37, 0xfffffff9}, {0x4, 0x3, 0x1, 0x8, 0x6, 0x8}, {0x1, 0xbcc, 0x6, 0x10, 0x5, 0x4}, {0xf1, 0x80, 0x2, 0x1fffc00, 0x2, 0x4}, {0x6, 0x1, 0x822, 0x3, 0x8}, {0x2, 0x2, 0x4, 0x6, 0x6, 0x1}, {0x5, 0x1, 0xc, 0x0, 0x61f7, 0x7fff}, {0x9, 0x5, 0xfffffffc, 0x384, 0x7fff, 0xf}, {0xfffffff7, 0x66, 0x3, 0x81, 0xd9f, 0x6c73c6e6}, {0x6, 0xffff63d8, 0x9b7, 0x7ff, 0x7f, 0xfffffffc}, {0x0, 0x7, 0xd8af, 0x9, 0x1df, 0x9}, {0x6, 0x9, 0x3, 0x52b4, 0x61b6, 0xffc00000}, {0x4, 0x3ff, 0x100, 0x6, 0x1e0000, 0x3ff}, {0x9, 0x1, 0x0, 0x6, 0x3, 0x200}, {0xffffffc0, 0x8, 0x2, 0x7, 0x5, 0x4}, {0x10, 0x9, 0x3e62fb06, 0xc, 0x1, 0x6}, {0x7fffffff, 0x1ff, 0xd43, 0x4, 0x8, 0x8}, {0x3, 0x935f, 0x80, 0x8001, 0x0, 0x7}, {0x2, 0x1, 0x2, 0x7, 0xfff, 0x1ff}, {0x3, 0x80000001, 0x2, 0xfffffffe, 0xc60, 0x5}, {0x7, 0x8001, 0x6, 0x68, 0xfc7, 0x10001}, {0x1ad2, 0xe, 0x4, 0x1, 0x0, 0x60000}, {0xfffffffe, 0xbb4, 0x2, 0x59, 0x2, 0xd26c}, {0x8, 0xb, 0x80000001, 0x7, 0x9, 0x8}, {0x1000, 0x80000000, 0x1, 0x176, 0x0, 0x8}, {0x943, 0x800, 0xff, 0x1ff, 0x0, 0x3}, {0x3, 0x400, 0x4, 0x9, 0xffb, 0x7}, {0x7, 0xff, 0xba, 0xfffff814, 0xe, 0x9}, {0x0, 0x7, 0x9, 0x3cd, 0x8, 0x20}, {0x0, 0x5, 0x9, 0x5, 0xb, 0x7fff}, {0x4, 0x0, 0x5, 0x906, 0xfff, 0x9}, {0x7, 0xf1b3, 0x3, 0xb76f, 0xfffffff3, 0x5}, {0x0, 0x2, 0x9, 0x3, 0x1ff, 0x4}, {0x8, 0x401, 0x6, 0x4e5, 0x7, 0x9}, {0x6, 0x40, 0x9, 0x5, 0xe, 0x4}, {0xffffffff, 0x2, 0x7ff, 0x0, 0x8001, 0x9}, {0xaf9, 0x8, 0x6, 0x0, 0x3, 0x4}, {0x7fffffff, 0x9, 0x1, 0x1, 0x3ff, 0x7}, {0x3, 0xfffffffe, 0x8000, 0x3, 0xfffffffc, 0x356}, {0x7fff, 0xbc33, 0xff, 0x9678, 0x4, 0x1}, {0x81, 0x1ff, 0x101, 0x6, 0x2, 0x9}, {0x9, 0x3, 0xffffffff, 0x7, 0x401, 0x7}, {0x2, 0x7f, 0x3, 0x0, 0x8, 0x1}, {0x2, 0xc, 0x8, 0xf, 0x80000000, 0x200}, {0x0, 0xdf, 0x6, 0x24000000, 0x2, 0x7f}, {0x8001, 0xfffff387, 0x7, 0xe0000000, 0x3}, {0x4, 0xf, 0x7, 0x401, 0x4ff0235e, 0x7}, {0xfffffff2, 0x7c, 0x9, 0x0, 0xfffffe01, 0x1000}], [{0x0, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4, 0x3}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x201e114ccd1b0563, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x6}, {0x5, 0x1}, {}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {}, {0x6}, {0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x3}, {0x1}, {0x5}, {0x2}, {0x4}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0xd34b447a74eb74e3, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0xdcd6fc3e1b9d734e}, {0x1}, {0x5}, {0x3}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0x0, 0x2, {{{0x9, 0xb80, 0x4, 0x2, 0x7ff}, 0x6, 0x4, [{0x8, 0x80, 0x0, 0x200, 0x1bf, 0x5}, {0x3, 0xffff, 0x9, 0x8, 0x71f, 0x8}, {0x2b0c, 0x79, 0x400, 0x2, 0x3, 0x8}, {0x0, 0x5, 0x1ff, 0x8097, 0x9, 0x2}, {0x9, 0x8, 0x8fb3, 0x8, 0xfffffffd, 0x8}, {0x3, 0x6, 0x0, 0x7, 0x4, 0x4}, {0x0, 0x100, 0x3, 0x6, 0x0, 0x4}, {0x5, 0x8, 0x401, 0x2, 0xf, 0x3}]}, [{0x2, 0x8, 0x7, 0xe2, 0x3, 0x9}, {0x1, 0x13, 0x4, 0x400, 0x401, 0x6}, {0x8, 0xfffffffb, 0x4, 0xc, 0x917e}, {0x6, 0x3, 0x3, 0x6d, 0x8, 0xde}, {0x7, 0xc, 0x9, 0x3, 0x6, 0x5}, {0x1, 0x2000000, 0x4, 0x80, 0x9, 0x48000}, {0x0, 0x5, 0x0, 0x1, 0x0, 0x80000001}, {0xffff, 0x0, 0x2, 0x4, 0x4, 0x1}, {0x8, 0x9, 0x7, 0x1000, 0x8, 0x4}, {0x9, 0xd2b0, 0x3, 0x8edc00, 0x4, 0x8}, {0x10, 0x3, 0x5, 0x462e8e61, 0x40d, 0x400}, {0x81, 0xffffffc0, 0x6, 0x6, 0x6, 0x1}, {0x0, 0x3, 0x0, 0xc, 0xc0000, 0x8}, {0xd, 0xb7, 0xffffff01, 0x3, 0x4, 0x4}, {0x1, 0x8, 0x2, 0x9a1, 0x24, 0x2}, {0x5, 0xa6, 0x1000, 0x10001, 0x2, 0x80}, {0x2, 0x401, 0xb, 0x7, 0x8, 0x7}, {0x0, 0x80000000, 0xfffff001, 0x5c5e0, 0x2, 0xf911}, {0x5, 0x0, 0x401, 0x800, 0x6, 0x2ffa}, {0x2, 0x5f4, 0x9, 0x5, 0x7, 0x8}, {0x829, 0x2, 0x3143, 0x2, 0x9, 0x1}, {0xf, 0x1000, 0x0, 0x1, 0x3, 0x3}, {0xffff, 0x5, 0x3, 0x0, 0x4, 0x6}, {0x3, 0x1678, 0x10, 0xd5, 0x6, 0x1000}, {0x890, 0x0, 0x100, 0x9, 0x9, 0xffffffff}, {0x0, 0x2, 0x200, 0x5, 0x8, 0x4}, {0x4, 0xfffffff8, 0x6, 0xc, 0x80000000, 0x4}, {0x7, 0x7, 0x4, 0x9, 0x20, 0x8}, {0x7, 0x40, 0x8, 0x3}, {0xffffffff, 0x8001, 0x2, 0x3, 0x7f, 0x6}, {0x0, 0x410, 0x2, 0xff, 0x731, 0x8}, {0xbb1c, 0x0, 0x6, 0x1, 0xffffffff, 0x7f}, {0x1c, 0x2, 0x1, 0x5, 0x400, 0x9}, {0xb, 0x0, 0x1, 0x2, 0x6}, {0x0, 0x401, 0x0, 0x8, 0x7fffffff, 0xdeb}, {0x1, 0x7, 0xdc04, 0xb, 0x4, 0x200}, {0x5, 0x6, 0x3, 0x200, 0xd01, 0x7}, {0x0, 0x3, 0x2, 0x2, 0x4000, 0x7}, {0x240, 0xf, 0x7, 0x8, 0x89, 0x9}, {0x3, 0x6, 0x595, 0xb, 0xe0, 0x2}, {0x9, 0x6, 0x60, 0x0, 0x9, 0xb902}, {0x4, 0x6, 0x6, 0x400, 0x3, 0xff}, {0x8, 0x9, 0x7, 0x0, 0x8, 0x3}, {0xa, 0x10, 0x0, 0x2, 0x7, 0xc5db}, {0x6, 0x6, 0x389a, 0x8, 0x75, 0x6}, {0x80000000, 0x4, 0x0, 0x3000000, 0x3ff, 0x4}, {0x3, 0x7, 0x7, 0x9, 0xd, 0x8000}, {0x28fc, 0x6, 0x5, 0x8001, 0x0, 0x8000}, {0x7, 0x7, 0x78f0, 0x7, 0x10, 0x1}, {0x2, 0xfff, 0x9, 0x7, 0x0, 0x544}, {0xfffffff9, 0x5, 0x5, 0x9, 0x1, 0x1}, {0x7ff, 0x5, 0x80, 0xfff, 0x2, 0x8001}, {0x8001, 0x6, 0xf, 0x0, 0x80000000, 0x400}, {0x7000000, 0x2, 0x5, 0x246a45ab}, {0x401, 0x3, 0x2, 0x7, 0x6, 0x8}, {0x0, 0xb7c0, 0xc, 0x200, 0x101, 0x2}, {0x8000, 0xfff, 0x5, 0x0, 0x67a, 0x2}, {0xca, 0x3, 0x2, 0x8, 0x40, 0x4}, {0x6, 0x4, 0x5, 0xa, 0x10000, 0x6}, {0x5a, 0x5, 0xb, 0x3ff, 0x40db, 0x6}, {0x6, 0x7, 0x5, 0x8baf, 0x9, 0x8}, {0x4, 0x3c, 0x3, 0x3ff, 0x5f3, 0x9a13}, {0xdc9a, 0x2, 0x5, 0x3, 0x4, 0x10001}, {0x7, 0x1, 0x81, 0x2, 0x2a5c, 0x7}, {0x2, 0x3ff, 0x7, 0x3c448030, 0x100, 0x5}, {0xfff, 0x7f, 0xfffffff8, 0x5, 0x100, 0x3}, {0x3, 0x9, 0x7, 0x6, 0x1}, {0x66831307, 0xfffffff5, 0xff, 0x8, 0x9, 0x10000}, {0x5c29, 0x4a4, 0x7, 0x3, 0xc20, 0x2}, {0x9, 0x1, 0x3ff, 0x7, 0x1ff, 0x8}, {0x200, 0xfff, 0x3, 0x654e, 0xffff8001, 0xe}, {0xed1a, 0x6, 0xf87, 0xf5d6, 0x1b1a, 0x9}, {0xca, 0xffff, 0xb9a8, 0x9d87, 0x1, 0xde}, {0x9, 0x57, 0x0, 0x9, 0x1, 0x5}, {0x8, 0x5, 0x7dfe, 0x3, 0x6, 0x3}, {0x3, 0xfff, 0x7624, 0x5, 0xfffffffc, 0x101}, {0x8, 0x7f, 0x7fffffff, 0x22b, 0x4, 0x1}, {0x5, 0x10, 0x0, 0xfb7, 0x8, 0x9}, {0x1ff, 0xe, 0x13, 0x6, 0x7}, {0x0, 0x5, 0x4, 0x2, 0x9, 0x6be}, {0x6, 0x1, 0x2, 0x10, 0xdd, 0xb955}, {0x4, 0x80, 0x6, 0x72e1, 0x9, 0xa9c}, {0xfd, 0xffffffff, 0x6, 0x1, 0x80000000, 0x6}, {0x3, 0x8, 0xfffffffa, 0x5, 0x5, 0x4}, {0x160a, 0xeb3c, 0x3, 0xfffffff7, 0xfffffffe, 0x5e58}, {0x1d74c6a3, 0x737f, 0x80, 0x3, 0x0, 0x200}, {0x7b3, 0x2, 0x7, 0x0, 0x5, 0x1}, {0x1ff, 0x4, 0xfff, 0x7, 0x5, 0x6}, {0x2, 0x5, 0x8000, 0x8, 0x4e, 0x4}, {0x101, 0x524, 0x4, 0xca8b, 0x6, 0x4}, {0x0, 0x741, 0xc, 0xd75d, 0x1, 0x81}, {0x8000, 0x9e, 0x2, 0xe7, 0x4, 0xfffffff7}, {0xfffffffc, 0x1, 0x1000, 0x3, 0xffff, 0x1}, {0x5, 0x80000001, 0x620, 0xfffffff9, 0x2, 0x7ff}, {0x7, 0x8, 0x9, 0x7fffffff, 0x3, 0x9}, {0xffffffc0, 0xa975, 0xa, 0x401, 0x7d, 0x1000}, {0x4, 0x28000000, 0x0, 0x15e, 0xa, 0x3}, {0xfffffff7, 0x401, 0xe, 0x1, 0x8, 0x20e3379b}, {0x998, 0x1, 0xa3, 0x2, 0x3ff, 0xa1}, {0xfffffffa, 0xaa2b, 0xf, 0x0, 0x5, 0x81}, {0x7, 0x6, 0x7, 0x8, 0x8, 0xffff}, {0x7, 0x7caa, 0xffff, 0xfff, 0xc, 0x202}, {0x7, 0x9, 0x716d112b, 0x81, 0x80800000, 0xff}, {0x3, 0x8, 0x1, 0x5, 0xe, 0xffffffff}, {0x1, 0xffff, 0xe262, 0x2, 0xb, 0x10}, {0x40, 0xd57, 0x2, 0x4, 0x9, 0x2}, {0xa, 0x9, 0xbe, 0xc, 0x7ff, 0x10001}, {0x1, 0xffffffff, 0xe, 0x7, 0x2, 0x10000}, {0xf26b, 0x5, 0x0, 0x0, 0x93, 0x701c27f2}, {0x7, 0x29b9, 0xaeb, 0x1, 0x2, 0x6}, {0xffffffc0, 0x8, 0x7, 0x800, 0x80000000, 0x5}, {0x1, 0x10001, 0x7, 0x1ff, 0x28a799c8, 0x81}, {0x2, 0x101, 0x80000000, 0xd207, 0x23, 0x10001}, {0xf0c8, 0xff000000, 0x2, 0x1, 0x5, 0x2}, {0x5, 0x6, 0x60, 0x3, 0x8, 0x615d}, {0xffff, 0x3, 0x5, 0x59e0, 0x9}, {0x8, 0x3, 0x9, 0x2, 0x1, 0x1b5}, {0x8, 0xffffffff, 0x3, 0x10000, 0x0, 0x1c6a}, {0x8, 0x5, 0x400, 0x4a, 0xe, 0xf}, {0x29958f0d, 0x0, 0x11cc4, 0xfffffff9, 0x401, 0x9}, {0x6dd, 0x5, 0xbdf0, 0xc, 0x10001, 0xfffffff4}, {0x8dd, 0x200, 0x4, 0x200, 0xee, 0xc329}, {0x7f, 0x81, 0x3, 0xd13, 0x7, 0x7}, {0x3937, 0xffffffff, 0x4, 0x2, 0x80, 0x200}, {0x0, 0x2, 0x6, 0x5b2016d9, 0x7, 0xf179}, {0x2, 0x3, 0x5, 0x7, 0x8, 0x9b}, {0x90b0, 0x5, 0x7, 0x1, 0x5, 0x7f}, {0x2, 0xfffffff9, 0x0, 0xdd9, 0x5, 0xfffffff4}], [{0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {}, {0x3, 0x7ca4022704260f92}, {0x2, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x1, 0x3602f8649ed791ac}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x7bdfdf409e84660e}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x642a30c7e346ca19}, {0x7, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x1}, {0x7bb271c41c2ca2a6, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x0, 0x1}, {0x4}, {0x2}, {0x4}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0x0, 0x2, {{{}, 0x0, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8, 0x5}], [{0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4}, {0x2}, {0x4}, {0x4}]}}, @TCA_PEDIT_PARMS={0x0, 0x2, {{{}, 0x0, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x0, 0x6, "71b06f44cba636f6ee50024e"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1}}}}, @m_police={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT, @TCA_POLICE_RATE64, @TCA_POLICE_PEAKRATE64, @TCA_POLICE_RATE={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61f, 0x21, 0x5]}, @TCA_POLICE_PEAKRATE64], [@TCA_POLICE_AVRATE, @TCA_POLICE_RATE64, @TCA_POLICE_PEAKRATE, @TCA_POLICE_RATE, @TCA_POLICE_RATE64, @TCA_POLICE_AVRATE, @TCA_POLICE_TBF, @TCA_POLICE_AVRATE], [@TCA_POLICE_TBF, @TCA_POLICE_AVRATE, @TCA_POLICE_TBF, @TCA_POLICE_RATE={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x473898c, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_AVRATE, @TCA_POLICE_AVRATE, @TCA_POLICE_TBF, @TCA_POLICE_PEAKRATE64, @TCA_POLICE_TBF], [@TCA_POLICE_PEAKRATE64, @TCA_POLICE_RESULT, @TCA_POLICE_TBF, @TCA_POLICE_RATE], [@TCA_POLICE_PEAKRATE64, @TCA_POLICE_PEAKRATE, @TCA_POLICE_TBF, @TCA_POLICE_AVRATE, @TCA_POLICE_RATE, @TCA_POLICE_RESULT, @TCA_POLICE_RATE={0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff]}, @TCA_POLICE_TBF], [@TCA_POLICE_PEAKRATE, @TCA_POLICE_TBF, @TCA_POLICE_AVRATE, @TCA_POLICE_RATE], [@TCA_POLICE_PEAKRATE, @TCA_POLICE_RESULT, @TCA_POLICE_PEAKRATE], [@TCA_POLICE_PEAKRATE, @TCA_POLICE_RESULT], [@TCA_POLICE_TBF, @TCA_POLICE_RESULT, @TCA_POLICE_TBF, @TCA_POLICE_PEAKRATE]]}, {0x0, 0x6, "18b2b7f384e0f1bd823e745b6718a31809e1276c8ef065a19f9b4fa7eae5bc70f79db98dde7d9031aaa1f522a77c2aa40a80a85301a9a68b9ae084246b7ab97c839b679166b907390128508d9f42974386eae13730e2593dce8ddf8906f815e910a7ca2a69393b728c1058fbc1aa03bd2955a113db3d1227e514d4dd6babad6dc24de737a62f3c04eb"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x1}}}}, @m_tunnel_key={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS]}, {0x0, 0x6, "9679d92354d19bb6360e06086a12915d495556c8a06f10ac99de121aac65d1ed95267a9526bc3818c11bc61a562057c1a20fb88c0b0e0d845f8aca08b296e9344ed2dfb7ad00fab76147c98cadbbdf65f4cad83a6acceb8e8a9092a4c1613d6eac38337d23882dce143be98e73525676006fcad723b59f8447e817777c0f83bc96c9d23d01e6bd429ee9976ab1ca55a68e958e117aa4a385022fac21639f3dffa889e622693a80378ce3db1ea249b12ccab208df266671b5aaada1c7499af3e73dd26bf779d1b77793279e6284a96434acf62166a9c11ebd1551c2e84feb4faaee8d81026ec7"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x3}}}}, @m_connmark={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS, @TCA_CONNMARK_PARMS, @TCA_CONNMARK_PARMS, @TCA_CONNMARK_PARMS]}, {0x0, 0x6, "a2128e81e1336e76fe266e1da6842e8c7a8df7d76eb1e7a3f09a289329d415f1e15a09e759ed656cf064336b2cc1e0320d74ec87f750c44ef9a7e71154f14aab570fdbb6ec30afa3548da7e24ae181e0c3565666154f625fa52037856b091a572e822576cae251ad11382ccefc05d5721beb18e9c1de2a7b3a838b751b3ab7b1f564de90a525ac8e80a88e1b34082ae2b1a173e25966900bafdb9a5ef3e364b809511d8b882c08ca26fc4da8e1d064ace23ca63604d4264e9fb0d37e1b98cb2547f7ec32707468e872f92dd5ea320849b8191c627c7ce988078b310a0af8d704f0975f07ae2f405831a025b9bdb3f190"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x0, 0x2}}}}, @m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS, @TCA_IFE_METALST={0x0, 0x6, [@IFE_META_PRIO={0x0, 0x3, @void}, @IFE_META_SKBMARK={0x0, 0x1, @void}, @IFE_META_SKBMARK, @IFE_META_TCINDEX, @IFE_META_SKBMARK, @IFE_META_PRIO, @IFE_META_SKBMARK, @IFE_META_SKBMARK={0x0, 0x1, @void}]}, @TCA_IFE_METALST={0x0, 0x6, [@IFE_META_SKBMARK, @IFE_META_SKBMARK, @IFE_META_TCINDEX={0x0, 0x5, @void}, @IFE_META_TCINDEX, @IFE_META_PRIO, @IFE_META_PRIO={0x0, 0x3, @void}]}, @TCA_IFE_SMAC={0x0, 0x4, @multicast}, @TCA_IFE_METALST={0x0, 0x6, [@IFE_META_SKBMARK={0x0, 0x1, @void}, @IFE_META_TCINDEX, @IFE_META_SKBMARK={0x0, 0x1, @void}]}, @TCA_IFE_METALST={0x0, 0x6, [@IFE_META_SKBMARK={0x0, 0x1, @void}, @IFE_META_PRIO]}, @TCA_IFE_SMAC={0x0, 0x4, @random="afad27aca869"}, @TCA_IFE_PARMS, @TCA_IFE_DMAC={0x0, 0x3, @local}]}, {0x0, 0x6, "2bf83fd631412aebd0ad5b285e18a885970b0541818e0932fc8118f93480af1c2363c82bb7c57459279b093e4e785a2360f6c2df3c353e0c7bb2fb5a0647222c30486ec8e2ee33cc54a604d5343a8ae19a9aa54f7af31fc1a07effd3c0214f"}, {}, {0x0, 0x8, {0x2, 0x4}}}}, @m_simple={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x0, 0x3, ':\x00'}, @TCA_DEF_PARMS, @TCA_DEF_DATA={0x0, 0x3, 'htb\x00'}, @TCA_DEF_DATA={0x0, 0x3, '[]\x00'}, @TCA_DEF_DATA={0x0, 0x3, '\x00'}, @TCA_DEF_DATA={0x0, 0x3, '\x00'}, @TCA_DEF_PARMS, @TCA_DEF_DATA={0x0, 0x3, '}^]*-(\'-\x00'}]}, {0x0, 0x6, "79d71ddeeacfb24a22dd7fce3e931a437e0e8ffb9075931a50c64490b83bb135471d3ad2b519a487a51616f25ceb07a316c9b0d153142056477ecc01dc5e0c7a9ee1892c5a86a0828bdc9d46fe1b0c7a454be1556d00262bed0e7843f027c1f8c8df36be80012e6c7bbc21c67d18f4c1ad716de565587876fc58eb54ec512718"}, {}, {0x0, 0x8, {0x0, 0x1}}}}, @m_police={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff]}], [@TCA_POLICE_PEAKRATE64, @TCA_POLICE_TBF, @TCA_POLICE_PEAKRATE, @TCA_POLICE_RATE64, @TCA_POLICE_TBF, @TCA_POLICE_RESULT, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x47]}, @TCA_POLICE_PEAKRATE]]}, {0x0, 0x6, "2766e104af06cda93be7467e486c9c4cddace9eb3cb5e03af40b79b9959a82263064b0a6a7e497148a4b4267b7aed4d9e77d1fb95ca645b84e1edcfe79deca98c9294d1aa25110a99476815fe75c360ed43add90f02655d90441bab4bc86d375e120f1f4f432b85f81162b766c3a11573c6805b823a1229eba2b4b37395986e1f6e716e65d3e74d03de0903f910fba17c21fe236bab4495feaff2c"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK, @TCA_CTINFO_ZONE, @TCA_CTINFO_PARMS_DSCP_MASK, @TCA_CTINFO_PARMS_DSCP_STATEMASK, @TCA_CTINFO_ACT, @TCA_CTINFO_PARMS_CPMARK_MASK, @TCA_CTINFO_PARMS_CPMARK_MASK, @TCA_CTINFO_ACT, @TCA_CTINFO_ZONE]}, {0x0, 0x6, "bd721ce3f3b2cf328fc4b49ee7ee0e7938e4df16834e051a7b63d1ea25c19f851303b6b9bedb96ace999db5b32a2ac758965d8cd22d9ac5d9c685e26ed8df2aec14c32178995ef0a8089ea49498041fe1ffd555cee2a77"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xfffffea4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 823.582882ms ago: executing program 4 (id=738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8415, 0x4, 0x9, 0x1085, 0xffffffffffffffff, 0xae1b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000005, 0x4, 0x8}, 0x48) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000002000040000000eccd"]) bind$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) syz_emit_ethernet(0x3e, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000740), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1], 0x6, 0x2b3, &(0x7f0000001400)="$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") r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001000010000000000feffffffffffffff0000000000000000030000007f00000100000000000c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000002b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200420000000000000014000e00fc00"/188], 0x104}}, 0x0) 375.209369ms ago: executing program 2 (id=739): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0xa0000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_CREATE_OPEN(r4, &(0x7f00000004c0)={0xa0}, 0xa0) write$FUSE_INIT(r4, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r4, &(0x7f0000000380)={0x20}, 0x20) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) 354.595691ms ago: executing program 2 (id=740): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x10026) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x1f, &(0x7f0000000740)={[{@nodiscard}, {}, {@acl}, {@noinline_data}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@background_gc_on}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") 166.866576ms ago: executing program 1 (id=741): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) (async) r1 = syz_open_dev$vcsa(&(0x7f00000005c0), 0x9, 0x185ac1) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000600)={@broadcast, @dev, 0x0}, &(0x7f0000000640)=0xffffffffffffffcf) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x7f, 0x1ff, 0xf, 0x0, 0xffffffffffffffff, 0x8000, '\x00', r2, r1, 0x1, 0x3, 0x3}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='fib_table_lookup\x00', r4}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) write$binfmt_aout(r0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x450) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000010000008400088080000080580009801c000080060001000200000008000200ac1414aa05000300000000001c000080060001000200020008000200ac1414aa05000300000000001c000080060001000200000008000200e000000105000300000000002400010000000000000000000000000000000000000000000000000000000000000000004ad54266abeba6ce54123543d2eef7b9896373bdcd67dd8ac0e07683159f36283aefabdd6cf2070c97e1dd0a2c551868dde3209f9e5dad8046866a1a6b5bd443e7d86e424b90db5bed05d4da417d4b5adb6e60276382fe1900eb"], 0x98}}, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x80, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r8, &(0x7f0000000a40)="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", 0x124, 0x2000c800, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000680029020000000000000001000000000000000006000300000000000c00020000000000ff00e8"], 0x2c}}, 0x0) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0800100001070000000000000000260018110000f729ceff2daef3956de86457eb73a800ba8a5e5695b4057d24448b07eb4df22f631e61d7e9123ddf24", @ANYRES32=r12, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 71.987834ms ago: executing program 1 (id=742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) 56.374105ms ago: executing program 1 (id=743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r2, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0x3840, 0xa0c4, &(0x7f0000000540)={0x11, 0x2428, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 25.012228ms ago: executing program 1 (id=744): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socket(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x280) (async) syz_usb_connect$uac1(0x0, 0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029c00030100301f0904000000010100000a24010000000201020d2406000003040000009c5c001124060006050000000000000000000000072405023fe2cc0904010000010200000904010101010200000924020200000000000905010900000600000725010000ff0f090402000001020000090402010101"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) (async) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000080)='\x00', 0x1}]) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x1f}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) waitid(0x0, 0x0, 0x0, 0x4, 0x0) (async) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x10000, 0x3c, 0x8}, 0x18) symlinkat(&(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000300)='./file0\x00') syz_usb_connect(0x6, 0x764, &(0x7f0000001000)={{0x12, 0x1, 0x250, 0xae, 0x64, 0xf2, 0x10, 0x1199, 0x90d3, 0x2e65, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x752, 0x2, 0x38, 0x80, 0x40, 0x6, [{{0x9, 0x4, 0xc6, 0x1, 0x4, 0xff, 0x0, 0x0, 0x44, [], [{{0x9, 0x5, 0x0, 0x1, 0x40, 0x7, 0xc, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x14, 0xf}, @generic={0xaf, 0x2b, "e2c5532e0a020ec39d6705f4959af23ab027a222211a1b5c0b35caf9e3bbafc873fe7c5081927fc76ae53a6698dde690044973164546e03e5247fa5ddff53e146522a12617a5adf31f9d3e326c979d86ddc808ebb5c3caecf8f3781c8abf2dd5770893d9d1b1466fcf1b6fed70a69199a5bae177fe83cb5b977074b4e993003a5c5e24ab26bfb2e87e39d1b1509ad0d154405017e42154d72eb041429a2414624357411f57ec584c1aa31fc662"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0xe4, 0x0, 0xdf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0xfa4a}, @generic={0xef, 0xd, "5d6259ce6e87575510dc8d07febd2e6732e70af6fb5edd0dc120f0b76aba2c570e8332aad7d720e10d4f393f6a5492724801e3e031c4bf660552e1d99a258368939f495e08fcd52ba8360886066baba1e31cfc978f67b356cf304ed3d959c5436caf8a76abd9822ef7c778c08418784f5484d010f8a15aa84439968537439218dbcff87b3ebc83d88a4f0db1cc23c4ed67babd83d6ef5a46a0b4227db1c7c943b52836fe3e4ab5f18865e32c8cde2cd5d7e445b36cff5bcc049137bc815ddbb65d6438b52797a2c5526aca9eaed3b8327cbcfd4abccfdf01bbcf5774015217f2fc48cfd9c57e63ec64bb74954c"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x70, 0x0, 0x7, [@generic={0x9d, 0x4, "5ac3fbc18e028a40ed67dd9d00e6819c77750d514f6d1f20642de648596b87692efe4076c6be5d5e3662ee6b8949493c8d98ab579fd490971e9c913545a300594935d4ea8cf25efdbc5bbbe171eb473cd4c7dac943a824f0bb41ac096752e4bb488125d17acf48b6e055491a6b023351814b665bb1a0944fc7e2d5b3b42b072f8155dbd0a031948da928ce529b6a67f4a4bab6f9685df019113e13"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x9, 0x3, 0xa0, [@generic={0xc3, 0xe, "fc0fab582c3b7be51ea2d3a2692ca4dc55759ae232cdda405ce98766b13263da00dac11110e23448347bcdae4a8c231789966a2d73312a7ab5ec3759f7209d2bf6d4d6b5b611bbcaa12cd48633dcd7f4bb9e3734c33c6b587b953868a58fe286eaf290d6766fefc63512bcef5b56e40f9c5d5fea0f724a424bc436da6b9f18a639ea37d68ff409c77a65f581f560a4cdfa556925c3dbe94a20c52fa466b1dccfc854fdf4b89133fed57cfe3f7456e13e73c6c897ba653bcf61bbfee1382a4b2fc1"}]}}]}}, {{0x9, 0x4, 0xb5, 0x0, 0xb, 0x51, 0xb7, 0xb1, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x5}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x301, 0x5, 0x3, 0x6}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x4, 0x3, "188632"}, @processing_unit={0x7, 0x24, 0x7, 0x3, 0x0, 0x4}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x4, "ae8ff162"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x100, 0x4, 0x5, 0x2, 0x8, 0xb}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0xf9, '8'}]}, @generic={0x3f, 0x2, "0cbceb5a11abf978a20d263978b9acf3355108c96479bb538233a925ad81f0a502491bf8e0d26f0667051bc7551965e651de738b0e2c0c4167985e6c40"}], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x1, 0x6d, 0x5, [@generic={0xbe, 0x4, "749c71d6bc0a4968aca2ea5335099a912ca79651293ef1849d9d4c32f8b2de7532ca2fdb97c00802cc6f863e4a5833249c684f1b7dcf2ce688b81c16138de0690752dc2034e3e82a74ca070f9c2c5333d8e0fa586a88db56cc486e0d6fbb1bddb2b7c9edc25d678510a57d16ee103f1d5b02d04feb00952a8a425eb621df249cc38a8a8f43447814527cfb3bde31577613bc285aef1c6e9f8cd4657899a7f8d443b29c58563aabe8672e7e54f16627bff6859cb997bca3a52ddd1eaf"}]}}, {{0x9, 0x5, 0x9, 0x68f1eadbce56e73c, 0x3ff, 0x5, 0x6, 0x9, [@generic={0xef, 0x21, "5909c377d19c23ed8250fc16407a36cd3465db28053b6cdd5ec6088cd47c58c36f5d6372888c6568ad7fa225c1f634948fea64c48ed5403fd012746f2c878b3474fb393ef7de8465197d3ce63d2fd14a0775b11dea88ac6e4f5d899fbd31ab559f0557155cc7b47fdd17260013c8aef33a107047953a0f8d2067bba087d5a213edd29d19583ec2fd75284baf5e571c3130a341dca63c6bceac430406907fa82068bd638e02744b4efa8621f39500c19ccea811c3c5b9b73ff618dd727a30849ae5e93be5d501c0bb918b32bda43b5307823946a871f2234ae8489dd3dda39d91c9fbb9d9b3f47ebf2bec569f09"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x1bf, 0x9, 0xf9, 0x4, [@generic={0x53, 0xd, "22274511d4a1a7499217d780b48009cd608dd4d61fc50abf0e8d5b0193cbc3404f8d70bdd4caf6da5c06252bd9567e65ffbf832846805e77e2d15a47472d442e246a401e97a5b84b1517f12292ad3e5544"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xa, 0x1000}]}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x10, 0x1, 0x7, [@generic={0x94, 0x4, "266da9acb216d42aaf111916a1d9ec22de42523d824020c6391d14c5d0592a436ce1ff061349c3c39e17f9603bdfe6a74fcdae785ab98ba1091914dc84446abfc117e1e26813b18529110326dcac666af3f8f7b9dfc9a020a835041913dfd5a19e1b9fd97a8c78b8129cdef64ca948bf82420f76dfa228894f05075a3e60e04ebb7dae919eb8d5558d9247fbb6b8e88c89bf"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x200, 0x2, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0xb}, @generic={0xc, 0x2, "86e8c98d520a205f756d"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x6dd14defdb2f0908, 0x5, 0x8}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x80, 0xf1, 0x7}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x7, 0x8, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x83, 0xf6}]}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x4, 0xfd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}, @generic={0x1e, 0xb, "0fb1febb0dd11a9691905c551fb214716b244229b8fcd9fd8ccda55b"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x3, 0x9, 0x9}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0xe, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x101}, @generic={0x46, 0x22, "02dddc9b0c2d94814d070ae5307a55cf6622fb9b47ba20272603b0bf7a2e47435fd1a92dd2bb476a5b5882ab02425766f0941c13155d02f5bc99296e5260508e08cf8d80"}]}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x7, 0x0, 0xb9, 0x8, 0x9}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x406}}, {0xca, &(0x7f0000000500)=@string={0xca, 0x3, "f7782f916cb0047795ca3d81c19aa4f6695e3fe8a77053db5e0412dd41d363d324f045adc8f81b49b1003de15d0ace7a6c9f12743e56053d4043bd4de4863def1ed3cae65a9850c010854726c6287f8292f73c89208ccfd526dbce2032cae43da9d172562382bdf7f31ce8a595ea8db177230f88ada275492cfcf368fd0b659cb8b2bb1d2dbf02266f79629d0305b6495f8c455bb59fbcb57f2f9752b61260daa315d7e91df57eeb06195bf4743982de40aacda63bcdffe451f1467ad678bb08451d08d73dc8e4dd"}}, {0xf6, &(0x7f00000006c0)=@string={0xf6, 0x3, "348eb1d6bdadcf11c43a00f446d1d13f1f3692e3f08a077cb3d65ab98cdd8183ea9289e170c2beb6837677d7b42eb296747dece1480cc3716acd3a3e86d1378cdefdbb05495cca8713042aa6901e1b008cc2838b9751a33b1ec3dba92d57a2fa822a86179e564b28862de6523d2ae936bb38eff58ee8180c59df2c107e349f029268e1f5002e61d430542fdbb3048e8d3a50bcfc428198172b92a9a4973ca27cf3a512bfb88371113153d88d85ad44fbb49ca223e34751b1669f4f46b9ca98c3841687e175fb504711232002a3479364a6cd0e644176cd1178e6c2e20046c15d792eb994e69c7cb0c83f5314296d360b460f7c64"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x3401}}, {0x5f, &(0x7f0000000880)=@string={0x5f, 0x3, "02ef5fd89b896a1ef2cf81424ddbb7709a8b614a1285a2c36ef682e08f8e41fe18dacd41426beb893ebee1330db05e99b6d553d1dd28d686c7d02ffa1ffba5de3f4e4a0d18ea4a63c1691c6cf54262c3c9143b3d4da9d05083a64fb263"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x40d}}]}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f0000000080)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 0s ago: executing program 1 (id=745): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x20000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() accept(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300004e4200008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000015c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be53", 0x9f, 0x2000c805, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 67][ T1951] device veth1_macvtap entered promiscuous mode [ 83.910353][ T1983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 83.917959][ T1979] netlink: 'syz.2.424': attribute type 7 has an invalid length. [ 83.926308][ T1983] Call Trace: [ 83.926329][ T1983] dump_stack_lvl+0x1e2/0x24b [ 83.926342][ T1983] ? panic+0x812/0x812 [ 83.926353][ T1983] ? bfq_pos_tree_add_move+0x43b/0x43b [ 83.926364][ T1983] dump_stack+0x15/0x17 [ 83.926374][ T1983] should_fail+0x3c6/0x510 [ 83.926395][ T1983] should_fail_usercopy+0x1a/0x20 [ 83.937116][ T1979] netlink: 'syz.2.424': attribute type 8 has an invalid length. [ 83.941420][ T1983] strncpy_from_user+0x24/0x2d0 [ 83.941433][ T1983] ? mutex_trylock+0xa0/0xa0 [ 83.941446][ T1983] ? getname_flags+0xba/0x520 [ 83.941458][ T1983] getname_flags+0xf2/0x520 [ 83.941469][ T1983] do_mknodat+0x176/0x450 [ 83.941480][ T1983] ? fput+0x1a/0x20 [ 83.941491][ T1983] ? may_open+0x3f0/0x3f0 [ 83.941505][ T1983] ? debug_smp_processor_id+0x17/0x20 [ 83.941516][ T1983] __x64_sys_mknod+0x80/0x90 [ 83.941526][ T1983] do_syscall_64+0x34/0x70 [ 83.941539][ T1983] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 83.941549][ T1983] RIP: 0033:0x7f486e972b59 [ 83.941561][ T1983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.941568][ T1983] RSP: 002b:00007f486dbd3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 83.941598][ T1983] RAX: ffffffffffffffda RBX: 00007f486eb03038 RCX: 00007f486e972b59 [ 83.947025][ T1982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.425'. [ 83.950750][ T1983] RDX: 0000000000000703 RSI: 0000000000000000 RDI: 0000000020000200 [ 83.950759][ T1983] RBP: 00007f486dbd30a0 R08: 0000000000000000 R09: 0000000000000000 [ 83.950775][ T1983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.962217][ T1982] device vlan2 entered promiscuous mode [ 83.963857][ T1983] R13: 000000000000006e R14: 00007f486eb03038 R15: 00007ffe19823fc8 [ 84.122360][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.143818][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.154501][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.252533][ T1986] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 84.260230][ T1986] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 84.276853][ T1986] F2FS-fs (loop2): invalid crc value [ 84.285040][ T1986] F2FS-fs (loop2): Found nat_bits in checkpoint [ 84.321288][ T936] usb 5-1: Using ep0 maxpacket: 8 [ 84.579347][ T1986] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 84.590608][ T1986] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 84.676022][ T7] device bridge_slave_1 left promiscuous mode [ 84.682801][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.690654][ T7] device bridge_slave_0 left promiscuous mode [ 84.697043][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.706021][ T7] device veth1_macvtap left promiscuous mode [ 84.712566][ T7] device veth0_vlan left promiscuous mode [ 84.721618][ T936] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 84.741856][ T936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.778262][ T936] usb 5-1: config 0 descriptor?? [ 84.973334][ T20] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 85.341307][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 85.576567][ T936] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 85.634456][ T936] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 85.671544][ T20] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.792121][ T20] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 86.001519][ T20] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.40 [ 86.042076][ T2037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.437'. [ 86.050730][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.060655][ T20] usb 1-1: Product: syz [ 86.075562][ T20] usb 1-1: Manufacturer: syz [ 86.082489][ T20] usb 1-1: SerialNumber: syz [ 86.094331][ T2039] FAULT_INJECTION: forcing a failure. [ 86.094331][ T2039] name failslab, interval 1, probability 0, space 0, times 0 [ 86.106872][ T2039] CPU: 0 PID: 2039 Comm: syz.2.438 Not tainted 5.10.221-syzkaller-01371-g1240968f7644 #0 [ 86.116478][ T2039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 86.126458][ T2039] Call Trace: [ 86.129589][ T2039] dump_stack_lvl+0x1e2/0x24b [ 86.134099][ T2039] ? bfq_pos_tree_add_move+0x43b/0x43b [ 86.139391][ T2039] dump_stack+0x15/0x17 [ 86.143381][ T2039] should_fail+0x3c6/0x510 [ 86.147641][ T2039] ? rtmsg_ifinfo_build_skb+0x7f/0x180 [ 86.152935][ T2039] __should_failslab+0xa4/0xe0 [ 86.157530][ T2039] should_failslab+0x9/0x20 [ 86.161870][ T2039] __kmalloc_track_caller+0x5f/0x320 [ 86.166991][ T2039] ? kmem_cache_alloc+0x168/0x2e0 [ 86.171850][ T2039] ? __alloc_skb+0x80/0x510 [ 86.176191][ T2039] ? rtmsg_ifinfo_build_skb+0x7f/0x180 [ 86.181486][ T2039] __alloc_skb+0xbc/0x510 [ 86.185650][ T2039] ? if_nlmsg_size+0x59c/0x5f0 [ 86.190252][ T2039] rtmsg_ifinfo_build_skb+0x7f/0x180 [ 86.195372][ T2039] unregister_netdevice_many+0xe7f/0x17d0 [ 86.200927][ T2039] ? alloc_netdev_mqs+0xcd0/0xcd0 [ 86.205789][ T2039] ? add_timer+0x68/0x80 [ 86.209868][ T2039] ? __queue_delayed_work+0x16d/0x1f0 [ 86.215079][ T2039] ? __kasan_check_read+0x11/0x20 [ 86.219935][ T2039] unregister_netdevice_queue+0x2e6/0x350 [ 86.225490][ T2039] ? linkwatch_urgent_event+0x65/0x4d0 [ 86.230782][ T2039] ? list_netdevice+0x4c0/0x4c0 [ 86.235472][ T2039] __tun_detach+0xd14/0x1510 [ 86.239896][ T2039] ? mutex_trylock+0xa0/0xa0 [ 86.244326][ T2039] tun_chr_close+0x92/0x140 [ 86.248679][ T2039] ? tun_chr_open+0x530/0x530 [ 86.253175][ T2039] __fput+0x309/0x760 [ 86.256994][ T2039] ____fput+0x15/0x20 [ 86.260819][ T2039] task_work_run+0x129/0x190 [ 86.265249][ T2039] exit_to_user_mode_loop+0xbf/0xd0 [ 86.270274][ T2039] syscall_exit_to_user_mode+0xa2/0x1a0 [ 86.275654][ T2039] do_syscall_64+0x40/0x70 [ 86.279909][ T2039] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 86.285637][ T2039] RIP: 0033:0x7fa1e05aab59 [ 86.289890][ T2039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.309326][ T2039] RSP: 002b:00007fa1df82c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 86.317569][ T2039] RAX: 0000000000000000 RBX: 00007fa1e073af60 RCX: 00007fa1e05aab59 [ 86.325393][ T2039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 86.333205][ T2039] RBP: 00007fa1df82c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 86.341030][ T2039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.348826][ T2039] R13: 000000000000000b R14: 00007fa1e073af60 R15: 00007ffc441e27b8 [ 86.390773][ T20] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 86.392785][ T2041] EXT4-fs (loop3): Ignoring removed orlov option [ 86.404692][ T2041] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 86.439724][ T2041] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 86.570220][ T930] usb 1-1: USB disconnect, device number 9 [ 86.675627][ T2050] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 86.716586][ T2050] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 86.806634][ T2050] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.821538][ T20] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 86.864266][ T2050] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 86.871689][ T2050] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 86.925183][ T936] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 86.976664][ T936] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 87.012687][ T936] asix: probe of 5-1:0.0 failed with error -71 [ 87.019612][ T936] usb 5-1: USB disconnect, device number 15 [ 87.271488][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.342464][ T2067] netlink: 24 bytes leftover after parsing attributes in process `syz.3.445'. [ 87.352259][ T20] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.362837][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.374889][ T20] usb 3-1: config 0 descriptor?? [ 87.691290][ T937] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 87.841864][ T20] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 87.855331][ T20] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0013/input/input14 [ 87.943942][ T20] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 88.101339][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.115184][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.124806][ T937] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 88.133800][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.146956][ T937] usb 4-1: config 0 descriptor?? [ 88.352397][ T2086] FAT-fs (loop1): Unrecognized mount option "uni_xlat=0" or missing value [ 88.628821][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 88.628836][ T24] audit: type=1326 audit(1721589729.638:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2052 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e05aab59 code=0x7ffc0000 [ 88.658622][ T24] audit: type=1326 audit(1721589729.638:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2052 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e05aab59 code=0x7ffc0000 [ 88.681704][ T24] audit: type=1326 audit(1721589729.648:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2052 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1e05aab59 code=0x7ffc0000 [ 88.704691][ T24] audit: type=1326 audit(1721589729.648:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2052 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e05aab59 code=0x7ffc0000 [ 88.727764][ T24] audit: type=1326 audit(1721589729.648:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2052 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e05aab59 code=0x7ffc0000 [ 88.733691][ T2088] udc-core: couldn't find an available UDC or it's busy [ 88.750775][ T24] audit: type=1326 audit(1721589729.678:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2052 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1e05aab59 code=0x7ffc0000 [ 88.750799][ T24] audit: type=1326 audit(1721589729.678:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2052 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e05aab59 code=0x7ffc0000 [ 88.803848][ T2088] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.804472][ T24] audit: type=1326 audit(1721589729.678:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2052 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e05aab59 code=0x7ffc0000 [ 88.847213][ T24] audit: type=1326 audit(1721589729.698:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2052 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1e05aab59 code=0x7ffc0000 [ 88.901021][ T24] audit: type=1326 audit(1721589729.698:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2052 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e05aab59 code=0x7ffc0000 [ 88.951319][ T937] usbhid 4-1:0.0: can't add hid device: -71 [ 88.957245][ T937] usbhid: probe of 4-1:0.0 failed with error -71 [ 88.964301][ T937] usb 4-1: USB disconnect, device number 15 [ 88.971581][ T2097] FAT-fs (loop3): Unrecognized mount option "uni_xlat=0" or missing value [ 89.873387][ T2053] netlink: 'syz.2.442': attribute type 3 has an invalid length. [ 89.982093][ T2119] netem: incorrect gi model size [ 90.002696][ T2119] netem: change failed [ 90.395815][ T2106] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 90.405266][ T2106] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 90.417309][ T2106] F2FS-fs (loop0): Found nat_bits in checkpoint [ 90.460012][ T2106] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 90.467037][ T2106] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 90.533000][ T576] usb 3-1: USB disconnect, device number 10 [ 90.540287][ T9] handle_bad_sector: 42 callbacks suppressed [ 90.540301][ T9] attempt to access beyond end of device [ 90.540301][ T9] loop0: rw=1, want=45104, limit=40427 [ 91.386230][ T2151] binder: BINDER_SET_CONTEXT_MGR already set [ 91.392087][ T576] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 91.392533][ T2152] binder: 2150:2152 ioctl c0306201 20000380 returned -14 [ 91.405742][ T2151] binder: 2150:2151 ioctl 4018620d 200001c0 returned -16 [ 91.496755][ T2155] fuse: Unknown parameter 'grou00000000000000000000' [ 91.646033][ T576] usb 1-1: Using ep0 maxpacket: 32 [ 91.771930][ T576] usb 1-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 91.791789][ T576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.894318][ T576] usb 1-1: config 0 descriptor?? [ 92.022651][ T2163] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 92.191457][ T576] usb 1-1: string descriptor 0 read error: -71 [ 92.197925][ T576] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 92.205793][ T576] usb 1-1: USB disconnect, device number 10 [ 92.211280][ T937] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 92.881333][ T937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.951617][ T2184] netlink: 60 bytes leftover after parsing attributes in process `syz.3.473'. [ 92.960415][ T2184] netlink: 35 bytes leftover after parsing attributes in process `syz.3.473'. [ 93.198954][ T936] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 93.206568][ T937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 93.217229][ T937] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.218785][ T2182] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.226725][ T937] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.267433][ T2182] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.609677][ T937] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.651988][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.662169][ T937] usb 2-1: Product: syz [ 93.666160][ T937] usb 2-1: Manufacturer: syz [ 93.670593][ T937] usb 2-1: SerialNumber: syz [ 93.691401][ T2153] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 93.713410][ T1793] attempt to access beyond end of device [ 93.713410][ T1793] loop0: rw=2049, want=45104, limit=40427 [ 93.821311][ T936] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.831430][ T936] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.842337][ T936] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.848345][ T24] kauditd_printk_skb: 17 callbacks suppressed [ 93.848359][ T24] audit: type=1400 audit(1721589734.861:912): avc: denied { create } for pid=2200 comm="syz.0.476" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.881156][ T24] audit: type=1400 audit(1721589734.871:913): avc: denied { read } for pid=2200 comm="syz.0.476" name="file1" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.903046][ T24] audit: type=1400 audit(1721589734.871:914): avc: denied { open } for pid=2200 comm="syz.0.476" path="/19/bus/file1" dev="overlay" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.941407][ T937] cdc_ncm 2-1:1.0: bind() failure [ 93.947131][ T937] cdc_ncm 2-1:1.1: bind() failure [ 93.955924][ T937] usb 2-1: USB disconnect, device number 13 [ 94.001388][ T940] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 94.041659][ T936] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.050655][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.058847][ T936] usb 3-1: Product: syz [ 94.063051][ T936] usb 3-1: Manufacturer: syz [ 94.067443][ T936] usb 3-1: SerialNumber: syz [ 94.131339][ T930] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 94.251304][ T940] usb 4-1: Using ep0 maxpacket: 16 [ 94.371376][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.382218][ T940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.394810][ T940] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.403651][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.412257][ T940] usb 4-1: config 0 descriptor?? [ 94.501330][ T930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.512186][ T930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.522008][ T930] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 94.530973][ T930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.539418][ T930] usb 1-1: config 0 descriptor?? [ 94.603076][ T2206] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 94.610713][ T2206] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 94.620840][ T2206] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.651994][ T2206] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 94.658900][ T2206] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.686219][ T24] audit: type=1400 audit(1721589735.701:915): avc: denied { setattr } for pid=2205 comm="syz.1.479" name="#20" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.707765][ T24] audit: type=1400 audit(1721589735.701:916): avc: denied { link } for pid=2205 comm="syz.1.479" name="#20" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.728898][ T24] audit: type=1400 audit(1721589735.701:917): avc: denied { rename } for pid=2205 comm="syz.1.479" name="file0" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.750962][ T24] audit: type=1400 audit(1721589735.701:918): avc: denied { rename } for pid=2205 comm="syz.1.479" name="#21" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 94.775293][ T1898] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 94.775304][ T1898] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 94.781334][ T24] audit: type=1400 audit(1721589735.701:919): avc: denied { reparent } for pid=2205 comm="syz.1.479" name="#21" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 94.783071][ T1898] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 94.811629][ T1898] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 94.818989][ T1898] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 94.826648][ T1898] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 94.834049][ T1898] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 95.004066][ T940] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0014/input/input15 [ 95.092468][ T940] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 95.211342][ T936] cdc_ncm 3-1:1.0: bind() failure [ 95.217463][ T936] cdc_ncm 3-1:1.1: bind() failure [ 95.333444][ T2224] F2FS-fs (loop1): Invalid log sectorsize (3) [ 95.339395][ T2224] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 95.347724][ T2224] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 95.356461][ T2224] F2FS-fs (loop1): Unrecognized mount option "00000000000000000000184467440737095516151844674407370955161518446744073709551615" or missing value [ 95.430567][ T576] usb 4-1: USB disconnect, device number 16 [ 95.684799][ T2201] udc-core: couldn't find an available UDC or it's busy [ 95.692727][ T2201] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 95.711278][ T930] uclogic 0003:256C:006D.0015: failed retrieving string descriptor #100: -71 [ 95.719908][ T930] uclogic 0003:256C:006D.0015: failed retrieving pen parameters: -71 [ 95.728177][ T930] uclogic 0003:256C:006D.0015: failed probing pen v1 parameters: -71 [ 95.736248][ T930] uclogic 0003:256C:006D.0015: failed probing parameters: -71 [ 95.743731][ T930] uclogic: probe of 0003:256C:006D.0015 failed with error -71 [ 95.761795][ T930] usb 1-1: USB disconnect, device number 11 [ 96.225368][ T24] audit: type=1400 audit(1721589737.241:920): avc: denied { unlink } for pid=1793 comm="syz-executor" name="file1" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.249908][ T930] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 96.295429][ T24] audit: type=1400 audit(1721589737.311:921): avc: denied { create } for pid=2233 comm="syz.0.486" name="#25" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.301733][ T2234] overlayfs: bad index found (index=index/00fb210001197b018f1bb046178267dab046f45fbf6f12bc448d00000000000000, ftype=2000, origin ftype=a000). [ 96.403136][ T2240] EXT4-fs (loop1): orphan cleanup on readonly fs [ 96.409964][ T2240] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.488: bg 0: block 64: padding at end of block bitmap is not set [ 96.424296][ T2240] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.488: Failed to acquire dquot type 0 [ 96.435676][ T2240] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.488: Failed to acquire dquot type 0 [ 96.447268][ T2240] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.488: Failed to acquire dquot type 0 [ 96.450661][ T936] usb 3-1: USB disconnect, device number 11 [ 96.458698][ T2240] EXT4-fs (loop1): 1 orphan inode deleted [ 96.469825][ T2240] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 96.491341][ T930] usb 4-1: Using ep0 maxpacket: 16 [ 96.492729][ T2251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.491'. [ 96.505144][ T2251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'. [ 96.546600][ T2254] device wireguard0 entered promiscuous mode [ 96.611348][ T930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.622366][ T930] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.636589][ T930] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.645590][ T930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.658008][ T930] usb 4-1: config 0 descriptor?? [ 96.662966][ T940] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 96.737732][ T2260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 97.107233][ T940] usb 1-1: Using ep0 maxpacket: 8 [ 97.231428][ T940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.241302][ T576] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 97.303498][ T930] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0016/input/input16 [ 97.383131][ T930] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 97.402495][ T940] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 97.411467][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.419274][ T940] usb 1-1: Product: syz [ 97.423538][ T940] usb 1-1: Manufacturer: syz [ 97.428098][ T940] usb 1-1: SerialNumber: syz [ 97.433963][ T940] usb 1-1: config 0 descriptor?? [ 97.503317][ T576] usb 2-1: Using ep0 maxpacket: 32 [ 97.624857][ T2280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.499'. [ 98.212473][ T937] usb 4-1: USB disconnect, device number 17 [ 98.263578][ T2246] EXT4-fs (loop0): Test dummy encryption mode enabled [ 98.270339][ T2246] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 98.279418][ T2246] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue [ 98.292089][ T576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 98.303804][ T576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 98.341776][ T2280] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 98.348307][ T2280] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 98.358665][ T2246] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 98.367031][ T2280] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.398601][ T2280] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 98.405524][ T2280] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 98.431372][ T940] uvcvideo: Found UVC 0.00 device syz (8086:0b03) [ 98.437666][ T940] uvcvideo: No valid video chain found. [ 98.444566][ T940] usb 1-1: USB disconnect, device number 12 [ 98.491360][ T576] usb 2-1: New USB device found, idVendor=04ca, idProduct=3004, bcdDevice=27.a1 [ 98.500271][ T576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.508088][ T576] usb 2-1: Product: syz [ 98.512036][ T576] usb 2-1: Manufacturer: syz [ 98.516426][ T576] usb 2-1: SerialNumber: syz [ 98.522572][ T576] usb 2-1: config 0 descriptor?? [ 98.536463][ T1845] attempt to access beyond end of device [ 98.536463][ T1845] loop2: rw=2049, want=45112, limit=40427 [ 99.054534][ T2293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 99.065772][ T2293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.072802][ T2293] IPv6: NLM_F_CREATE should be set when creating new route [ 99.080389][ T2293] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2293 comm=syz.3.501 [ 99.092976][ T24] kauditd_printk_skb: 23 callbacks suppressed [ 99.092988][ T24] audit: type=1400 audit(1721589740.111:939): avc: denied { read } for pid=2292 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 99.120613][ T2293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 99.148649][ T24] audit: type=1400 audit(1721589740.161:940): avc: denied { bind } for pid=2292 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.296319][ T2300] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.304053][ T2300] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.311562][ T2300] device bridge_slave_0 entered promiscuous mode [ 99.328183][ T2300] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.335287][ T2300] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.342812][ T2300] device bridge_slave_1 entered promiscuous mode [ 99.424538][ T2305] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.432284][ T2305] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.439640][ T2305] device bridge_slave_0 entered promiscuous mode [ 99.456208][ T2305] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.463437][ T2305] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.470771][ T2305] device bridge_slave_1 entered promiscuous mode [ 99.478183][ T2300] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.485047][ T2300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.492140][ T2300] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.498906][ T2300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.570223][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.582286][ T576] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.599732][ T576] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.635385][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.646879][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.653851][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.662933][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.670990][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.677867][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.692683][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.700443][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.714836][ T2315] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 99.728207][ T2315] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.741752][ T2315] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 99.749681][ T2315] System zones: 0-1, 3-36 [ 99.755330][ T2315] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 99.779518][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.795808][ T2300] device veth0_vlan entered promiscuous mode [ 99.807392][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.816276][ T24] audit: type=1400 audit(1721589740.831:941): avc: denied { setattr } for pid=2314 comm="syz.2.507" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.864266][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.872096][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.880533][ T20] usb 2-1: USB disconnect, device number 14 [ 99.899152][ T2300] device veth1_macvtap entered promiscuous mode [ 99.906660][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.942658][ T24] audit: type=1400 audit(1721589740.961:942): avc: denied { ioctl } for pid=2322 comm="syz.2.509" path="/dev/ppp" dev="devtmpfs" ino=133 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.967963][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.975789][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.986407][ T940] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.993288][ T940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.002765][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.042263][ T7] device bridge_slave_1 left promiscuous mode [ 100.048224][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.060984][ T7] device bridge_slave_0 left promiscuous mode [ 100.067126][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.074909][ T7] device veth1_macvtap left promiscuous mode [ 100.080780][ T7] device veth0_vlan left promiscuous mode [ 100.088148][ T2318] F2FS-fs (loop3): invalid crc value [ 100.092902][ T2323] FAT-fs (loop2): Unrecognized mount option "C" or missing value [ 100.106352][ T2318] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.269477][ T2331] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 100.333352][ T2331] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.341645][ T24] audit: type=1400 audit(1721589741.281:943): avc: denied { write } for pid=2322 comm="syz.2.509" name="001" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.365112][ T24] audit: type=1400 audit(1721589741.381:944): avc: denied { create } for pid=2322 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 100.385983][ T2318] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 100.412565][ T2329] attempt to access beyond end of device [ 100.412565][ T2329] loop3: rw=2049, want=45104, limit=40427 [ 100.424284][ T2318] FAULT_INJECTION: forcing a failure. [ 100.424284][ T2318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.437426][ T2318] CPU: 1 PID: 2318 Comm: syz.3.508 Not tainted 5.10.221-syzkaller-01371-g1240968f7644 #0 [ 100.447033][ T2318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 100.456925][ T2318] Call Trace: [ 100.460058][ T2318] dump_stack_lvl+0x1e2/0x24b [ 100.464569][ T2318] ? panic+0x812/0x812 [ 100.468471][ T2318] ? bfq_pos_tree_add_move+0x43b/0x43b [ 100.473767][ T2318] dump_stack+0x15/0x17 [ 100.477763][ T2318] should_fail+0x3c6/0x510 [ 100.482101][ T2318] should_fail_usercopy+0x1a/0x20 [ 100.486969][ T2318] strncpy_from_user+0x24/0x2d0 [ 100.491645][ T2318] ? getname_flags+0xba/0x520 [ 100.496158][ T2318] getname_flags+0xf2/0x520 [ 100.500498][ T2318] __x64_sys_renameat2+0xc8/0xf0 [ 100.505367][ T2318] do_syscall_64+0x34/0x70 [ 100.509633][ T2318] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 100.515350][ T2318] RIP: 0033:0x7fe814898b59 [ 100.519603][ T2318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.539132][ T2318] RSP: 002b:00007fe813b1a048 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 100.547817][ T2318] RAX: ffffffffffffffda RBX: 00007fe814a28f60 RCX: 00007fe814898b59 [ 100.555810][ T2318] RDX: 0000000000000006 RSI: 00000000200001c0 RDI: 0000000000000006 [ 100.563606][ T2318] RBP: 00007fe813b1a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 100.571415][ T2318] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 100.579225][ T2318] R13: 000000000000000b R14: 00007fe814a28f60 R15: 00007ffc52b72478 [ 100.592518][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.600520][ T937] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.607470][ T937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.622757][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.630832][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.639817][ T2318] device syzkaller0 entered promiscuous mode [ 100.649185][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.657265][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.665441][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.673701][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.694289][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.703629][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.720004][ T2305] device veth0_vlan entered promiscuous mode [ 100.727897][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.735093][ T1951] attempt to access beyond end of device [ 100.735093][ T1951] loop3: rw=524288, want=45072, limit=40427 [ 100.738098][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.748719][ T1951] attempt to access beyond end of device [ 100.748719][ T1951] loop3: rw=0, want=45072, limit=40427 [ 100.755722][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.774736][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.783638][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.790937][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.828170][ T2305] device veth1_macvtap entered promiscuous mode [ 100.872350][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.880420][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.889961][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.900305][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.908828][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.917430][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.925737][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.950260][ T2339] netlink: 13 bytes leftover after parsing attributes in process `syz.0.513'. [ 101.252826][ T2354] device pim6reg1 entered promiscuous mode [ 101.366594][ T2344] F2FS-fs (loop4): Found nat_bits in checkpoint [ 101.378797][ T2359] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.411280][ T2359] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.418878][ T2359] device bridge_slave_0 entered promiscuous mode [ 101.531013][ T2359] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.538207][ T2359] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.548194][ T2359] device bridge_slave_1 entered promiscuous mode [ 101.651454][ T2344] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 101.763260][ T2382] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 101.763260][ T2382] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 101.763260][ T2382] [ 101.795227][ T2382] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 101.853622][ T2382] EXT4-fs (loop2): Remounting filesystem read-only [ 101.917457][ T2382] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #3: comm syz.2.525: mark_inode_dirty error [ 102.063002][ T2382] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 102.090595][ T2382] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #3: comm syz.2.525: mark_inode_dirty error [ 102.104981][ T2305] attempt to access beyond end of device [ 102.104981][ T2305] loop4: rw=2049, want=45104, limit=40427 [ 102.118791][ T2382] Quota error (device loop2): write_blk: dquota write failed [ 102.126205][ T2382] Quota error (device loop2): qtree_write_dquot: Error -27 occurred while creating quota [ 102.135925][ T2382] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.525: Failed to acquire dquot type 0 [ 102.136588][ T7] device bridge_slave_1 left promiscuous mode [ 102.153264][ T2382] EXT4-fs (loop2): 1 truncate cleaned up [ 102.171365][ T2382] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr, [ 102.182237][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.204024][ T24] audit: type=1400 audit(1721589743.221:945): avc: denied { read } for pid=2390 comm="syz.1.527" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 102.204368][ T2382] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038 (0x7fffffff) [ 102.237594][ T7] device bridge_slave_0 left promiscuous mode [ 102.248022][ T24] audit: type=1400 audit(1721589743.221:946): avc: denied { open } for pid=2390 comm="syz.1.527" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 102.261589][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.283739][ T7] device veth1_macvtap left promiscuous mode [ 102.289590][ T7] device veth0_vlan left promiscuous mode [ 102.501587][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.508916][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.537270][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.550520][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.571885][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.578738][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.622121][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.630336][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.638375][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.645229][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.665119][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.673628][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.681602][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.710298][ T2359] device veth0_vlan entered promiscuous mode [ 102.721988][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.730198][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.744536][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.766236][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.792296][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.844304][ T2359] device veth1_macvtap entered promiscuous mode [ 102.881061][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.896544][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.925089][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.949996][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.030528][ T2416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.532'. [ 103.074069][ T2414] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.081743][ T2414] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.090089][ T2414] device bridge_slave_0 entered promiscuous mode [ 103.097605][ T2414] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.104632][ T2414] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.112423][ T2414] device bridge_slave_1 entered promiscuous mode [ 103.175799][ T2414] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.182700][ T2414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.189784][ T2414] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.196576][ T2414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.221405][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.229066][ T576] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.238072][ T576] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.262336][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.270346][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.277228][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.284695][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.285460][ T2426] EXT4-fs (loop3): 1 truncate cleaned up [ 103.293271][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.304985][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.306973][ T2426] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,quota,noload,jqfmt=vfsold,,errors=continue [ 103.312451][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.332516][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.352393][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.360607][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.369432][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.376741][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.388206][ T2414] device veth0_vlan entered promiscuous mode [ 103.401595][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.411066][ T2414] device veth1_macvtap entered promiscuous mode [ 103.423497][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.438985][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.632377][ T7] device bridge_slave_1 left promiscuous mode [ 103.647372][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.661953][ T7] device bridge_slave_0 left promiscuous mode [ 103.668161][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.671274][ T940] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 103.683585][ T7] device veth1_macvtap left promiscuous mode [ 103.691865][ T7] device veth0_vlan left promiscuous mode [ 103.759651][ T2433] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.812854][ T2433] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.951642][ T2449] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 103.966810][ T2449] EXT4-fs (loop1): mount failed [ 103.981272][ T940] usb 4-1: device descriptor read/64, error -71 [ 104.528463][ T940] usb 4-1: device descriptor read/64, error -71 [ 104.569043][ T2300] attempt to access beyond end of device [ 104.569043][ T2300] loop0: rw=2049, want=45104, limit=40427 [ 104.594486][ T2465] EXT4-fs (loop2): 1 truncate cleaned up [ 104.600000][ T2465] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 104.776856][ T2469] FAT-fs (loop4): Directory bread(block 64) failed [ 104.785648][ T2469] FAT-fs (loop4): Directory bread(block 65) failed [ 104.792142][ T2469] FAT-fs (loop4): Directory bread(block 66) failed [ 104.798545][ T2469] FAT-fs (loop4): Directory bread(block 67) failed [ 104.804938][ T2469] FAT-fs (loop4): Directory bread(block 68) failed [ 104.811462][ T2469] FAT-fs (loop4): Directory bread(block 69) failed [ 104.817836][ T2469] FAT-fs (loop4): Directory bread(block 70) failed [ 104.824294][ T2469] FAT-fs (loop4): Directory bread(block 71) failed [ 104.830673][ T2469] FAT-fs (loop4): Directory bread(block 72) failed [ 104.831383][ T940] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 104.844838][ T2469] FAT-fs (loop4): Directory bread(block 73) failed [ 104.866892][ T2469] 9pnet: Insufficient options for proto=fd [ 105.111248][ T940] usb 4-1: device descriptor read/64, error -71 [ 105.450779][ T930] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 105.469760][ T2483] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.511129][ T2483] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 105.741328][ T2502] fuse: Unknown parameter '0x0000000000000008' [ 105.931312][ T940] usb 4-1: device descriptor read/64, error -71 [ 105.945332][ T1898] attempt to access beyond end of device [ 105.945332][ T1898] loop1: rw=2049, want=45104, limit=40427 [ 105.986024][ T2510] xt_bpf: check failed: parse error [ 106.051358][ T930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.062486][ T940] usb usb4-port1: attempt power cycle [ 106.068279][ T930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.105807][ T930] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 106.132538][ T930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.144778][ T2519] netlink: 52 bytes leftover after parsing attributes in process `syz.1.561'. [ 106.154500][ T2519] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.161892][ T930] usb 1-1: config 0 descriptor?? [ 106.311350][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 106.479326][ T2528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 106.642827][ T2534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.566'. [ 106.651915][ T2534] IPv6: Can't replace route, no match found [ 106.689615][ T2480] device syzkaller0 entered promiscuous mode [ 106.731328][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.742316][ T25] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 106.751645][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.759894][ T2480] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,resgid=0x0000000000000000,usrquota,data_err=abort,data_err=abort,,errors=continue [ 106.760358][ T25] usb 5-1: config 0 descriptor?? [ 106.808615][ T2536] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 106.845192][ T2532] F2FS-fs (loop3): invalid crc value [ 106.853397][ T2532] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.909005][ T2532] F2FS-fs (loop3): recover fsync data on readonly fs [ 106.915836][ T2532] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 106.961335][ T930] usbhid 1-1:0.0: can't add hid device: -71 [ 106.967264][ T930] usbhid: probe of 1-1:0.0 failed with error -71 [ 106.974949][ T930] usb 1-1: USB disconnect, device number 13 [ 107.282057][ T25] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 107.291550][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0017/input/input17 [ 107.311277][ T937] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 107.373806][ T25] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 107.458768][ T2551] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.465697][ T2551] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.472900][ T2551] device bridge_slave_0 entered promiscuous mode [ 107.481783][ T2551] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.488745][ T2551] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.496121][ T2551] device bridge_slave_1 entered promiscuous mode [ 107.527134][ T930] usb 5-1: USB disconnect, device number 16 [ 107.559591][ T2551] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.566490][ T2551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.573572][ T2551] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.574008][ T937] usb 2-1: Using ep0 maxpacket: 32 [ 107.580335][ T2551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.614778][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.622442][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.629509][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.639010][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.648298][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.655164][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.667002][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.675446][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.682313][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.700706][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.708769][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.724653][ T2551] device veth0_vlan entered promiscuous mode [ 107.731571][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.739682][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.748507][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.753338][ T2561] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 107.756104][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.763323][ T2561] EXT4-fs (loop2): write access will be enabled during recovery [ 107.778001][ T2561] EXT4-fs (loop2): barriers disabled [ 107.778778][ T2551] device veth1_macvtap entered promiscuous mode [ 107.783484][ T2561] JBD2: no valid journal superblock found [ 107.791663][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.795317][ T2561] EXT4-fs (loop2): error loading journal [ 107.815883][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.824270][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.871552][ T937] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 107.881082][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.889082][ T937] usb 2-1: Product: syz [ 107.893258][ T937] usb 2-1: Manufacturer: syz [ 107.897672][ T937] usb 2-1: SerialNumber: syz [ 107.908672][ T937] usb 2-1: config 0 descriptor?? [ 107.916166][ T2564] FAULT_INJECTION: forcing a failure. [ 107.916166][ T2564] name failslab, interval 1, probability 0, space 0, times 0 [ 107.928782][ T2564] CPU: 0 PID: 2564 Comm: syz.0.570 Not tainted 5.10.221-syzkaller-01371-g1240968f7644 #0 [ 107.938336][ T2564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 107.948235][ T2564] Call Trace: [ 107.951360][ T2564] dump_stack_lvl+0x1e2/0x24b [ 107.955867][ T2564] ? panic+0x812/0x812 [ 107.959770][ T2564] ? bfq_pos_tree_add_move+0x43b/0x43b [ 107.965070][ T2564] dump_stack+0x15/0x17 [ 107.969060][ T2564] should_fail+0x3c6/0x510 [ 107.973312][ T2564] ? __d_alloc+0x2d/0x6c0 [ 107.977477][ T2564] __should_failslab+0xa4/0xe0 [ 107.982078][ T2564] should_failslab+0x9/0x20 [ 107.986420][ T2564] kmem_cache_alloc+0x3d/0x2e0 [ 107.991017][ T2564] __d_alloc+0x2d/0x6c0 [ 107.995012][ T2564] d_alloc+0x4b/0x1d0 [ 107.998830][ T2564] __lookup_hash+0xe7/0x290 [ 108.003171][ T2564] filename_create+0x202/0x750 [ 108.007767][ T2564] ? __check_object_size+0x2e6/0x3c0 [ 108.012904][ T2564] ? kern_path_create+0x40/0x40 [ 108.017585][ T2564] do_mknodat+0x187/0x450 [ 108.021754][ T2564] ? fput+0x1a/0x20 [ 108.025390][ T2564] ? may_open+0x3f0/0x3f0 [ 108.029554][ T2564] ? debug_smp_processor_id+0x17/0x20 [ 108.034764][ T2564] __x64_sys_mknod+0x80/0x90 [ 108.039186][ T2564] do_syscall_64+0x34/0x70 [ 108.043448][ T2564] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 108.049169][ T2564] RIP: 0033:0x7f41867edb59 [ 108.053424][ T2564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.072865][ T2564] RSP: 002b:00007f4185a6f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 108.081109][ T2564] RAX: ffffffffffffffda RBX: 00007f418697df60 RCX: 00007f41867edb59 [ 108.088947][ T2564] RDX: 0000000000000701 RSI: 0000000000000000 RDI: 0000000020000200 [ 108.096729][ T2564] RBP: 00007f4185a6f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.104540][ T2564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.112352][ T2564] R13: 000000000000000b R14: 00007f418697df60 R15: 00007fff41556008 [ 108.241943][ T1075] device bridge_slave_1 left promiscuous mode [ 108.248041][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.256193][ T1075] device bridge_slave_0 left promiscuous mode [ 108.262605][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.270443][ T1075] device veth1_macvtap left promiscuous mode [ 108.276343][ T1075] device veth0_vlan left promiscuous mode [ 108.333338][ T2548] udc-core: couldn't find an available UDC or it's busy [ 108.340127][ T2548] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 108.411278][ T15] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 108.624689][ T940] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 108.769316][ T2580] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 108.769316][ T2580] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 108.769316][ T2580] [ 108.787104][ T2580] EXT4-fs (loop2): Ignoring removed bh option [ 108.874873][ T2580] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802602c, mo2=0002] [ 108.882760][ T2580] System zones: 1-12 [ 108.886829][ T2580] EXT4-fs error (device loop2): __ext4_iget:4958: inode #11: block 393240: comm syz.2.577: invalid block [ 108.898302][ T2580] EXT4-fs (loop2): Remounting filesystem read-only [ 108.904657][ T2580] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.577: couldn't read orphan inode 11 (err -117) [ 108.916510][ T2580] EXT4-fs (loop2): mounted filesystem without journal. Opts: noacl,min_batch_time=0x0000000000000001,errors=remount-ro,sb=0x0000000000000008,bh [ 108.921482][ T15] usb 5-1: Using ep0 maxpacket: 32 [ 108.939574][ T2578] cgroup: syz.2.577 (2578) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 108.955807][ T2578] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 109.051368][ T15] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.221350][ T15] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=a4.72 [ 109.230275][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.238236][ T940] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.249247][ T15] usb 5-1: Product: syz [ 109.253302][ T15] usb 5-1: Manufacturer: syz [ 109.257755][ T940] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 10 [ 109.268702][ T15] usb 5-1: SerialNumber: syz [ 109.273454][ T940] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 42037, setting to 1024 [ 109.284761][ T15] usb 5-1: config 0 descriptor?? [ 109.289643][ T940] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 109.451738][ T940] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.460956][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.469273][ T940] usb 1-1: Product: syz [ 109.475573][ T940] usb 1-1: Manufacturer: syz [ 109.480053][ T940] usb 1-1: SerialNumber: syz [ 109.522918][ T24] kauditd_printk_skb: 33 callbacks suppressed [ 109.522933][ T24] audit: type=1400 audit(1721589750.541:979): avc: denied { mount } for pid=2565 comm="syz.4.573" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 109.551423][ T24] audit: type=1400 audit(1721589750.541:980): avc: denied { mounton } for pid=2565 comm="syz.4.573" path="/10/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 109.581468][ T24] audit: type=1400 audit(1721589750.541:981): avc: denied { mount } for pid=2565 comm="syz.4.573" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 109.604648][ T24] audit: type=1400 audit(1721589750.541:982): avc: denied { bind } for pid=2565 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.638095][ T2566] EXT4-fs (loop4): Ignoring removed oldalloc option [ 109.644879][ T2566] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.656219][ T2566] EXT4-fs (loop4): 1 truncate cleaned up [ 109.661933][ T2566] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue [ 109.721913][ T2574] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 109.808558][ T2589] F2FS-fs (loop2): Found nat_bits in checkpoint [ 109.840293][ T2589] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 109.883488][ T15] usb 5-1: unknown interface protocol 0xf, assuming v1 [ 109.892874][ T15] usb 5-1: USB disconnect, device number 17 [ 110.373592][ T2604] exfat: Deprecated parameter 'namecase' [ 110.381509][ T2574] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 110.392961][ T2604] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 110.412802][ T24] audit: type=1400 audit(1721589751.431:983): avc: denied { read append open } for pid=2603 comm="syz.1.582" path="/44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop1" ino=1048650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.462082][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 110.478453][ T24] audit: type=1400 audit(1721589751.491:984): avc: denied { map } for pid=2603 comm="syz.1.582" path="socket:[26095]" dev="sockfs" ino=26095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 110.530014][ T2414] attempt to access beyond end of device [ 110.530014][ T2414] loop2: rw=2049, want=45104, limit=40427 [ 110.661062][ T24] audit: type=1400 audit(1721589751.671:985): avc: denied { unmount } for pid=2305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 110.684088][ T24] audit: type=1400 audit(1721589751.701:986): avc: denied { unmount } for pid=2305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 110.751305][ T940] cdc_ncm 1-1:1.0: bind() failure [ 110.791317][ T940] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 110.811343][ T940] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 110.836066][ T940] usb 1-1: USB disconnect, device number 14 [ 111.176390][ T2623] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 111.217396][ T2623] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2204: inode #15: comm syz.4.587: corrupted in-inode xattr [ 111.231015][ T2623] EXT4-fs (loop4): Remounting filesystem read-only [ 111.231389][ T24] audit: type=1400 audit(1721589752.251:987): avc: denied { write } for pid=2627 comm="syz.3.588" name="loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 111.240185][ T2623] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.587: couldn't read orphan inode 15 (err -117) [ 111.262990][ T24] audit: type=1400 audit(1721589752.251:988): avc: denied { open } for pid=2627 comm="syz.3.588" path="/dev/loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 111.321878][ T2623] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpid,norecovery, [ 111.861305][ T930] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 111.891691][ T937] rtl8150 2-1:0.0: couldn't reset the device [ 111.898683][ T937] rtl8150: probe of 2-1:0.0 failed with error -5 [ 111.908706][ T937] usb 2-1: USB disconnect, device number 15 [ 112.218504][ T2639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.590'. [ 112.242864][ T2642] netlink: 60 bytes leftover after parsing attributes in process `syz.1.591'. [ 112.251577][ T2642] netlink: 35 bytes leftover after parsing attributes in process `syz.1.591'. [ 112.569245][ T2646] netlink: 182 bytes leftover after parsing attributes in process `syz.4.593'. [ 112.595900][ T2650] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.602898][ T2650] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.654673][ T930] usb 1-1: Using ep0 maxpacket: 16 [ 112.781334][ T930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.781962][ T2657] EXT4-fs (loop4): Ignoring removed orlov option [ 112.829495][ T930] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.842322][ T940] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 112.851643][ T930] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 112.860673][ T930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.870362][ T2657] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,data_err=abort,noblock_validity,jqfmt=vfsv1,norecovery,auto_da_alloc,orlov,bsdgroups,max_batch_time=0x0000000000000002,user_xattr,quota,,errors=continue [ 112.873494][ T930] usb 1-1: config 0 descriptor?? [ 113.211460][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.222686][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.232425][ T940] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 113.241600][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.250138][ T940] usb 4-1: config 0 descriptor?? [ 113.461266][ T937] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 113.473476][ T930] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0018/input/input18 [ 113.539335][ T2691] tipc: Started in network mode [ 113.544215][ T2691] tipc: Own node identity ac1414aa, cluster identity 4711 [ 113.553202][ T930] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 113.565719][ T2691] tipc: Enabled bearer , priority 10 [ 113.591276][ T940] usbhid 4-1:0.0: can't add hid device: -71 [ 113.600371][ T940] usbhid: probe of 4-1:0.0 failed with error -71 [ 113.608476][ T940] usb 4-1: USB disconnect, device number 21 [ 113.865321][ T2698] netlink: 60 bytes leftover after parsing attributes in process `syz.3.607'. [ 113.874233][ T2698] netlink: 35 bytes leftover after parsing attributes in process `syz.3.607'. [ 114.268451][ T934] usb 1-1: USB disconnect, device number 15 [ 114.321365][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.332507][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.342117][ T937] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 114.351016][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.359605][ T937] usb 5-1: config 0 descriptor?? [ 114.549075][ T2718] netlink: 248 bytes leftover after parsing attributes in process `syz.1.615'. [ 114.671378][ T940] tipc: 32-bit node address hash set to aa1414ac [ 114.683212][ T2725] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 114.883234][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 114.883259][ T24] audit: type=1326 audit(1721589755.891:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2724 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3afa7b59 code=0x7ffc0000 [ 114.912986][ T24] audit: type=1326 audit(1721589755.891:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2724 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3afa7b59 code=0x7ffc0000 [ 114.960322][ T24] audit: type=1326 audit(1721589755.891:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2724 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f0e3afa7b59 code=0x7ffc0000 [ 115.105478][ T24] audit: type=1326 audit(1721589755.891:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2724 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3afa7b59 code=0x7ffc0000 [ 115.128891][ T24] audit: type=1326 audit(1721589755.891:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2724 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3afa7b59 code=0x7ffc0000 [ 115.152322][ T24] audit: type=1326 audit(1721589755.891:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2724 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0e3afa7b59 code=0x7ffc0000 [ 115.176031][ T24] audit: type=1326 audit(1721589755.901:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2724 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3afa7b59 code=0x7ffc0000 [ 115.200915][ T24] audit: type=1326 audit(1721589755.901:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2724 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3afa7b59 code=0x7ffc0000 [ 115.305548][ T2772] netlink: 60 bytes leftover after parsing attributes in process `syz.0.621'. [ 115.314301][ T2772] netlink: 35 bytes leftover after parsing attributes in process `syz.0.621'. [ 115.611825][ T2778] FAT-fs (loop2): Unrecognized mount option "utf80" or missing value [ 115.611906][ T937] usbhid 5-1:0.0: can't add hid device: -71 [ 115.642384][ T937] usbhid: probe of 5-1:0.0 failed with error -71 [ 115.643603][ T2779] netlink: 20 bytes leftover after parsing attributes in process `syz.3.625'. [ 115.650860][ T937] usb 5-1: USB disconnect, device number 18 [ 116.253441][ T2786] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 116.267625][ T2786] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.624: invalid indirect mapped block 1 (level 1) [ 116.285002][ T2786] EXT4-fs (loop2): 1 truncate cleaned up [ 116.290473][ T2786] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 116.562235][ T24] audit: type=1326 audit(1721589757.581:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2810 comm="syz.4.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8989a1b59 code=0x7ffc0000 [ 116.595001][ T24] audit: type=1326 audit(1721589757.581:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2810 comm="syz.4.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fc8989a1b59 code=0x7ffc0000 [ 116.630772][ T2797] F2FS-fs (loop3): invalid crc value [ 116.647429][ T2797] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.695334][ T2797] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 116.783246][ T576] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 116.905124][ T2825] attempt to access beyond end of device [ 116.905124][ T2825] loop3: rw=10241, want=45104, limit=40427 [ 116.929947][ T2825] attempt to access beyond end of device [ 116.929947][ T2825] loop3: rw=2049, want=45112, limit=40427 [ 117.276664][ T2359] attempt to access beyond end of device [ 117.276664][ T2359] loop3: rw=2049, want=45120, limit=40427 [ 117.311364][ T576] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 16 [ 117.328886][ T576] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.352673][ T576] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.362596][ T576] usb 1-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 117.371773][ T576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.391490][ T576] usb 1-1: config 0 descriptor?? [ 117.532029][ T2840] xt_TPROXY: Can be used only with -p tcp or -p udp [ 117.665014][ T2850] __nla_validate_parse: 1 callbacks suppressed [ 117.665021][ T2850] netlink: 337 bytes leftover after parsing attributes in process `syz.2.647'. [ 117.811265][ T930] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 117.884737][ T2806] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.633: casefold flag without casefold feature [ 117.897496][ T2806] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.633: missing EA_INODE flag [ 117.909360][ T2806] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.633: error while reading EA inode 12 err=-117 [ 117.909506][ T2857] FAT-fs (loop2): Unrecognized mount option "uni_xlat=0" or missing value [ 117.934353][ T2806] EXT4-fs (loop0): 1 orphan inode deleted [ 117.944090][ T2806] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,min_batch_time=0x0000000000000007,delalloc,auto_da_alloc,norecovery,nogrpid,journal_ioprio=0x0000000000000001,,errors=continue [ 117.996038][ T2806] udc-core: couldn't find an available UDC or it's busy [ 118.002927][ T2806] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.021997][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.028764][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.051288][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.058176][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.071311][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.071754][ T930] usb 5-1: Using ep0 maxpacket: 32 [ 118.083638][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.100620][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.121263][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.128298][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.135099][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.141857][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.148596][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.158737][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.165835][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.172642][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.179375][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.186185][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.193038][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.199785][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.206602][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.213339][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.220081][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.227209][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.234028][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.240827][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.247642][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.254392][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.261139][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.267951][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.274695][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.281536][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.288215][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.295024][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.301354][ T930] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 185, changing to 11 [ 118.301779][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.313209][ T930] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 118.319482][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.329589][ T930] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.335917][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.355420][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.362615][ T576] elecom 0003:056E:00FC.0019: unknown main item tag 0x0 [ 118.370337][ T576] elecom 0003:056E:00FC.0019: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.0-1/input0 [ 118.383699][ T576] usb 1-1: USB disconnect, device number 16 [ 118.414005][ T2862] F2FS-fs (loop1): invalid crc value [ 118.420816][ T2862] F2FS-fs (loop1): Found nat_bits in checkpoint [ 118.457252][ T2862] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 118.511460][ T930] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.520589][ T930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.528781][ T930] usb 5-1: Product: 墮섔쏚퉯붬㓪ӓ세檢梅䅸㷻逇挣槲㐨屘옇䁲䝞ᄓ鰚邙㞙犳匣撝덎㄃捚ㆈ侷乥鞑茡턗཈竬杹䘀ˍ逸熢嬪뎆㌜ꈗ䙡肈㣠ฬ텾㑺姷䑖๿ㇺ痤幗ຽ嶶퐡傆䂈⬷轋ⵑҭ⻄૔逮⼵鞃浃絸 [ 118.561438][ T930] usb 5-1: Manufacturer: 欌旘︜쨻험簿ࣔᢟ䱾䩢농቙ [ 118.569145][ T930] usb 5-1: SerialNumber: ᬈ뿨⹗ꊕ僢蛚댠ᆤ꺮謙ꏣⷰ叧⩩㊋ち猏䐹耙쀬狸旑䴢ᐳ䪰욙ိ䵧詶ᖄ榵菢㗬◭탋⿶쟲ꈬ⊰뢩荝ݡ켁㨇ᡫ雡꒹ꐥ풰羷竒෼Ꞌ㴳鵒䱽䷟땺䒂蔺蒗䮫魲嗶퀜ꧮ䝊뜗끲ᑋ돁斁䀢㷟즘鍤㢛躄쥣쑜 [ 118.627077][ T2843] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 118.633968][ T2843] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 118.655223][ T2877] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 118.663545][ T2877] tipc: Enabled bearer , priority 10 [ 118.737407][ T2880] attempt to access beyond end of device [ 118.737407][ T2880] loop1: rw=10241, want=45104, limit=40427 [ 118.757314][ T2880] attempt to access beyond end of device [ 118.757314][ T2880] loop1: rw=2049, want=45112, limit=40427 [ 119.245689][ T1898] attempt to access beyond end of device [ 119.245689][ T1898] loop1: rw=2049, want=45120, limit=40427 [ 119.285599][ T2889] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 119.301765][ T930] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 119.314326][ T930] usb 5-1: USB disconnect, device number 19 [ 119.420470][ T2891] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.427535][ T2891] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.434943][ T2891] device bridge_slave_0 entered promiscuous mode [ 119.451306][ T2891] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.458284][ T2891] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.465710][ T2891] device bridge_slave_1 entered promiscuous mode [ 119.468233][ T2886] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 119.488988][ T2886] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 119.532330][ T2891] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.539200][ T2891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.546334][ T2891] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.553089][ T2891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.576439][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.584720][ T940] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.591365][ T576] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 119.599355][ T940] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.608193][ T2886] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.630781][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.638789][ T937] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.645650][ T937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.651674][ T2886] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 119.653222][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.659605][ T2886] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 119.667639][ T937] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.680971][ T2886] overlayfs: failed to resolve './file1': -2 [ 119.681490][ T937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.697470][ T930] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 119.716671][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.724571][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.741325][ T2902] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 119.750771][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.759422][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.768121][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.776345][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.784486][ T2891] device veth0_vlan entered promiscuous mode [ 119.806091][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.816132][ T2891] device veth1_macvtap entered promiscuous mode [ 119.827896][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.840867][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.875173][ T1075] device bridge_slave_1 left promiscuous mode [ 119.882410][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.890243][ T1075] device bridge_slave_0 left promiscuous mode [ 119.917401][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.941262][ T930] usb 5-1: Using ep0 maxpacket: 16 [ 119.947098][ T1075] device veth1_macvtap left promiscuous mode [ 119.965270][ T1075] device veth0_vlan left promiscuous mode [ 120.001341][ T576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.021566][ T576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.048972][ T576] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 120.061547][ T930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.074411][ T576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.083900][ T930] usb 5-1: config 0 has no interfaces? [ 120.105026][ T576] usb 3-1: config 0 descriptor?? [ 120.216856][ T2359] attempt to access beyond end of device [ 120.216856][ T2359] loop3: rw=524288, want=45072, limit=40427 [ 120.221363][ T930] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 120.244663][ T2359] attempt to access beyond end of device [ 120.244663][ T2359] loop3: rw=0, want=45072, limit=40427 [ 120.258254][ T930] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 120.281954][ T930] usb 5-1: Product: syz [ 120.294144][ T930] usb 5-1: SerialNumber: syz [ 120.309016][ T930] usb 5-1: config 0 descriptor?? [ 120.325657][ T2359] attempt to access beyond end of device [ 120.325657][ T2359] loop3: rw=2049, want=45112, limit=40427 [ 120.530746][ T2908] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 120.544651][ T1075] tipc: Disabling bearer [ 120.549796][ T1075] tipc: Disabling bearer [ 120.556912][ T1075] tipc: Left network mode [ 120.573059][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 120.573074][ T24] audit: type=1400 audit(1721589761.581:1009): avc: denied { write } for pid=2907 comm="syz.0.661" name="memory.events" dev="loop0" ino=1048655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 120.600558][ T2911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 120.613105][ T2911] device bridge1 entered promiscuous mode [ 120.622394][ T576] konepure 0003:1E7D:2DB4.001A: unknown main item tag 0x0 [ 120.634426][ T576] konepure 0003:1E7D:2DB4.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 120.719937][ T2914] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 120.728913][ T2914] EXT4-fs (loop0): orphan cleanup on readonly fs [ 120.736945][ T2914] EXT4-fs error (device loop0): ext4_quota_enable:6423: comm syz.0.663: inode #256: comm syz.0.663: iget: illegal inode # [ 120.750180][ T2914] EXT4-fs error (device loop0): ext4_quota_enable:6426: comm syz.0.663: Bad quota inode: 256, type: 2 [ 120.762111][ T2914] EXT4-fs warning (device loop0): ext4_enable_quotas:6467: Failed to enable quota tracking (type=2, err=-117, ino=256). Please run e2fsck to fix. [ 120.778764][ T2914] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 120.785868][ T2914] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,quota,nolazytime,noauto_da_alloc,nobarrier,usrquota,bsdgroups,,errors=continue [ 120.806476][ T934] usb 5-1: USB disconnect, device number 20 [ 120.820067][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.827097][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.834406][ T2918] device bridge_slave_0 entered promiscuous mode [ 120.841118][ T576] usb 3-1: USB disconnect, device number 12 [ 120.841164][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.854526][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.861956][ T2918] device bridge_slave_1 entered promiscuous mode [ 120.917873][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.924763][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.931849][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.938614][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.951259][ T2747] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 120.963006][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.970849][ T937] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.979101][ T937] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.002929][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.010962][ T940] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.018013][ T940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.025654][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.033952][ T940] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.040802][ T940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.048153][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.056031][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.072712][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.084982][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.093595][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.100794][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.109395][ T2918] device veth0_vlan entered promiscuous mode [ 121.120596][ T2918] device veth1_macvtap entered promiscuous mode [ 121.130028][ T2926] F2FS-fs (loop0): invalid crc value [ 121.130034][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.135131][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.153509][ T2926] F2FS-fs (loop0): invalid journal entries nats 0 sits 78 [ 121.160454][ T2926] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-22) [ 121.172752][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.192091][ T1075] device bridge_slave_1 left promiscuous mode [ 121.198009][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.205789][ T1075] device bridge_slave_0 left promiscuous mode [ 121.211883][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.227497][ T1075] device veth1_macvtap left promiscuous mode [ 121.234577][ T1075] device veth0_vlan left promiscuous mode [ 121.321317][ T2747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.351307][ T2747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.371075][ T2747] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 121.401268][ T2747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.421358][ T2747] usb 2-1: config 0 descriptor?? [ 121.518803][ T2941] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.670: bad orphan inode 8192 [ 121.541417][ T2941] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 121.660768][ T2935] F2FS-fs (loop3): journaled quota format not specified [ 121.701341][ T940] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 121.760275][ T24] audit: type=1400 audit(1721589762.771:1010): avc: denied { sys_module } for pid=2956 comm="syz.3.675" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 121.782008][ T24] audit: type=1400 audit(1721589762.771:1011): avc: denied { shutdown } for pid=2956 comm="syz.3.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.802738][ T24] audit: type=1400 audit(1721589762.771:1012): avc: denied { read } for pid=78 comm="acpid" name="mouse7" dev="devtmpfs" ino=778 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 121.817245][ T2954] EXT4-fs (loop0): Ignoring removed orlov option [ 121.831272][ T2954] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 121.835954][ T24] audit: type=1400 audit(1721589762.771:1013): avc: denied { open } for pid=78 comm="acpid" path="/dev/input/mouse7" dev="devtmpfs" ino=778 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 121.861050][ T24] audit: type=1400 audit(1721589762.771:1014): avc: denied { ioctl } for pid=78 comm="acpid" path="/dev/input/mouse7" dev="devtmpfs" ino=778 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 121.888717][ T2917] udc-core: couldn't find an available UDC or it's busy [ 121.895662][ T2917] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 121.904772][ T2954] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 122.039275][ T2747] wacom 0003:056A:00D0.001B: unknown main item tag 0x0 [ 122.046601][ T2747] wacom 0003:056A:00D0.001B: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 122.056646][ T2747] wacom 0003:056A:00D0.001B: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.1-1/input0 [ 122.068064][ T2747] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D0.001B/input/input19 [ 122.071396][ T940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 16 [ 122.095941][ T940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.462619][ T940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.534494][ T2747] usb 2-1: USB disconnect, device number 16 [ 122.554859][ T940] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 122.786240][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.800320][ T940] usb 3-1: config 0 descriptor?? [ 122.900448][ T2975] EXT4-fs (loop4): 1 orphan inode deleted [ 122.906063][ T2975] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,errors=continue, [ 122.925755][ T2975] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038 (0x7fffffff) [ 123.092091][ T2995] tmpfs: Unknown parameter 'h' [ 123.112951][ T2995] incfs: Options parsing error. -22 [ 123.123463][ T2995] incfs: mount failed -22 [ 123.298202][ T3004] tipc: Started in network mode [ 123.303088][ T3004] tipc: Own node identity ac1414aa, cluster identity 4711 [ 123.304228][ T2988] F2FS-fs (loop3): Found nat_bits in checkpoint [ 123.310311][ T3004] tipc: Enabled bearer , priority 10 [ 123.352359][ T2939] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.669: casefold flag without casefold feature [ 123.365039][ T2939] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.669: missing EA_INODE flag [ 123.376671][ T2939] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.669: error while reading EA inode 12 err=-117 [ 123.389165][ T2939] EXT4-fs (loop2): 1 orphan inode deleted [ 123.391837][ T2988] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.395786][ T2939] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,min_batch_time=0x0000000000000007,delalloc,auto_da_alloc,norecovery,nogrpid,journal_ioprio=0x0000000000000001,,errors=continue [ 123.633829][ T2939] udc-core: couldn't find an available UDC or it's busy [ 123.640869][ T2939] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.649047][ T2747] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 123.722531][ T3009] F2FS-fs (loop4): invalid crc value [ 123.799229][ T3009] F2FS-fs (loop4): Found nat_bits in checkpoint [ 123.829976][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.836999][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.843893][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.850627][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.869080][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.872960][ T3009] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 123.875944][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.890086][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.896861][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.903656][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.910376][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.927393][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.937514][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.938862][ T3016] attempt to access beyond end of device [ 123.938862][ T3016] loop4: rw=2049, want=45104, limit=40427 [ 123.954450][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.962903][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.970243][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.977873][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.978839][ T3009] device syzkaller0 entered promiscuous mode [ 123.985057][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 123.997582][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.004563][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.011348][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.018084][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.024882][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.031639][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.038396][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.045467][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.052259][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.058993][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.061343][ T2747] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 124.065805][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.077085][ T2747] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 124.083408][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.092604][ T2747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.099013][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.113608][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.120348][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.127174][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.133924][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.140768][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.147657][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.154340][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.161086][ T940] elecom 0003:056E:00FC.001C: unknown main item tag 0x0 [ 124.171531][ T940] elecom 0003:056E:00FC.001C: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.2-1/input0 [ 124.183804][ T940] usb 3-1: USB disconnect, device number 13 [ 124.218431][ T2918] attempt to access beyond end of device [ 124.218431][ T2918] loop3: rw=2049, want=45104, limit=40427 [ 124.285113][ T2305] attempt to access beyond end of device [ 124.285113][ T2305] loop4: rw=524288, want=45072, limit=40427 [ 124.300509][ T2305] attempt to access beyond end of device [ 124.300509][ T2305] loop4: rw=0, want=45072, limit=40427 [ 124.401358][ T2747] usb 1-1: string descriptor 0 read error: -71 [ 124.407818][ T2747] hub 1-1:32.0: USB hub found [ 124.421276][ T930] tipc: 32-bit node address hash set to aa1414ac [ 124.471453][ T2747] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 124.562138][ T2747] usb 1-1: USB disconnect, device number 17 [ 124.667199][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.674605][ T3034] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.682298][ T3034] device bridge_slave_0 entered promiscuous mode [ 124.689204][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.696906][ T3034] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.704393][ T3034] device bridge_slave_1 entered promiscuous mode [ 124.791639][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.798511][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.805637][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.812400][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.826578][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 124.835353][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 124.843533][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 124.852037][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 124.860387][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 124.868871][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 124.878014][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 124.895025][ T3042] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.902184][ T3042] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.909508][ T3042] device bridge_slave_0 entered promiscuous mode [ 124.918814][ T3050] netlink: 204 bytes leftover after parsing attributes in process `syz.0.699'. [ 124.926652][ T3042] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.934557][ T3042] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.942127][ T3042] device bridge_slave_1 entered promiscuous mode [ 124.952012][ T7] device bridge_slave_1 left promiscuous mode [ 124.958245][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.966769][ T7] device bridge_slave_0 left promiscuous mode [ 124.973032][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.113859][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.124009][ T2747] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.131949][ T2747] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.139872][ T24] audit: type=1400 audit(1721589766.151:1015): avc: denied { write } for pid=3053 comm="syz.1.701" name="attr" dev="proc" ino=27318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 125.163500][ T24] audit: type=1400 audit(1721589766.151:1016): avc: denied { add_name } for pid=3053 comm="syz.1.701" name="keycreate" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 125.192675][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.201021][ T2747] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.207991][ T2747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.215432][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.224001][ T24] audit: type=1400 audit(1721589766.151:1017): avc: denied { create } for pid=3053 comm="syz.1.701" name="keycreate" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 125.250659][ T2747] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.257549][ T2747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.268304][ T24] audit: type=1400 audit(1721589766.151:1018): avc: denied { associate } for pid=3053 comm="syz.1.701" name="keycreate" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 125.292171][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.300726][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.320481][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.329000][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.356377][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.373028][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.383147][ T3034] device veth0_vlan entered promiscuous mode [ 125.391332][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.399168][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.408120][ T3052] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.417323][ T3034] device veth1_macvtap entered promiscuous mode [ 125.431657][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.439284][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.462086][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.472503][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.480598][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.487987][ T3052] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.513918][ T3059] F2FS-fs (loop1): invalid crc value [ 125.524379][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.534830][ T3059] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.542884][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.551729][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.567702][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.626171][ T3059] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.711518][ T3067] attempt to access beyond end of device [ 125.711518][ T3067] loop1: rw=2049, want=45104, limit=40427 [ 125.729944][ T3059] device syzkaller0 entered promiscuous mode [ 125.750683][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.023270][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.039675][ T3076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 126.050502][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.059060][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.067106][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.073983][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.107341][ T3042] device veth0_vlan entered promiscuous mode [ 126.120139][ T3042] device veth1_macvtap entered promiscuous mode [ 126.128506][ T2891] attempt to access beyond end of device [ 126.128506][ T2891] loop0: rw=2049, want=45104, limit=40427 [ 126.131983][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.140264][ T1898] attempt to access beyond end of device [ 126.140264][ T1898] loop1: rw=524288, want=45072, limit=40427 [ 126.149164][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.167140][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.174284][ T1898] attempt to access beyond end of device [ 126.174284][ T1898] loop1: rw=0, want=45072, limit=40427 [ 126.185686][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.191335][ T2748] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 126.196699][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.208251][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.215781][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.223906][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.231915][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.238741][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.246279][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.254046][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.272958][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.281545][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.289673][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.297872][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.400659][ T3081] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.451740][ T3081] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 126.482688][ T3081] EXT4-fs (loop0): 1 truncate cleaned up [ 126.483112][ T2748] usb 5-1: device descriptor read/64, error -71 [ 126.488245][ T3081] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 126.835857][ T7] device bridge_slave_1 left promiscuous mode [ 126.850418][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.931630][ T2748] usb 5-1: device descriptor read/64, error -71 [ 126.946493][ T7] device bridge_slave_0 left promiscuous mode [ 127.005510][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.013762][ T7] device veth1_macvtap left promiscuous mode [ 127.019601][ T7] device veth0_vlan left promiscuous mode [ 127.201324][ T2748] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 127.205261][ T3096] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.215753][ T3096] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.218382][ T2891] EXT4-fs error (device loop0): ext4_map_blocks:600: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 127.223316][ T3096] device bridge_slave_0 entered promiscuous mode [ 127.243922][ T2891] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5869: Corrupt filesystem [ 127.244268][ T3096] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.256110][ T2891] EXT4-fs error (device loop0): ext4_quota_off:6521: inode #3: comm syz-executor: mark_inode_dirty error [ 127.260282][ T3096] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.278868][ T3096] device bridge_slave_1 entered promiscuous mode [ 127.319442][ T3096] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.326318][ T3096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.333409][ T3096] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.340164][ T3096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.348261][ T934] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.355769][ T934] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.384929][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.392345][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.450091][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.464629][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.490071][ T2752] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.496968][ T2752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.505029][ T2748] usb 5-1: device descriptor read/64, error -71 [ 127.511917][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.520227][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.528439][ T2752] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.535291][ T2752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.544037][ T7] tipc: Disabling bearer [ 127.550183][ T7] tipc: Left network mode [ 127.562156][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.570001][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.578754][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.587410][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.596274][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.604936][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.628859][ T24] audit: type=1400 audit(1721589768.641:1019): avc: denied { ioctl } for pid=3113 comm="syz.2.715" path="socket:[28525]" dev="sockfs" ino=28525 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.654832][ T24] audit: type=1400 audit(1721589768.641:1020): avc: denied { connect } for pid=3113 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.739889][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.752591][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.780447][ T3096] device veth0_vlan entered promiscuous mode [ 127.814931][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.822737][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.836963][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.845029][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.856407][ T3096] device veth1_macvtap entered promiscuous mode [ 127.882167][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.889674][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.897998][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.907683][ T3110] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.914666][ T3110] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.922007][ T3110] device bridge_slave_0 entered promiscuous mode [ 127.930575][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.938851][ T2748] usb 5-1: device descriptor read/64, error -71 [ 127.945369][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.953864][ T3110] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.960766][ T3110] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.968282][ T3110] device bridge_slave_1 entered promiscuous mode [ 128.033212][ T3110] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.040176][ T3110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.047393][ T3110] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.054172][ T3110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.061426][ T2748] usb usb5-port1: attempt power cycle [ 128.097053][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.104409][ T934] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.111274][ T2747] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 128.118736][ T934] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.131095][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.139559][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.146431][ T576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.163215][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.171827][ T2752] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.178674][ T2752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.186682][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.205507][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.221618][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.233289][ T3110] device veth0_vlan entered promiscuous mode [ 128.239539][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.252678][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.260259][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.272668][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.282777][ T3110] device veth1_macvtap entered promiscuous mode [ 128.296230][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.312566][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.321791][ T7] device bridge_slave_1 left promiscuous mode [ 128.327775][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.335719][ T7] device bridge_slave_0 left promiscuous mode [ 128.341992][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.373292][ T3132] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 128.373363][ T24] audit: type=1400 audit(1721589769.391:1021): avc: denied { mac_admin } for pid=3131 comm="syz.2.720" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.482308][ T7] device veth1_macvtap left promiscuous mode [ 128.483235][ T24] audit: type=1400 audit(1721589769.401:1022): avc: denied { create } for pid=3131 comm="syz.2.720" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 128.488762][ T24] audit: type=1400 audit(1721589769.401:1023): avc: denied { associate } for pid=3131 comm="syz.2.720" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 128.501420][ T7] device veth0_vlan left promiscuous mode [ 128.576814][ T2748] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 128.711299][ T2747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.731343][ T2747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.740896][ T2747] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 128.755332][ T24] audit: type=1400 audit(1721589769.401:1024): avc: denied { associate } for pid=3131 comm="syz.2.720" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 128.768732][ T2747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.799823][ T24] audit: type=1400 audit(1721589769.811:1025): avc: denied { setopt } for pid=3138 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.863508][ T2747] usb 4-1: config 0 descriptor?? [ 128.888792][ T24] audit: type=1400 audit(1721589769.871:1026): avc: denied { setattr } for pid=3138 comm="syz.1.721" name="hwrng" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 128.921549][ T2748] usb 5-1: device descriptor read/8, error -71 [ 128.932371][ T3142] FAT-fs (loop4): Directory bread(block 64) failed [ 128.941163][ T3142] FAT-fs (loop4): Directory bread(block 65) failed [ 128.950679][ T3142] FAT-fs (loop4): Directory bread(block 66) failed [ 128.957150][ T3142] FAT-fs (loop4): Directory bread(block 67) failed [ 128.964398][ T3142] FAT-fs (loop4): Directory bread(block 68) failed [ 128.968624][ T24] audit: type=1400 audit(1721589769.951:1027): avc: denied { rmdir } for pid=3042 comm="syz-executor" name="bus" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 128.971001][ T3142] FAT-fs (loop4): Directory bread(block 69) failed [ 129.065485][ T3142] FAT-fs (loop4): Directory bread(block 70) failed [ 129.066011][ T3158] xt_hashlimit: overflow, try lower: 17592186044416/9 [ 129.072308][ T3142] FAT-fs (loop4): Directory bread(block 71) failed [ 129.085293][ T3142] FAT-fs (loop4): Directory bread(block 72) failed [ 129.091657][ T3142] FAT-fs (loop4): Directory bread(block 73) failed [ 129.136069][ T3142] 9pnet: Insufficient options for proto=fd [ 129.146862][ T3159] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 129.171365][ T2748] usb 5-1: device descriptor read/8, error -71 [ 129.207801][ T3159] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 129.223579][ T3159] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 129.231430][ T3159] System zones: 1-12 [ 129.236197][ T3159] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2204: inode #15: comm syz.0.722: corrupted in-inode xattr [ 129.249539][ T3159] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.722: couldn't read orphan inode 15 (err -117) [ 129.262811][ T3159] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 129.432601][ T2747] hid-rmi 0003:06CB:81A7.001D: unknown main item tag 0x1 [ 129.439658][ T2747] hid-rmi 0003:06CB:81A7.001D: item fetching failed at offset 3/5 [ 129.448388][ T2747] hid-rmi 0003:06CB:81A7.001D: parse failed [ 129.454579][ T2747] hid-rmi: probe of 0003:06CB:81A7.001D failed with error -22 [ 129.481391][ T2734] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 129.634384][ T2747] usb 4-1: USB disconnect, device number 23 [ 129.841666][ T2734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.857996][ T2734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.877871][ T2734] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 129.897982][ T2734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.923816][ T2734] usb 2-1: config 0 descriptor?? [ 130.271797][ T3159] EXT4-fs error (device loop0): __ext4_new_inode:1069: comm syz.0.722: reserved inode found cleared - inode=3 [ 130.308718][ T3159] netlink: 56 bytes leftover after parsing attributes in process `syz.0.722'. [ 130.434947][ T3200] netlink: 88 bytes leftover after parsing attributes in process `syz.3.734'. [ 130.501451][ T2734] usbhid 2-1:0.0: can't add hid device: -71 [ 130.507266][ T2734] usbhid: probe of 2-1:0.0 failed with error -71 [ 130.516268][ T2734] usb 2-1: USB disconnect, device number 17 [ 130.743055][ T3202] FAT-fs (loop4): Unrecognized mount option "00000000000000000000003" or missing value [ 130.791316][ T3202] hub 6-0:1.0: USB hub found [ 130.796332][ T3202] hub 6-0:1.0: 1 port detected [ 131.101350][ T3210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 131.153173][ T3214] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 131.237192][ T3110] ================================================================== [ 131.245121][ T3110] BUG: KASAN: slab-out-of-bounds in ext4_htree_fill_tree+0x1316/0x13e0 [ 131.253171][ T3110] Read of size 1 at addr ffff88811de90a67 by task syz-executor/3110 [ 131.260970][ T3110] [ 131.263155][ T3110] CPU: 0 PID: 3110 Comm: syz-executor Not tainted 5.10.221-syzkaller-01371-g1240968f7644 #0 [ 131.273051][ T3110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 131.282931][ T3110] Call Trace: [ 131.286064][ T3110] dump_stack_lvl+0x1e2/0x24b [ 131.290570][ T3110] ? bfq_pos_tree_add_move+0x43b/0x43b [ 131.295876][ T3110] ? panic+0x812/0x812 [ 131.299770][ T3110] print_address_description+0x81/0x3b0 [ 131.305153][ T3110] ? ext4_htree_store_dirent+0x19c/0x590 [ 131.310619][ T3110] kasan_report+0x179/0x1c0 [ 131.314962][ T3110] ? ext4_htree_fill_tree+0x1316/0x13e0 [ 131.320342][ T3110] ? ext4_htree_fill_tree+0x1316/0x13e0 [ 131.325726][ T3110] __asan_report_load1_noabort+0x14/0x20 [ 131.331191][ T3110] ext4_htree_fill_tree+0x1316/0x13e0 [ 131.336407][ T3110] ? ext4_handle_dirty_dirblock+0x6e0/0x6e0 [ 131.342134][ T3110] ? __kasan_kmalloc+0x9/0x10 [ 131.346641][ T3110] ? ext4_readdir+0x4df/0x37c0 [ 131.351248][ T3110] ext4_readdir+0x2dde/0x37c0 [ 131.355764][ T3110] ? handle_pte_fault+0x1472/0x3e30 [ 131.360796][ T3110] ? ext4_dir_llseek+0x4c0/0x4c0 [ 131.365584][ T3110] ? __kasan_check_write+0x14/0x20 [ 131.370520][ T3110] ? down_read_killable+0x101/0x220 [ 131.375555][ T3110] ? down_read_interruptible+0x220/0x220 [ 131.381016][ T3110] ? security_file_permission+0x86/0xb0 [ 131.386394][ T3110] iterate_dir+0x265/0x580 [ 131.390644][ T3110] ? ext4_dir_llseek+0x4c0/0x4c0 [ 131.395421][ T3110] __se_sys_getdents64+0x1c1/0x460 [ 131.400401][ T3110] ? __x64_sys_getdents64+0x90/0x90 [ 131.405402][ T3110] ? filldir+0x680/0x680 [ 131.409483][ T3110] ? debug_smp_processor_id+0x17/0x20 [ 131.414696][ T3110] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 131.420591][ T3110] ? irqentry_exit_to_user_mode+0x41/0x80 [ 131.426237][ T3110] __x64_sys_getdents64+0x7b/0x90 [ 131.431088][ T3110] do_syscall_64+0x34/0x70 [ 131.435345][ T3110] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 131.441080][ T3110] RIP: 0033:0x7effe9065bf3 [ 131.445321][ T3110] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 f2 44 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 131.464768][ T3110] RSP: 002b:00007ffebe025df8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 131.473139][ T3110] RAX: ffffffffffffffda RBX: 00005555570e94e0 RCX: 00007effe9065bf3 [ 131.480937][ T3110] RDX: 0000000000008000 RSI: 00005555570e94e0 RDI: 0000000000000005 [ 131.488741][ T3110] RBP: 00005555570e94b4 R08: 0000000000028b61 R09: 0000000000000000 [ 131.496556][ T3110] R10: 00007effe9192ca0 R11: 0000000000000293 R12: ffffffffffffffa8 [ 131.504371][ T3110] R13: 0000000000000010 R14: 00005555570e94b0 R15: 000000000001f799 [ 131.512398][ T3110] [ 131.514564][ T3110] Allocated by task 333: [ 131.518658][ T3110] __kasan_slab_alloc+0xb1/0xe0 [ 131.523338][ T3110] slab_post_alloc_hook+0x61/0x2f0 [ 131.528548][ T3110] kmem_cache_alloc+0x168/0x2e0 [ 131.533233][ T3110] shmem_alloc_inode+0x1a/0x30 [ 131.537832][ T3110] new_inode_pseudo+0x64/0x220 [ 131.542432][ T3110] new_inode+0x28/0x1c0 [ 131.546423][ T3110] shmem_get_inode+0x328/0x9e0 [ 131.551020][ T3110] shmem_mknod+0x5c/0x1c0 [ 131.555191][ T3110] shmem_create+0x2b/0x40 [ 131.559359][ T3110] path_openat+0x1377/0x3000 [ 131.563785][ T3110] do_filp_open+0x21c/0x460 [ 131.568121][ T3110] do_sys_openat2+0x13f/0x6f0 [ 131.572634][ T3110] __x64_sys_openat+0x243/0x290 [ 131.577323][ T3110] do_syscall_64+0x34/0x70 [ 131.581576][ T3110] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 131.587291][ T3110] [ 131.589462][ T3110] Last potentially related work creation: [ 131.595027][ T3110] kasan_save_stack+0x3b/0x60 [ 131.599539][ T3110] __kasan_record_aux_stack+0xd3/0x100 [ 131.604847][ T3110] kasan_record_aux_stack_noalloc+0xb/0x10 [ 131.610474][ T3110] call_rcu+0x135/0x11f0 [ 131.614553][ T3110] evict+0x648/0x6c0 [ 131.618283][ T3110] iput+0x632/0x7e0 [ 131.621933][ T3110] dentry_unlink_inode+0x2e5/0x3d0 [ 131.626878][ T3110] __dentry_kill+0x447/0x650 [ 131.631301][ T3110] dentry_kill+0xc0/0x2a0 [ 131.635469][ T3110] dput+0x40/0x80 [ 131.638945][ T3110] do_renameat2+0xadf/0x1240 [ 131.643466][ T3110] __x64_sys_rename+0x86/0x90 [ 131.647979][ T3110] do_syscall_64+0x34/0x70 [ 131.652233][ T3110] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 131.657950][ T3110] [ 131.660123][ T3110] Second to last potentially related work creation: [ 131.666552][ T3110] kasan_save_stack+0x3b/0x60 [ 131.671067][ T3110] __kasan_record_aux_stack+0xd3/0x100 [ 131.676359][ T3110] kasan_record_aux_stack_noalloc+0xb/0x10 [ 131.682004][ T3110] call_rcu+0x135/0x11f0 [ 131.686079][ T3110] evict+0x648/0x6c0 [ 131.689814][ T3110] iput+0x632/0x7e0 [ 131.693463][ T3110] dentry_unlink_inode+0x2e5/0x3d0 [ 131.698406][ T3110] __dentry_kill+0x447/0x650 [ 131.702835][ T3110] dentry_kill+0xc0/0x2a0 [ 131.706996][ T3110] dput+0x40/0x80 [ 131.710469][ T3110] do_renameat2+0xadf/0x1240 [ 131.714993][ T3110] __x64_sys_rename+0x86/0x90 [ 131.719584][ T3110] do_syscall_64+0x34/0x70 [ 131.723849][ T3110] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 131.729555][ T3110] [ 131.731735][ T3110] The buggy address belongs to the object at ffff88811de90740 [ 131.731735][ T3110] which belongs to the cache shmem_inode_cache of size 800 [ 131.746147][ T3110] The buggy address is located 7 bytes to the right of [ 131.746147][ T3110] 800-byte region [ffff88811de90740, ffff88811de90a60) [ 131.759587][ T3110] The buggy address belongs to the page: [ 131.765084][ T3110] page:ffffea000477a400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811de92f20 pfn:0x11de90 [ 131.776563][ T3110] head:ffffea000477a400 order:2 compound_mapcount:0 compound_pincount:0 [ 131.784718][ T3110] flags: 0x4000000000010200(slab|head) [ 131.790140][ T3110] raw: 4000000000010200 ffffea000485b608 ffffea000445ac08 ffff888100192600 [ 131.798562][ T3110] raw: ffff88811de92f20 0000000000110001 00000001ffffffff 0000000000000000 [ 131.806967][ T3110] page dumped because: kasan: bad access detected [ 131.813228][ T3110] page_owner tracks the page as allocated [ 131.818782][ T3110] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 310, ts 45505851010, free_ts 45491953144 [ 131.839002][ T3110] prep_new_page+0x166/0x180 [ 131.843433][ T3110] get_page_from_freelist+0x2d8c/0x2f30 [ 131.848809][ T3110] __alloc_pages_nodemask+0x435/0xaf0 [ 131.854011][ T3110] new_slab+0x80/0x400 [ 131.857924][ T3110] ___slab_alloc+0x302/0x4b0 [ 131.862345][ T3110] __slab_alloc+0x63/0xa0 [ 131.866509][ T3110] kmem_cache_alloc+0x1b9/0x2e0 [ 131.871197][ T3110] shmem_alloc_inode+0x1a/0x30 [ 131.875796][ T3110] new_inode_pseudo+0x64/0x220 [ 131.880398][ T3110] new_inode+0x28/0x1c0 [ 131.884389][ T3110] shmem_get_inode+0x328/0x9e0 [ 131.888991][ T3110] shmem_symlink+0x119/0x610 [ 131.893417][ T3110] vfs_symlink+0x367/0x4f0 [ 131.897668][ T3110] do_symlinkat+0x19b/0x400 [ 131.902013][ T3110] __x64_sys_symlink+0x60/0x70 [ 131.906621][ T3110] do_syscall_64+0x34/0x70 [ 131.910856][ T3110] page last free stack trace: [ 131.915384][ T3110] free_unref_page_prepare+0x2ae/0x2d0 [ 131.920670][ T3110] free_the_page+0x9e/0x370 [ 131.925010][ T3110] __free_pages+0x67/0xc0 [ 131.929172][ T3110] __vunmap+0x7bc/0x8f0 [ 131.933169][ T3110] vfree+0x5c/0x80 [ 131.936738][ T3110] kvfree+0x26/0x40 [ 131.940367][ T3110] bpf_map_area_free+0x15/0x20 [ 131.944970][ T3110] htab_map_free+0x547/0x6a0 [ 131.949399][ T3110] bpf_map_free_deferred+0xb3/0x110 [ 131.954441][ T3110] process_one_work+0x6dc/0xbd0 [ 131.959128][ T3110] worker_thread+0xaea/0x1510 [ 131.963632][ T3110] kthread+0x34b/0x3d0 [ 131.967538][ T3110] ret_from_fork+0x1f/0x30 [ 131.971781][ T3110] [ 131.973951][ T3110] Memory state around the buggy address: [ 131.979429][ T3110] ffff88811de90900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.987325][ T3110] ffff88811de90980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.995229][ T3110] >ffff88811de90a00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 132.003120][ T3110] ^ [ 132.010151][ T3110] ffff88811de90a80: fc fc fc fc fc fc fc fc fc fc fc fc fb fb fb fb [ 132.018050][ T3110] ffff88811de90b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 132.025938][ T3110] ================================================================== [ 132.033844][ T3110] Disabling lock debugging due to kernel taint [ 132.118317][ T3208] F2FS-fs (loop2): invalid crc value [ 132.133237][ T3226] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.747: Invalid inode bitmap blk 4 in block_group 0 [ 132.198668][ T3208] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.216619][ T3226] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 132.322030][ T3208] F2FS-fs (loop2): recover fsync data on readonly fs [ 132.328817][ T3208] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 132.652450][ T1075] device bridge_slave_1 left promiscuous mode [ 132.658418][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.665927][ T1075] device bridge_slave_0 left promiscuous mode [ 132.671985][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.680000][ T1075] device veth1_macvtap left promiscuous mode [ 132.686241][ T1075] device veth0_vlan left promiscuous mode