last executing test programs: 15.235447989s ago: executing program 0 (id=818): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x681}], 0x1, 0x0, 0x46, 0x407006}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 13.900600647s ago: executing program 0 (id=824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="00000ff400000000000000001812000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2010092, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/44, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x6e2424b21af7d90, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="090000001a00fbbed9dc0000000000000a0000000000000000000000f02bd4ca349395a0540139f76edcc08d69ff235da0537ab75b81e1293cf80ce26f8d"], 0x1c}}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xc}, 0x1c) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0xe8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_hsr\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@multicast2, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team_slave_0\x00', 'veth0_virt_wifi\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @broadcast}}}, {{@arp={@local, @private, 0x0, 0x0, 0x0, 0x0, {@mac=@random="a1dcf6784022"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'geneve1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) 12.64700121s ago: executing program 0 (id=830): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, 0x0) 12.474537514s ago: executing program 0 (id=832): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/user\x00') 10.428991991s ago: executing program 1 (id=836): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.427448931s ago: executing program 4 (id=837): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@usrjquota}, {@lazytime}, {@noblock_validity}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89d}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) fchown(r0, 0x0, 0xee01) 9.311840572s ago: executing program 4 (id=843): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000200)="1da3a41ca1d84df8363f3e00ab53e61e594e9520d2003a882591d62146f140f74a7ad6a904310cc2f6fa66fe5ee0c58e4c852c16a49560b6cacbfd94632fdfdcb61af446db2dc6b0714bcbaefdb2d29e970fafddc068e460ff740498c158e1e8f3a71081afc55d1b66397a5b392ee7aea40b70e1b3f27ad5cbbc6120b3e40236ff9cf7552c859325abd8a48a8bbe1aff7ccccd7ee8f12129dba1fee6ae93ea1807ebf6353e56c65a00e3d89650aadf27c7072e95c06f31fed949", 0xba) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, 0x0, 0x0, 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r7, &(0x7f0000000100)='fdinfo/3\x00') syz_open_dev$evdev(0x0, 0x0, 0x0) 7.703198833s ago: executing program 0 (id=848): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000408a25886a0000000000010902240001000000000904000001030000000921000000012205000905810300"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @dev, 0x0, 0x0, 'ipvlan1\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x11}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) syz_emit_ethernet(0x5ca, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "89d884", 0x594, 0x0, 0x1, @remote, @empty, {[@dstopts={0x2f, 0x27, '\x00', [@jumbo={0xc2, 0x4, 0x3ff}, @generic={0x1, 0x10a, "f40063662a5fb80374778b18e436f09ed3e0f6c282af6a0577eea3bb07d88f046348abcd60d9cad64462e69a44809c4febcc1337b92b2a8ecadc220b21a59b67c7b7062887574f5402c360b644b64771828a21fb8a118e1342ad584e7ee145d98c754360b7cde9047c576be82c94ba22ba128c0ee940034ca379eb2bbe6210071f5bad193ab93d0188ba3e283f664a98ad35adab808c99a1c247796b56f4f7a8f88b49d1213a9d2a1f4512d7dd6308c44d9767c560eaf5ed519f4d4e01094386ffda1687ac61f49a1447846fa78abfb846a93b7218cc5a0b14873ef35b575ff99d7e0846b9d5e3b01085a65b876d4faf8f60ea09ec21299e6fb47044bea580c0eedbd263d929185f3274"}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0xfffe}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @ra={0x5, 0x2, 0x6}]}, @dstopts={0x0, 0x17, '\x00', [@enc_lim={0x4, 0x1, 0xe0}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x3, 0x63, "393de0e2073b5c30b9c8da60258d1587053b8f285b9eb4ede66aaf024e65570bd13b42feec16de105f6b684ac331ee3654921d2db65a6107d503b1fbd23069b34417de013b29a5d5f59b8f14528417c72379347441e545251083066511623c865256fb"}, @pad1, @hao={0xc9, 0x10, @mcast2}, @generic={0x2, 0x37, "609667d9c4bf15dba67ed2080c34f87e2fa749a8a81b83ac45cb2b31040e8f8ab19b510cd8faff0b16b195054578c1465f5084f653a1a1"}, @enc_lim={0x4, 0x1, 0x6}]}, @routing={0x2c, 0x12, 0x1, 0x3, 0x0, [@mcast1, @private2, @remote, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty]}, @srh={0x6c, 0x4, 0x4, 0x2, 0xc, 0x48, 0x800, [@ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0x3c, 0x20, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x5, 0xe3, "23046a9e79b175b4b86b172c76a813ed1d06e35f219163c7c43c52bb29f508be0e6dff11566ec11e287d82ffd560ac009122e2f66ba0b6863e1d986817f8aae5a81b3d458138a9cbf133416134ffac869c2953e7774156abe9752621a73639a89741d40ef2f1a9f6057a795ec8ca8ee46384a795ed64aef412b1a913d6ff64e75a60f5fd37a71c7b9b5a017da93cffa3ebd4292da60174463c0ab725790d3fb2c7d9b6fc0045327981f0225237444a77c4d3362ff044b897ce5fc2311e5d98c80e020bc3d00ed65ae98d17c6f8da246add2c6731b59f5a9f25e9f0b8024747f053cd7b"}, @pad1, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @jumbo={0xc2, 0x4, 0x36}]}, @dstopts={0x33, 0x15, '\x00', [@generic={0xf, 0xac, "3221b7be3d5e5cabd991b1b4eb37bc3a651f5776fac388c8090352312762e02b1398d751711888f9e0f6d047a192a04bc4a84062f7c9d9d3eba0f55b20d64ea8f2e26fd76142771e37fb2f2079d5a9944780df19ac10374d12dda7fb8e29752e6d8af9d4928af2fa6a96ce96672b1fa703570c4f7d0fc49dbe4e16c8bf73ee9fd899e7a644a3eb51e8fe21846e31abe902c1c16b84830e4e61df72278029884033785d4f8734c2ed7e135d40"}]}, @dstopts={0x28, 0x0, '\x00', [@pad1]}], "352ced2379a953189bcb0de1709a221d0c709b6aca2eb15e855641fe8f945bd5705dbecca58b6d097c15defae799e9e553f7ef9c0d8eb53c07560d73a0a70abbc66a6565bcbf9aade163fd178fd6248a7788358b9d4a7a298875d11c367caba407fa9f94fdd665ad6245686701f5bb5fcea5fa76647bf761380894d28a0266d23ebc8fde54937f53efa4679b6288666dac315c413b65cd992a4b5e4cb2980c905424246a19c1071c208d3cf3aadcb4fe8793b108d896e0edd5ec3ed081da0c25ddbcc42ee0300d34602a74def53250be3d4dd0fa043c6705a7da77db360222a0833095eb8b33599ec27f3329a89f7ef7be6e6a85"}}}}}, 0x0) pipe(0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000000), &(0x7f0000000540)=""/232, 0x0, 0x0}, 0x38) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x89, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010008020d00000904010102020d0000090582020002000000090503020002000000bc94ef907df247d46eaa274c8f51e61fb4cfc6664d5c9315a37e6e4eae4cdd654f"], 0x0) 6.922354957s ago: executing program 3 (id=849): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="00214717a70700000000030600710a069d317ebb906c", 0x16}], 0x1, 0x0, 0x0) 6.51635027s ago: executing program 1 (id=838): syz_usb_connect(0x0, 0x52, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x3c, 0xa8, 0x7d, 0x40, 0xf19, 0x105, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x70, 0xdc, 0xfe, 0x0, [@uac_control={{}, [@mixer_unit={0x5, 0x24, 0x4, 0x6}, @mixer_unit={0x5}]}], [{}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x0, "207aeeae0baec2"}]}}]}}]}}]}}, 0x0) 6.50707681s ago: executing program 3 (id=852): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048de) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x1, 0xc, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x800714, &(0x7f0000000480)={[{@orlov}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c7c}}, {@debug}, {@grpquota}, {@errors_continue}, {@test_dummy_encryption}, {@auto_da_alloc}, {@nodiscard}]}, 0xfe, 0x449, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0, 0x134}}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 6.238282862s ago: executing program 4 (id=853): bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x6]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010101, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x20080d0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$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") 5.114847124s ago: executing program 3 (id=854): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) io_setup(0xeb0, &(0x7f0000000140)=0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000001780)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 4.878676923s ago: executing program 2 (id=855): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001e000101fb0000bd9c81552d43"], 0x14}}, 0x0) 4.194973099s ago: executing program 3 (id=856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000580)=[@efer={0x2, 0x800}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@llu}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x5c) 4.116052055s ago: executing program 2 (id=857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000080)='system_u:object_r:inetd_log_t:s0\x00', 0x21) 4.040675672s ago: executing program 2 (id=858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 4.037650832s ago: executing program 4 (id=859): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ad43000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x260, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_getattr(0x0, &(0x7f00000002c0)={0x38}, 0x38, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r9, &(0x7f00000002c0)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000002300)=ANY=[@ANYBLOB="180000001e0000000000000000000000ffbe52f6", @ANYRES32, @ANYRES16=r0, @ANYRES16, @ANYRES32=r1, @ANYRESDEC, @ANYBLOB="7a530d1aa809098e0277b8519502475768c2a63cca800642947c7fb1095bd4a6854ec99217e9d3173699728c1c8d674d95fb7fd6962a6408b9c6d6e4f12be9e1900e201fe8506f48df70687beea9b702e6f069d81a31e94356b95194edeff34ab4aa7ca68659e8526bc3f615d8964c8176cd9613e977af87de1d424f3bf8e0bbb33dde4c1dadc6f940adde4b", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) 4.011600363s ago: executing program 3 (id=860): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000e9b91b25000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00221a0000001a6ca2a6"], 0x0}, 0x0) 3.954528848s ago: executing program 2 (id=861): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)={[{@shortname_mixed}, {@uni_xlate}, {@shortname_lower}, {@shortname_lower}, {@uni_xlateno}, {@utf8no}, {@shortname_mixed}, {@rodir}, {@shortname_mixed}, {@fat=@check_strict}, {@shortname_winnt}, {@uni_xlateno}, {@rodir}, {@utf8}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xee9}}, {@fat=@errors_remount}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'uni_x\x9a\xfdte=1'}}]}, 0x6, 0x2d0, &(0x7f00000003c0)="$eJzs3b1uHFUUAOAz653ZBYp1QYWQGAkKqihOS7MWSiSEKyIXQAGGJBLyrpBiyRI/YklFS0NBwRNQ8SA0iBdAokWiI0iRLprZmf1xJhstYRMg39f4+N5z5p67O7bHha/ff3F6eqOMW3c+/yWGwyx64xjH3Sz2oxetL2PN+OsAAP7L7qYUv6e5beqyiBjuri0AYIe2/vn/w85bAgB27Prb77x5eHR09a2yHMa16Vfnx9Vv9tXH+fzhrfgoJnEzLsco7kXUDwp51E8LVXgtpTTrl5X9eGU6Oz+uKqfv/dhc//C3iLr+IEaxXw8tnjbq+jeOrh6Ucyv1s6qPZ5v1x1X9lRjF84vitforHfVxXMSrL6/0fylG8dOH8XFM4kbdxLL+i4OyfD1988dn71btVfXZ7Px4UOctpb3H/NYAAAAAAAAAAAAAAAAAAAAAAPA/dqk5O2cQ9fk91VBz/s7eveqTPMrW/vr5PPP6rL3Q6vlAKaVZiu/a83Uul2WZmsRlfT9e6Ef/yewaAAAAAAAAAAAAAAAAAAAA/l3OPvn09GQyuXn7Hwna0wD6EfHn9Yi/e53xyshLsTl50Kx5Mpn0mnA9pz9YGYm9NieL2NhGtYnuqZStLtF79Nfwmft6boLvP8i3vODw4Tl591oXg/4j7Ku9u05Psu7XcBDtyLC5Sb4tIpY5RTxkifZdLx6Uk2Kb26/onBptvffiuTqYbciJbFNjr/0631czkl3cRVG/qp3leRNEHt1fMsMH3M/dwf3fKzKndQAAAAAAAAAAAAAAAAAAwE5liz/67Zi8s7G0lwY7awsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHquzxf//XwQ/5xGLkXxtqglmTXHH1MWgiNtnT3iLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAX+CgAA//8wK1Yb") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 3.000549176s ago: executing program 0 (id=862): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x800, 0x4) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1, 0x0, 0xfffffffffffffd96}}], 0x2, 0x16da) 2.975900658s ago: executing program 1 (id=863): r0 = syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40)={[{@jqfmt_vfsv0}, {@nojournal_checksum}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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") bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=@newtfilter={0x2650, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xf}, {0xe}, {0xc, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2620, 0x2, [@TCA_CGROUP_POLICE={0x4a0, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0xe, 0x5, 0x2, 0xed13, {0x4a, 0x0, 0x1, 0x3a75, 0x6, 0x3}, {0x8, 0x2, 0xb47c, 0x4, 0x3ff, 0x8}, 0x4, 0x4, 0x7}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xdba}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf0a0}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0xffffffffffffffff, 0x3ff, 0xfffffff5, 0x2, {0x0, 0x1, 0x0, 0x4, 0x5, 0x2}, {0x6, 0x0, 0x7, 0x1, 0x1, 0x81}, 0x6, 0x62206e6b, 0x80000000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x6, 0x5, 0xf, 0x9, 0x1, 0x8001, 0x5, 0x1, 0xd5, 0x2, 0x3, 0xff, 0x7, 0x5, 0xfffffe58, 0x0, 0x3, 0x8000, 0x7589, 0x3, 0x80000001, 0x4, 0x778, 0x7977, 0x0, 0xd, 0xfffffff5, 0x4, 0x5, 0x0, 0x2, 0x8, 0x2, 0x1, 0x7, 0x2, 0x7, 0x8, 0x2, 0x4, 0xfff, 0x7, 0xefd, 0x9, 0x6, 0x3c, 0x1ff, 0x6, 0x2, 0x8001, 0x6, 0x1, 0xfffffffb, 0x4, 0x7, 0x6, 0x4, 0x9, 0x6, 0x5, 0x3, 0x9, 0x408, 0x3ff, 0xe361, 0x8, 0x5, 0x4, 0x4, 0x0, 0x0, 0x32ef, 0xc15, 0x401, 0xfffffff8, 0xc86, 0x2, 0x2, 0x8, 0x0, 0x5, 0x0, 0x5, 0x0, 0x6, 0x101, 0x3, 0x3, 0xe9a, 0x2, 0x4, 0x63, 0x2, 0x6, 0x5, 0xaf, 0xec, 0x9, 0x7, 0x10a, 0x0, 0x10001, 0xc, 0x2, 0x1017, 0x8, 0x4, 0x0, 0x9, 0x5, 0x400, 0xfc7, 0x2, 0x401, 0x8, 0x0, 0x70, 0x3, 0xfc2, 0x6, 0x1, 0xfffffffb, 0x8, 0x200, 0x5, 0x101, 0xffffffff, 0x100, 0x7, 0x57f0, 0xfffffffc, 0xe9b, 0x2f9c1f86, 0x401, 0x5, 0x9, 0x80000000, 0xfffffff8, 0xdb, 0x5, 0x6, 0x2, 0xfff, 0x4, 0x3, 0x7, 0x800, 0x9, 0x22c, 0x10001, 0x4, 0x2, 0xffffffff, 0x8, 0x9, 0x5, 0x80000000, 0x8, 0x8000, 0x8, 0x4, 0x200, 0x8, 0x7, 0x7f, 0x4, 0x49, 0xfffffffe, 0x6, 0x0, 0xebca, 0x400, 0xa1a, 0x9, 0xbed, 0x86a, 0x1, 0xffff, 0x1ff, 0x10001, 0x0, 0xb, 0x7, 0x3, 0x0, 0x10001, 0x7, 0x73, 0x800, 0x1, 0x9, 0xdce, 0x6, 0x8, 0x80, 0x2000, 0x9, 0x4, 0xc73b, 0x3, 0xfffffffd, 0x4, 0x3, 0x0, 0x7ff, 0x401, 0x6, 0x5, 0x100, 0x0, 0x9, 0x6, 0x7ff, 0x7fff, 0x54a08000, 0x9, 0x3575, 0x3, 0x10000, 0xb, 0xe, 0x3, 0xfff, 0x7, 0xe0, 0x7, 0x7f, 0x0, 0x7, 0x3, 0x0, 0x8, 0x80, 0x4, 0x6, 0x6, 0x5, 0x4, 0x8, 0x6, 0x5, 0x8, 0x8, 0x5, 0x8, 0x8, 0x0, 0x80, 0x2, 0x2, 0x10, 0x6, 0x0, 0x7255]}]}, @TCA_CGROUP_POLICE={0x60, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xaf55}]}, @TCA_CGROUP_EMATCHES={0x2c4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x3}, {0x3, 0xff, 0xe3, 0x0, 0x9, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfffd, 0x3, 0x7}, {0x240000, 0x2, 0x8001, 0x4f66}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0xd3d}, {0x6, 0x2000, 0xa6, 0x0, 0x6, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xbc, 0x1, 0x0, 0x0, {{0xa818, 0x0, 0x6e76}, "0752d5ffb7b1d217a0da732d5522783e361c626e6e0168e425186be8d0d4091306ec4d7f40712eb28915a5ab3f0723e40480c424b74b5c1e5def649624a0e9bedbc1f80a649de889c8412b344011c4880fd39e36a512309361b51aff76ee3d44ffbb0dfa85a75caa2dee62db1f2d108ca11e08f8baaf163e908f152ddc2a0606ec6505c0177a906f099aa33733b8abaca72f42ef76c1d223b7ccda332ba01876cc1fb9d28fd00d4a892fe93e5e"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x10, 0x7, 0x5}, {{0x2, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x180, 0x2, 0x0, 0x1, [@TCF_EM_META={0x6c, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8001, 0x5}, {0x7, 0xff, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xff, 0x8, 0x2}, {0x5, 0xe}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xd55, 0x8, 0x2}, {0x2, 0x1, 0x2}}}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_VAR="8ecf0123", @TCF_META_TYPE_VAR="ca6e835915b9befc", @TCF_META_TYPE_VAR="5981ca7754e9"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff9, 0x8, 0x1}, {0x0, 0x3}}}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="8f573d18b7aafbd17203", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_CMP={0x18, 0x8, 0x0, 0x0, {{0x84, 0x1, 0x4cb7}, {0x401, 0x3, 0x7, 0x1, 0xa, 0x1, 0x1}}}, @TCF_EM_META={0xb8, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="ba", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="15"]}, @TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_VAR="4632bd4f8628c5b1", @TCF_META_TYPE_VAR="b25355a5550e785df881", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="a24cc07d21b3362f", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1995, 0x4}, {0xa, 0x81}}}, @TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_VAR="d2b892860ded79", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="84", @TCF_META_TYPE_VAR="1ef396fa49", @TCF_META_TYPE_VAR="0027e2051516bb", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR=';~^', @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfbe, 0x0, 0x2}, {0x9, 0x1, 0x3}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x7, 0x2}, {0xb, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x81}, {{0x4}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xffff, 0x7, 0x8}, {{0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x4}, {0x0, 0x40, 0xd, 0x4, 0x2, 0x0, 0x2}}}]}]}, @TCA_CGROUP_POLICE={0x828, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x5, 0x0, 0x5, 0x1, 0x9, 0x3, 0x7fffffff, 0x8, 0x9, 0x3, 0x10000, 0x5, 0x7, 0x7, 0x8, 0x3, 0x8, 0x7f30, 0x3ff, 0x800, 0x8, 0x5, 0x200, 0x4, 0x5, 0x2, 0x401, 0x8, 0x8, 0x5, 0x5, 0x8, 0x9, 0x6, 0x0, 0x0, 0x7fff, 0xfffffffe, 0x3, 0x0, 0x401, 0xedb, 0x3, 0xe, 0x200, 0x0, 0x5, 0x7, 0x7, 0x40000000, 0x5, 0x81, 0x2, 0x7, 0x676e, 0x9, 0x475d53b9, 0xffffffff, 0x5, 0x6, 0x2000, 0x101, 0x80, 0x400, 0x7a30, 0x6, 0x76, 0x4, 0xe667, 0xffffff7f, 0x1, 0x100, 0xd, 0x1, 0x7, 0xffffffff, 0x3, 0x2cb, 0x400, 0x5, 0x3, 0x2, 0x6, 0x0, 0x3, 0x2, 0x6, 0x9, 0x6, 0x4ef9a30, 0xfff, 0x3, 0x401, 0x5, 0x7, 0x2, 0xffffffff, 0xc6, 0x10000, 0x4, 0x5, 0x0, 0x0, 0x4, 0x5, 0x8, 0x3, 0x9, 0x3, 0x56437161, 0x1, 0xffff, 0x4c74, 0xc, 0x8, 0x67, 0x8, 0x8, 0xb, 0x4, 0x3, 0x4, 0x9, 0x4d, 0x1000, 0x5, 0xfffffffa, 0xbc, 0x9, 0x2, 0x80, 0x4, 0x3, 0x7b9, 0x0, 0xf1, 0x7, 0x7, 0x2, 0x10000, 0x7000000, 0x1, 0x4, 0x6, 0x7fff, 0xe, 0x7f, 0x1, 0x6, 0x0, 0x0, 0x5, 0x3, 0x5, 0x9, 0x1, 0x5, 0x2, 0x72be, 0xab, 0x7, 0x7fff, 0x5, 0x5, 0xfffffffd, 0x3, 0xc63, 0x80, 0x4, 0x401, 0xfff, 0xfffffffb, 0x0, 0x79, 0x5589, 0xd4, 0x1, 0x101, 0x79, 0x3, 0x6, 0xc, 0x2105, 0x9c, 0x9, 0x6, 0x0, 0x6, 0x9425, 0x5, 0x5, 0x80000001, 0x8b29, 0x7, 0x7fff, 0x0, 0x0, 0x4, 0x3, 0x5, 0x2, 0x10000, 0x81f4, 0xc3b3, 0x7, 0x100, 0x8, 0x4, 0xba, 0x5, 0x76de, 0xfffffff9, 0x10000, 0x1, 0xb88, 0x1, 0x4, 0x55, 0x80000000, 0x7, 0x3, 0x7, 0x9, 0x2, 0x5, 0x6, 0x7, 0x80000001, 0xa, 0x9, 0xfff, 0x8, 0x9c, 0x1000, 0xb99, 0x10, 0xffff, 0x101, 0x1ff, 0x5, 0x901, 0x0, 0xa7, 0x10, 0x5, 0x2, 0x1, 0x6, 0x0, 0x5, 0x4, 0xb, 0x9, 0xc895, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x100000, 0x7, 0x0, 0xfffffffa, 0x8, 0x8, 0x8, 0x3, 0x289, 0x5, 0xfffffffc, 0x7f, 0xf3aa, 0x0, 0xb, 0x5, 0x8, 0x9, 0x5, 0x79, 0x7, 0xc55, 0x1, 0x6, 0x2, 0xb, 0x9, 0x0, 0x4, 0x101, 0x2, 0x10, 0x9, 0x1ff, 0x8001, 0x5, 0x0, 0x4, 0x5, 0x7, 0x4, 0x6, 0x10, 0x659, 0x480, 0x5, 0x8c, 0x2, 0x400, 0x6, 0x0, 0x2, 0x3, 0x5, 0x0, 0x4, 0x2, 0x8001, 0xfffffff9, 0x100, 0x3, 0x3, 0x0, 0xcb, 0xe74, 0x8000, 0x3, 0x7, 0x7, 0x4, 0x2, 0x6dbe94e3, 0x5, 0x9, 0x5f1adfa6, 0xf, 0x80000000, 0x7, 0x7, 0x6, 0x4, 0x6, 0x3, 0x1, 0x3, 0x12ba, 0x0, 0x9, 0x65, 0x3, 0x4, 0x10, 0x3, 0x7f, 0x6, 0x7, 0xffffffca, 0x9, 0xfffffff9, 0x68, 0x800, 0x9, 0x9, 0x4, 0x401, 0x7ff, 0x6, 0xfffffff9, 0xc86, 0x0, 0x80, 0x680, 0x401, 0x4, 0xfff, 0x9, 0x5, 0xc62, 0x3, 0x5, 0x8, 0xa15e, 0x2, 0x8, 0x100, 0x3, 0xa5, 0x1, 0xfffffffb, 0x5, 0xc635, 0x8, 0x8, 0x400, 0xfff, 0x3, 0x4, 0x7, 0x6, 0x1, 0x5, 0x0, 0x553a, 0x3, 0x3, 0x6, 0x24cd, 0xae1, 0x6, 0x0, 0x3, 0x8, 0x4, 0x1, 0x2, 0x9, 0x3, 0x0, 0x7, 0x4, 0x6, 0x9, 0x4, 0x7dd, 0x8, 0xffff, 0x2, 0xbe3, 0x0, 0xf, 0xa31, 0x5, 0x4, 0x2, 0x0, 0x7ff, 0xfff, 0x5, 0x8, 0xffffffff, 0x5, 0x4, 0x9, 0xffffffff, 0x9924, 0x19ed, 0x6b5, 0x100, 0x2, 0x3, 0x0, 0x101, 0x0, 0x8, 0x7fff, 0x4, 0x800, 0x5, 0x3, 0x9, 0x7fffffff, 0x8, 0x3ff, 0x6460, 0xe4a, 0x6, 0x1, 0x9, 0xae, 0xe, 0x0, 0xffffffc0, 0x1, 0xc00000, 0x8, 0x8, 0x2, 0x1, 0x0, 0x5, 0x6, 0xe, 0x9, 0x9, 0xa, 0x0, 0x1000, 0x24, 0x1e0, 0x1000, 0xffffffff, 0x0, 0x90000, 0x2, 0x800, 0x80000001, 0xa62b, 0x5, 0x8, 0x8, 0x1, 0xfffffff7, 0x7, 0x1, 0x9, 0xc, 0x0, 0xf70, 0x2, 0x6, 0x8, 0x7643, 0x1, 0x80, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x50834424}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa13}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8}]}, @TCA_CGROUP_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x101}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}, @TCA_CGROUP_ACT={0x2f8, 0x1, [@m_bpf={0x98, 0x13, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1cdb, 0x8001, 0x0, 0x1, 0x7}}]}, {0x47, 0x6, "d9e3957f5819113f61376dd4cc5bfc69edf635326f0d22cccaafc24fab1c6a8741bd6172c6a9d1ad852c46a2ce3e452a3e551ee0b48b751b56390f9e18f41cc73bd715"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x138, 0x1f, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xdd4bb6d4623835c, 0x2}}}}, @m_vlan={0x124, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfffffffa, 0x5, 0x401, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd76}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0xbb, 0x6, "75716d1d6714ae54d7ffc682bb888ebd747059c6aef7a308536e94b5d3187fb24744a83fafa9b3326fde53271cdca0c55d5512bd63f3094e358db3452f2a0a6d603c82dcd924c47a3be4705b03cc76d9bce83b1cb32b8aa66eea4ece9ccb06afbb3193da317d345b14c4f312d4e83f538f34243e97d9c83ab868f5b0978d507677f77e1639f926634d4a9576106f529f6a1ef5a8b753040b112a627751acc886ab02c84729415f33948e65479b3740b9915d94bfbd0f76"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_CGROUP_POLICE={0x18, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_CGROUP_ACT={0x1bc, 0x1, [@m_vlan={0x94, 0xf, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x65, 0x5, 0x5, 0x1, 0x9}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xd2b, 0x4, 0x10000000, 0x40, 0x6}, 0x1}}]}, {0x25, 0x6, "6835582c6a7c322e85e17229a8acc0bc49c6c8a03b77449d647e49412661abd0a0"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x124, 0x1f, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0xe4, 0x6, "0945d20e0eb088c8293e755852bc5667bb042abec6a91dc2454de8823da52a2d5deee1c3c09f04d0e0f5d504cf972aca26bdd64d8be4269a39b6a4f8675f7f3aa3b1c203a8d0d5cf039a2da6081efbea33a3865fa08b4246f80d9375e095f7a88f1243f7af77230f95f25283c83e02a3c29159bddf3a2233369ba0692296ea2f52140974c6b496786e794f317b81e7e0de5b76ef7f23e458f3809e6dbaceeaa3095c6383ad8afe5a2e82e19d3bececd11e4f7d1f36178a302c31ffeeb7149ee69a02736fb3edce1b0fd02d17b6e3319086cea05b7954636748f9110847955dfd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_CGROUP_ACT={0x1140, 0x1, [@m_gact={0x1090, 0x12, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x7db, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x884, 0x3, 0x1, 0x3, 0xb6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x97a, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x30, 0xd, 0x8, 0x1, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9d, 0xb, 0x6, 0x10000, 0xc}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0xac, 0x17, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x40, 0x2, 0x4, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xb29}}]}, {0x5b, 0x6, "f391ff777fa02d38bf027b81a2b8d993aaf09002e554849cc54e22352aa04b041ffedb57d436a8a912393d653b1c1ab59ecc6bfce1e2f6854f03877a4b4043e576990934625cafee84a499f2ed9fadf944a82bfd59ea37"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2650}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2ca) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x84ffe0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000100003052bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9573732a6bbae2b4140012800b0001006d616373656300000400028008000500", @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839}, 0x24}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.776299055s ago: executing program 2 (id=864): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200000000000000fd68000000", @ANYRES32=0x0, @ANYBLOB="0500a6ff"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}], 0x10, 0x200d0000, 0x0) 2.246718778s ago: executing program 2 (id=865): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000140)={[{@fat=@tz_utc}, {@uni_xlate}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@shortname_mixed}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@uni_xlateno}, {@uni_xlate}, {@rodir}, {@uni_xlate}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.35376775s ago: executing program 1 (id=867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1.276723627s ago: executing program 1 (id=868): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000600)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x6}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018140000", @ANYRES32=r6, @ANYBLOB="00000000000000001600000001000000180000000000000000000000000000009500000000000000360a000000000000180200002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000720afbff0000000485000000060000009500000000000000d582a27ce32b3947c7c45798672fcaf17e2b51e4404c630e959cc93ee9330cfe642b3f8ba76956f1fc3004640135562bf8621156cc6699e3075b151c08388c0ca3aeff2b52cdca7798f1354cf55fc4a3dcec3062ac8d686ad3dd8a4b4a7fda190a97bea718"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x78) 198.431674ms ago: executing program 4 (id=869): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000080)='system_u:object_r:inetd_log_t:s0\x00', 0x21) 98.560393ms ago: executing program 3 (id=870): bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x6]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010101, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x20080d0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$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") 27.708668ms ago: executing program 4 (id=871): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}}}, 0x0) 0s ago: executing program 1 (id=872): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000408a25886a0000000000010902240001000000000904000001030000000921000000012205000905810300"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @dev, 0x0, 0x0, 'ipvlan1\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x11}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) syz_emit_ethernet(0x5ca, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "89d884", 0x594, 0x0, 0x1, @remote, @empty, {[@dstopts={0x2f, 0x27, '\x00', [@jumbo={0xc2, 0x4, 0x3ff}, @generic={0x1, 0x10a, "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"}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0xfffe}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @ra={0x5, 0x2, 0x6}]}, @dstopts={0x0, 0x17, '\x00', [@enc_lim={0x4, 0x1, 0xe0}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x3, 0x63, "393de0e2073b5c30b9c8da60258d1587053b8f285b9eb4ede66aaf024e65570bd13b42feec16de105f6b684ac331ee3654921d2db65a6107d503b1fbd23069b34417de013b29a5d5f59b8f14528417c72379347441e545251083066511623c865256fb"}, @pad1, @hao={0xc9, 0x10, @mcast2}, @generic={0x2, 0x37, "609667d9c4bf15dba67ed2080c34f87e2fa749a8a81b83ac45cb2b31040e8f8ab19b510cd8faff0b16b195054578c1465f5084f653a1a1"}, @enc_lim={0x4, 0x1, 0x6}]}, @routing={0x2c, 0x12, 0x1, 0x3, 0x0, [@mcast1, @private2, @remote, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty]}, @srh={0x6c, 0x4, 0x4, 0x2, 0xc, 0x48, 0x800, [@ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0x3c, 0x20, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x5, 0xe3, "23046a9e79b175b4b86b172c76a813ed1d06e35f219163c7c43c52bb29f508be0e6dff11566ec11e287d82ffd560ac009122e2f66ba0b6863e1d986817f8aae5a81b3d458138a9cbf133416134ffac869c2953e7774156abe9752621a73639a89741d40ef2f1a9f6057a795ec8ca8ee46384a795ed64aef412b1a913d6ff64e75a60f5fd37a71c7b9b5a017da93cffa3ebd4292da60174463c0ab725790d3fb2c7d9b6fc0045327981f0225237444a77c4d3362ff044b897ce5fc2311e5d98c80e020bc3d00ed65ae98d17c6f8da246add2c6731b59f5a9f25e9f0b8024747f053cd7b"}, @pad1, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @jumbo={0xc2, 0x4, 0x36}]}, @dstopts={0x33, 0x15, '\x00', [@generic={0xf, 0xac, "3221b7be3d5e5cabd991b1b4eb37bc3a651f5776fac388c8090352312762e02b1398d751711888f9e0f6d047a192a04bc4a84062f7c9d9d3eba0f55b20d64ea8f2e26fd76142771e37fb2f2079d5a9944780df19ac10374d12dda7fb8e29752e6d8af9d4928af2fa6a96ce96672b1fa703570c4f7d0fc49dbe4e16c8bf73ee9fd899e7a644a3eb51e8fe21846e31abe902c1c16b84830e4e61df72278029884033785d4f8734c2ed7e135d40"}]}, @dstopts={0x28, 0x0, '\x00', [@pad1]}], "352ced2379a953189bcb0de1709a221d0c709b6aca2eb15e855641fe8f945bd5705dbecca58b6d097c15defae799e9e553f7ef9c0d8eb53c07560d73a0a70abbc66a6565bcbf9aade163fd178fd6248a7788358b9d4a7a298875d11c367caba407fa9f94fdd665ad6245686701f5bb5fcea5fa76647bf761380894d28a0266d23ebc8fde54937f53efa4679b6288666dac315c413b65cd992a4b5e4cb2980c905424246a19c1071c208d3cf3aadcb4fe8793b108d896e0edd5ec3ed081da0c25ddbcc42ee0300d34602a74def53250be3d4dd0fa043c6705a7da77db360222a0833095eb8b33599ec27f3329a89f7ef7be6e6a85"}}}}}, 0x0) pipe(0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000000), &(0x7f0000000540)=""/232, 0x0, 0x0}, 0x38) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x89, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010008020d00000904010102020d0000090582020002000000090503020002000000bc94ef907df247d46eaa274c8f51e61fb4cfc6664d5c9315a37e6e4eae4cdd654f"], 0x0) kernel console output (not intermixed with test programs): op1): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.581780][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 136.590535][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 136.598354][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 136.606159][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 136.613980][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 136.626826][ T1784] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 136.646138][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 136.654564][ T1784] EXT4-fs (loop1): 1 truncate cleaned up [ 136.660369][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 136.667823][ T1784] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,block_validity,sysvgroups,,errors=continue [ 136.697580][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 136.717510][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 136.725187][ T1784] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.437: corrupted xattr block 19 [ 136.727853][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 136.757491][ T1784] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 136.766252][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 136.784714][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 136.802184][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 136.809509][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 136.816795][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 137.227534][ T24] audit: type=1400 audit(1722252028.510:429): avc: denied { map } for pid=1769 comm="syz.4.433" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 137.554776][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 137.562170][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 137.569378][ T297] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 137.577925][ T297] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 137.583140][ T24] audit: type=1400 audit(1722252028.540:430): avc: denied { execute } for pid=1769 comm="syz.4.433" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 138.648348][ T298] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 138.838025][ T1803] syz.0.444[1803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.838208][ T1803] syz.0.444[1803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.017488][ T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.039810][ T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.071334][ T1805] device bridge_slave_0 left promiscuous mode [ 139.097490][ T298] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 139.106486][ T298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.115056][ T1805] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.128534][ T1805] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 139.156620][ T298] usb 4-1: config 0 descriptor?? [ 139.586578][ T1812] netlink: 'syz.2.442': attribute type 30 has an invalid length. [ 140.422093][ T298] itetech 0003:258A:6A88.0014: unknown main item tag 0x0 [ 140.580846][ T298] itetech 0003:258A:6A88.0014: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.3-1/input0 [ 140.884921][ T1809] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 140.920034][ T1809] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 141.143989][ T1809] F2FS-fs (loop0): invalid crc value [ 141.296209][ T1809] F2FS-fs (loop0): Found nat_bits in checkpoint [ 141.835636][ T1852] syz.4.455[1852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.835752][ T1852] syz.4.455[1852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.015758][ T1809] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 142.073179][ T1809] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 143.502509][ T1866] EXT4-fs (loop1): Ignoring removed oldalloc option [ 143.681274][ T1866] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=9802e02d, mo2=0002] [ 144.138950][ T1866] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.459: invalid indirect mapped block 1 (level 1) [ 144.201853][ T20] usb 4-1: USB disconnect, device number 7 [ 144.214036][ T1866] EXT4-fs (loop1): Remounting filesystem read-only [ 144.248553][ T1866] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.459: invalid indirect mapped block 1635017060 (level 1) [ 144.272733][ T1866] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.459: bg 0: block 361: padding at end of block bitmap is not set [ 144.307724][ T1866] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5648: Corrupt filesystem [ 144.327528][ T1866] EXT4-fs (loop1): 1 truncate cleaned up [ 144.333059][ T1866] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,min_batch_time=0x0000000000000000,min_batch_time=0x000000000000008e,errors=remount-ro,jqfmt=vfsv0,noblock_validity,debug,nombcache,data_err=abort,data=writeback,init_itable=0x0000000000000008,stripe=0x00000000000000 [ 144.606062][ T1889] syz.3.466[1889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.606180][ T1889] syz.3.466[1889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.628977][ T24] audit: type=1400 audit(1722252035.920:431): avc: denied { map } for pid=1886 comm="syz.2.467" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.855828][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 144.887428][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 144.895239][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 144.907424][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 144.915110][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 144.922788][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 144.931129][ T1900] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.940140][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 144.948322][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 144.956640][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 144.965182][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 144.972577][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 144.979953][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 144.990762][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 144.998088][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.005411][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.015699][ T1900] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 145.029999][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.037260][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.065130][ T1900] EXT4-fs (loop0): 1 truncate cleaned up [ 145.085220][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.097378][ T1900] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,block_validity,sysvgroups,,errors=continue [ 145.118787][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.157670][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.164944][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.183271][ T1900] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.472: corrupted xattr block 19 [ 145.194928][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.202899][ T1900] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 145.207405][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.240233][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.257455][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.267707][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.275042][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.292570][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.307423][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.324894][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.334983][ T672] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 145.354180][ T672] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 145.642797][ T1898] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 145.657394][ T1898] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 145.657997][ T20] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 145.691627][ T1898] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.907889][ T1898] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 145.924983][ T1898] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 146.007504][ T1217] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 146.243458][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.267440][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.277061][ T20] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 146.297418][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.324407][ T20] usb 4-1: config 0 descriptor?? [ 146.368041][ T1217] usb 2-1: Using ep0 maxpacket: 16 [ 146.620247][ T1217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.663013][ T1217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.197837][ T1217] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 147.206748][ T1217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.238797][ T1217] usb 2-1: config 0 descriptor?? [ 147.320378][ T20] itetech 0003:258A:6A88.0016: unknown main item tag 0x0 [ 147.339083][ T20] itetech 0003:258A:6A88.0016: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.3-1/input0 [ 147.563348][ T24] audit: type=1400 audit(1722252038.850:432): avc: denied { unlink } for pid=1897 comm="syz.2.471" name="#9" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 147.763329][ T1217] hid-steam 0003:28DE:1142.0017: unknown main item tag 0x0 [ 147.772114][ T1217] hid-steam 0003:28DE:1142.0017: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 147.975884][ T329] usb 2-1: USB disconnect, device number 10 [ 148.657935][ T24] audit: type=1400 audit(1722252039.950:433): avc: denied { mounton } for pid=1949 comm="syz.1.485" path="/proc/86/cgroup" dev="proc" ino=21434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 148.795301][ T1950] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 148.802073][ T1943] F2FS-fs (loop0): invalid crc value [ 148.821309][ T1950] EXT4-fs (loop1): orphan cleanup on readonly fs [ 148.840769][ T1950] EXT4-fs (loop1): 1 truncate cleaned up [ 148.853864][ T110] Quota error (device loop1): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 148.879636][ T110] EXT4-fs error (device loop1): ext4_release_dquot:6242: comm kworker/u4:2: Failed to release dquot type 1 [ 148.894734][ T1943] F2FS-fs (loop0): Found nat_bits in checkpoint [ 148.938003][ T1950] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,discard,barrier=0x0000000000000003,noinit_itable,noinit_itable,noauto_da_alloc,resgid=0x0000000000000000,resgid=0x000000000000ee002,errors=continue [ 149.020094][ T635] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 149.020121][ T635] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 149.037992][ T635] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 149.051006][ T635] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 149.069570][ T635] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 149.095902][ T635] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 149.113378][ T635] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 149.159636][ T1943] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 149.197463][ T1943] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 149.398826][ T24] audit: type=1400 audit(1722252040.690:434): avc: denied { create } for pid=1942 comm="syz.0.484" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 149.456836][ T294] attempt to access beyond end of device [ 149.456836][ T294] loop0: rw=524288, want=45072, limit=40427 [ 149.513042][ T1963] EXT4-fs (loop1): Ignoring removed orlov option [ 149.527529][ T1963] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.539418][ T294] attempt to access beyond end of device [ 149.539418][ T294] loop0: rw=0, want=45072, limit=40427 [ 149.557641][ T1217] usb 4-1: USB disconnect, device number 8 [ 149.624442][ T1963] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0002] [ 149.647823][ T1963] System zones: 1-12 [ 149.653711][ T1963] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.489: casefold flag without casefold feature [ 149.668156][ T1963] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.489: missing EA_INODE flag [ 149.680421][ T1963] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.489: error while reading EA inode 12 err=-117 [ 149.695931][ T1963] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.489: missing EA_INODE flag [ 149.708006][ T1963] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.489: error while reading EA inode 12 err=-117 [ 149.721018][ T1963] EXT4-fs (loop1): 1 orphan inode deleted [ 149.726611][ T1963] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,abort,debug_want_extra_isize=0x000000000000005c,debug,noinit_itable,errors=continue,usrjquota=,orlov,minixdf,resgid=0x0000000000000000,,errors=continue [ 149.762411][ T110] attempt to access beyond end of device [ 149.762411][ T110] loop0: rw=2049, want=41064, limit=40427 [ 149.924189][ T24] audit: type=1326 audit(1722252041.210:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1968 comm="syz.1.492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c0e2a5299 code=0x0 [ 149.995505][ T24] audit: type=1400 audit(1722252041.260:436): avc: denied { mounton } for pid=1973 comm="syz.2.493" path="/82/file0" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 150.141248][ T1956] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 150.165410][ T1956] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 150.206998][ T1956] F2FS-fs (loop4): Found nat_bits in checkpoint [ 150.213216][ T24] audit: type=1400 audit(1722252041.490:437): avc: denied { mounton } for pid=1973 comm="syz.2.493" path="/82/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 150.220494][ T1974] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 150.276717][ T1974] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 150.287926][ T1974] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 150.295187][ T1974] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,commit=0x0000000000000005,norecovery,,errors=continue [ 150.339910][ T1987] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 150.357164][ T1987] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 150.410927][ T110] bridge0: port 3(gretap0) entered disabled state [ 150.442732][ T1956] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 150.453544][ T110] device gretap0 left promiscuous mode [ 150.471232][ T110] bridge0: port 3(gretap0) entered disabled state [ 150.482377][ T1956] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 150.493849][ T1956] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 150.604992][ T24] audit: type=1400 audit(1722252041.890:438): avc: denied { mounton } for pid=1996 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 150.735056][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 150.750700][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 150.759141][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 150.766403][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 150.774223][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 150.781767][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 150.789411][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 150.797134][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 150.808918][ T1996] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.815795][ T1996] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.823822][ T1996] device bridge_slave_0 entered promiscuous mode [ 150.832604][ T1995] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 150.840536][ T1996] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.847476][ T2003] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.850156][ T1995] EXT4-fs (loop3): orphan cleanup on readonly fs [ 150.857389][ T1996] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.869573][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 150.870714][ T1996] device bridge_slave_1 entered promiscuous mode [ 150.944143][ T2010] attempt to access beyond end of device [ 150.944143][ T2010] loop4: rw=2049, want=45160, limit=40427 [ 151.029779][ T1995] EXT4-fs warning (device loop3): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 151.074252][ T2003] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 151.597765][ T1995] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 151.605511][ T2003] EXT4-fs (loop1): 1 truncate cleaned up [ 151.619306][ T1995] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.498: bg 0: block 40: padding at end of block bitmap is not set [ 151.643610][ T2003] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,block_validity,sysvgroups,,errors=continue [ 151.663817][ T1995] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5648: Corrupt filesystem [ 151.683455][ T1995] EXT4-fs (loop3): 1 truncate cleaned up [ 151.693457][ T1995] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 151.710168][ T2008] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 151.732455][ T2003] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.500: corrupted xattr block 19 [ 151.742235][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 151.751311][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 151.777849][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 151.785110][ T2003] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 151.794226][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 151.805464][ T1996] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.812378][ T1996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.819567][ T1996] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.826448][ T1996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.834428][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 151.842097][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 151.849633][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 151.856954][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 151.877184][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 151.884879][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 151.927398][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 151.944916][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 151.965141][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 151.995633][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 152.022744][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 152.042914][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 152.057430][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 152.072846][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 152.335400][ T1996] device veth0_vlan entered promiscuous mode [ 152.868362][ T1996] device veth1_macvtap entered promiscuous mode [ 152.958908][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 152.966194][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 152.973509][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 152.981032][ T298] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 152.993714][ T298] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 153.050795][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.068992][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.087954][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.107838][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.116571][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.126057][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.134490][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.167946][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.183595][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.202911][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.233717][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.235547][ T2019] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 153.252467][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.278387][ T110] device bridge_slave_1 left promiscuous mode [ 153.294683][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.306457][ T2022] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 153.326098][ T110] device bridge_slave_0 left promiscuous mode [ 153.347715][ T2022] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 153.373953][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.403267][ T110] device veth1_macvtap left promiscuous mode [ 153.482063][ T110] device veth0_vlan left promiscuous mode [ 153.720559][ T2028] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 153.788840][ T2028] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038 (0x7fffffff) [ 154.020946][ T2037] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 154.119177][ T2043] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.151470][ T2043] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.069909][ T2056] syz.3.506[2056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.070617][ T2056] syz.3.506[2056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.109781][ T315] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 156.117528][ T315] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 156.137371][ T315] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 156.297516][ T315] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 156.316628][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.336891][ T315] usb 2-1: Product: syz [ 156.345067][ T315] usb 2-1: Manufacturer: syz [ 156.358788][ T315] usb 2-1: SerialNumber: syz [ 156.383986][ T315] usb 2-1: config 0 descriptor?? [ 156.417480][ T2052] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.424453][ T2052] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.527437][ T433] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 156.668586][ T2052] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.686850][ T2052] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.779266][ T2077] netlink: 'syz.3.516': attribute type 3 has an invalid length. [ 156.858425][ T2077] erofs: (device loop3): mounted with root inode @ nid 36. [ 156.907590][ T433] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.912539][ T2077] IPv6: syztnl2: Disabled Multicast RS [ 156.921454][ T433] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.921508][ T433] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.953923][ T433] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.977986][ T2047] F2FS-fs (loop2): invalid crc value [ 156.989238][ T2047] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 157.077664][ T433] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.092460][ T433] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.108524][ T433] usb 1-1: Product: syz [ 157.112805][ T433] usb 1-1: Manufacturer: syz [ 157.127522][ T315] dm9601: No valid MAC address in EEPROM, using b6:ff:50:ef:4a:b0 [ 157.158360][ T433] cdc_wdm 1-1:1.0: skipping garbage [ 157.163725][ T433] cdc_wdm 1-1:1.0: skipping garbage [ 157.186721][ T433] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 157.386057][ T2049] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 158.077637][ T1012] usb 1-1: USB disconnect, device number 10 [ 158.088068][ T315] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 158.103983][ T315] usb 2-1: USB disconnect, device number 11 [ 158.217676][ T2097] kvm: emulating exchange as write [ 158.404250][ T2103] erofs: (device loop4): mounted with root inode @ nid 36. [ 158.437419][ T20] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 158.807702][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.827424][ T1932] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 158.834994][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.845735][ T20] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 158.854911][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.865360][ T20] usb 4-1: config 0 descriptor?? [ 159.077572][ T1932] usb 5-1: Using ep0 maxpacket: 8 [ 159.313211][ T1932] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 159.322480][ T1932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.332101][ T1932] usb 5-1: config 0 descriptor?? [ 159.355677][ T20] sony 0003:1345:3008.0019: hiddev96,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.3-1/input0 [ 159.368951][ T20] sony 0003:1345:3008.0019: failed to claim input [ 159.450170][ T2131] syz.1.530[2131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.450871][ T2131] syz.1.530[2131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.677531][ T24] audit: type=1400 audit(1722252050.780:439): avc: denied { create } for pid=2127 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 159.905218][ T1217] usb 4-1: USB disconnect, device number 9 [ 160.104805][ T2106] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 160.107152][ T24] audit: type=1400 audit(1722252051.390:440): avc: denied { create } for pid=2105 comm="syz.4.523" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 160.219170][ T2106] udc-core: couldn't find an available UDC or it's busy [ 160.309850][ T24] audit: type=1400 audit(1722252051.490:441): avc: denied { associate } for pid=2105 comm="syz.4.523" name=E91F7189591E9233614B scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 160.396067][ T2106] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 160.673729][ T2146] syz.3.534[2146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.673835][ T2146] syz.3.534[2146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.921762][ T2151] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 161.147185][ T2158] netlink: 47 bytes leftover after parsing attributes in process `syz.3.539'. [ 161.158652][ T1932] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 161.169950][ T1932] asix: probe of 5-1:0.0 failed with error -71 [ 161.178284][ T1932] usb 5-1: USB disconnect, device number 10 [ 161.224533][ T2125] F2FS-fs (loop2): invalid crc value [ 161.253440][ T2125] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 161.265381][ T2167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 161.277607][ T433] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.333191][ T2125] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 161.347565][ T1217] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 161.745106][ T2177] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 162.353440][ T433] usb 1-1: Using ep0 maxpacket: 16 [ 162.477527][ T433] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 162.514561][ T24] audit: type=1400 audit(1722252053.800:442): avc: denied { unlink } for pid=295 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 162.659345][ T2182] syz.3.546[2182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.747011][ T2182] syz.3.546[2182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.827659][ T297] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 162.907539][ T1217] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.916101][ T1217] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.926170][ T1217] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.935098][ T1217] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.058006][ T1217] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.066911][ T1217] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.074956][ T1217] usb 2-1: Product: syz [ 163.079157][ T1217] usb 2-1: Manufacturer: syz [ 163.118375][ T1217] cdc_wdm 2-1:1.0: skipping garbage [ 163.123438][ T1217] cdc_wdm 2-1:1.0: skipping garbage [ 163.139020][ T1217] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 163.194047][ T2195] netlink: 47 bytes leftover after parsing attributes in process `syz.3.550'. [ 163.207801][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.226200][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.237477][ T297] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 163.246363][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.259278][ T297] usb 5-1: config 0 descriptor?? [ 163.295334][ T2199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.552'. [ 163.307664][ T433] usb 1-1: New USB device found, idVendor=23a7, idProduct=17c2, bcdDevice=a3.b1 [ 163.316809][ T433] usb 1-1: New USB device strings: Mfr=96, Product=239, SerialNumber=64 [ 163.322757][ T1217] usb 2-1: USB disconnect, device number 12 [ 163.325918][ T433] usb 1-1: Product: syz [ 163.339697][ T433] usb 1-1: Manufacturer: syz [ 163.344411][ T433] usb 1-1: SerialNumber: syz [ 163.370640][ T433] usb 1-1: config 0 descriptor?? [ 163.404715][ T24] audit: type=1326 audit(1722252054.690:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb3f26299 code=0x7ffc0000 [ 163.442407][ T24] audit: type=1326 audit(1722252054.690:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4fb3f26299 code=0x7ffc0000 [ 163.473640][ T24] audit: type=1326 audit(1722252054.690:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb3f26299 code=0x7ffc0000 [ 163.497644][ T24] audit: type=1326 audit(1722252054.690:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fb3f26299 code=0x7ffc0000 [ 163.525612][ T24] audit: type=1326 audit(1722252054.690:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb3f26299 code=0x7ffc0000 [ 163.549627][ T24] audit: type=1326 audit(1722252054.690:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fb3f26299 code=0x7ffc0000 [ 163.630926][ T1217] usb 1-1: USB disconnect, device number 11 [ 163.772661][ T297] sony 0003:1345:3008.001A: hiddev96,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.4-1/input0 [ 163.784460][ T297] sony 0003:1345:3008.001A: failed to claim input [ 163.827612][ T315] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 163.981317][ T297] usb 5-1: USB disconnect, device number 11 [ 164.088603][ T2209] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.556: Invalid block bitmap block 0 in block_group 0 [ 164.102352][ T2209] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.556: Failed to acquire dquot type 0 [ 164.115224][ T2209] EXT4-fs error (device loop2): ext4_free_blocks:5688: comm syz.2.556: Freeing blocks not in datazone - block = 0, count = 4096 [ 164.132950][ T2209] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.556: Invalid inode bitmap blk 0 in block_group 0 [ 164.148527][ T2209] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 164.158809][ T110] EXT4-fs error (device loop2): ext4_release_dquot:6242: comm kworker/u4:2: Failed to release dquot type 0 [ 164.228840][ T315] usb 4-1: Using ep0 maxpacket: 16 [ 164.261634][ T2209] EXT4-fs (loop2): 1 orphan inode deleted [ 164.297027][ T2209] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; ,errors=continue [ 164.558366][ T315] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 164.626161][ T315] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.905764][ T315] usb 4-1: Product: syz [ 164.910344][ T315] usb 4-1: Manufacturer: syz [ 164.934821][ T315] usb 4-1: config 0 descriptor?? [ 164.941653][ T110] __quota_error: 59 callbacks suppressed [ 164.941680][ T110] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 164.956238][ T110] EXT4-fs error (device loop2): ext4_release_dquot:6242: comm kworker/u4:2: Failed to release dquot type 0 [ 164.968493][ T24] audit: type=1326 audit(1722252056.260:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4fb3f25e9b code=0x7ffc0000 [ 164.994576][ T24] audit: type=1326 audit(1722252056.260:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4fb3f25e9b code=0x7ffc0000 [ 165.023811][ T24] audit: type=1326 audit(1722252056.260:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4fb3f25e9b code=0x7ffc0000 [ 165.048326][ T24] audit: type=1326 audit(1722252056.280:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4fb3f58285 code=0x7ffc0000 [ 165.201357][ T24] audit: type=1326 audit(1722252056.490:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb3f26299 code=0x7ffc0000 [ 165.225085][ T24] audit: type=1326 audit(1722252056.490:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb3f26299 code=0x7ffc0000 [ 165.249771][ T24] audit: type=1326 audit(1722252056.520:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fb3f26299 code=0x7ffc0000 [ 165.277466][ T24] audit: type=1326 audit(1722252056.560:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb3f26299 code=0x7ffc0000 [ 165.302900][ T24] audit: type=1326 audit(1722252056.560:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fb3f26299 code=0x7ffc0000 [ 165.318342][ T315] r8152 4-1:0.0: Unknown version 0x0000 [ 165.365231][ T315] usb 4-1: USB disconnect, device number 10 [ 165.556577][ T2225] EXT4-fs (loop0): Test dummy encryption mode enabled [ 165.565052][ T2223] EXT4-fs (loop2): unsupported inode size: 7 [ 165.593686][ T2223] EXT4-fs (loop2): blocksize: 1024 [ 165.866847][ T2225] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.562: inline data xattr refers to an external xattr inode [ 166.192229][ T2225] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.562: couldn't read orphan inode 12 (err -117) [ 166.232813][ T2225] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue [ 166.334237][ T2225] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 166.717440][ T1217] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 166.770919][ T2254] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 166.771983][ T2250] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 166.791946][ T2254] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 166.801478][ T2250] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 166.840716][ T2254] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 166.864028][ T2254] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e801c09c, mo2=0003] [ 166.868454][ T2250] F2FS-fs (loop0): Found nat_bits in checkpoint [ 166.878340][ T2254] System zones: 0-1, 3-36 [ 166.890338][ T2254] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,delalloc,resuid=0x0000000000000000,debug,jqfmt=vfsv0,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 166.982287][ T2250] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 166.994744][ T2250] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 167.107523][ T1217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.119226][ T1217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.131834][ T1217] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 167.142392][ T1217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.148543][ T2271] EXT4-fs (loop1): unsupported inode size: 7 [ 167.164990][ T2271] EXT4-fs (loop1): blocksize: 1024 [ 167.171648][ T1217] usb 3-1: config 0 descriptor?? [ 167.469235][ T2277] EXT4-fs (loop4): Test dummy encryption mode enabled [ 167.476343][ T2273] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 167.499565][ T2277] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.578: inline data xattr refers to an external xattr inode [ 167.521012][ T2273] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 167.532358][ T2277] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.578: couldn't read orphan inode 12 (err -117) [ 167.539191][ T2273] System zones: [ 167.557617][ T2277] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue [ 167.559093][ T2273] 0-1, 2-3, 4-36, 98-101, 102-102 [ 167.598541][ T2273] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,commit=0x0000000000000005,norecovery,,errors=continue [ 167.690023][ T1217] sony 0003:1345:3008.001B: hiddev96,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 167.702137][ T1217] sony 0003:1345:3008.001B: failed to claim input [ 167.898381][ T297] usb 3-1: USB disconnect, device number 10 [ 168.023265][ T2298] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 168.041415][ T2298] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 168.050746][ T2298] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 168.066060][ T2298] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e801c09c, mo2=0003] [ 168.074335][ T2298] System zones: 0-1, 3-36 [ 168.092023][ T2298] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,delalloc,resuid=0x0000000000000000,debug,jqfmt=vfsv0,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 169.217406][ T980] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 169.228353][ T2329] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 169.255323][ T2329] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.596: inline data xattr refers to an external xattr inode [ 169.278444][ T2329] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.596: couldn't read orphan inode 12 (err -117) [ 169.315721][ T2329] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,mblk_io_submit,grpjquota=,resuid=0x0000000000000000,jqfmt=vfsv0,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue [ 169.870169][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.890122][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.925293][ T980] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 170.032283][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.172644][ T980] usb 2-1: config 0 descriptor?? [ 170.799766][ T980] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 170.807825][ T980] isku 0003:1E7D:319C.001C: unbalanced collection at end of report description [ 170.837921][ T980] isku 0003:1E7D:319C.001C: parse failed [ 170.843575][ T980] isku: probe of 0003:1E7D:319C.001C failed with error -22 [ 170.917686][ T2357] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 170.957773][ T2357] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 170.967041][ T2357] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 171.036072][ T2357] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e801c09c, mo2=0003] [ 171.054929][ T2357] System zones: 0-1, 3-36 [ 171.062404][ T1217] usb 2-1: USB disconnect, device number 13 [ 171.072896][ T1932] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 171.094504][ T2357] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,delalloc,resuid=0x0000000000000000,debug,jqfmt=vfsv0,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 171.236628][ T2361] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.243591][ T2361] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.251473][ T2361] device bridge_slave_0 entered promiscuous mode [ 171.259195][ T2361] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.266147][ T2361] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.274609][ T2361] device bridge_slave_1 entered promiscuous mode [ 171.300837][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 171.300870][ T24] audit: type=1326 audit(1722252062.590:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2367 comm="syz.4.609" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a4a4f6299 code=0x0 [ 171.480662][ T2361] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.487611][ T2361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.494830][ T2361] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.501741][ T2361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.521109][ T110] device bridge_slave_1 left promiscuous mode [ 171.527156][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.534682][ T1932] usb 1-1: config 0 has an invalid interface number: 204 but max is 1 [ 171.556609][ T1932] usb 1-1: config 0 has no interface number 1 [ 171.575988][ T110] device veth1_macvtap left promiscuous mode [ 171.598457][ T110] device veth0_vlan left promiscuous mode [ 171.777959][ T2379] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 171.803771][ T2379] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.613: inline data xattr refers to an external xattr inode [ 171.847563][ T1932] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 171.946758][ T2379] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.613: couldn't read orphan inode 12 (err -117) [ 171.960007][ T1932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.968889][ T2379] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,mblk_io_submit,grpjquota=,resuid=0x0000000000000000,jqfmt=vfsv0,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue [ 171.995452][ T1932] usb 1-1: Product: syz [ 171.999687][ T1932] usb 1-1: Manufacturer: syz [ 172.004391][ T1932] usb 1-1: SerialNumber: syz [ 172.080456][ T1932] usb 1-1: config 0 descriptor?? [ 172.321034][ T1932] snd-usb-audio: probe of 1-1:0.204 failed with error -22 [ 172.808386][ T1932] usb 1-1: USB disconnect, device number 12 [ 172.863883][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.871208][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.013904][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.023572][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.049076][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.058909][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.067152][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.074071][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.082424][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.092440][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.100766][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.107694][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.138945][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.154425][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.163400][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.173150][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.201904][ T1932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.211008][ T1932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.234739][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.243879][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.363635][ T2361] device veth0_vlan entered promiscuous mode [ 173.380846][ T1932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.388733][ T1932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.413665][ T1932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.426088][ T1932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.448016][ T2361] device veth1_macvtap entered promiscuous mode [ 173.465721][ T1932] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.466968][ T2405] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue [ 173.474377][ T1932] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.495969][ T1932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.514639][ T2408] EXT4-fs (loop4): Test dummy encryption mode enabled [ 173.529896][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.539050][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.549952][ T2408] EXT4-fs (loop4): Test dummy encryption mode enabled [ 173.575117][ T2408] EXT4-fs error (device loop4): __ext4_iget:4958: inode #11: block 1: comm syz.4.623: invalid block [ 173.586856][ T2408] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.623: couldn't read orphan inode 11 (err -117) [ 173.600537][ T2408] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,test_dummy_encryption,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 173.625723][ T1217] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 173.667542][ T2408] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 173.877677][ T1217] usb 1-1: Using ep0 maxpacket: 32 [ 173.928809][ T2419] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.935709][ T2419] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.950024][ T2419] device bridge_slave_0 entered promiscuous mode [ 173.969058][ T2419] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.975962][ T2419] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.009824][ T1217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 174.022144][ T2419] device bridge_slave_1 entered promiscuous mode [ 174.036791][ T1217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 174.059550][ T1217] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 174.068823][ T1217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.078522][ T1217] usb 1-1: config 0 descriptor?? [ 174.097625][ T2400] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 174.098637][ T2432] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 174.139162][ T1217] hub 1-1:0.0: USB hub found [ 174.147507][ T2432] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.628: inline data xattr refers to an external xattr inode [ 174.178015][ T441] device bridge_slave_1 left promiscuous mode [ 174.184990][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.192222][ T2432] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.628: couldn't read orphan inode 12 (err -117) [ 174.204246][ T2432] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,mblk_io_submit,grpjquota=,resuid=0x0000000000000000,jqfmt=vfsv0,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue [ 174.204510][ T441] device bridge_slave_0 left promiscuous mode [ 174.236562][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.246140][ T441] device veth1_macvtap left promiscuous mode [ 174.252710][ T441] device veth0_vlan left promiscuous mode [ 174.377491][ T20] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 174.441085][ T1217] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 174.656960][ T2419] device veth0_vlan entered promiscuous mode [ 174.666747][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.678989][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.687876][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.696507][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.706090][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.717229][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.725585][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.733587][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.734010][ T1217] hid-generic 0003:046D:C314.001D: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.0-1/input0 [ 174.742030][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.761195][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.769760][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.776709][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.789606][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.798308][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.806650][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.813645][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.829407][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.846922][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.858103][ T2419] device veth1_macvtap entered promiscuous mode [ 174.877540][ T20] usb 3-1: config 0 has an invalid interface number: 204 but max is 1 [ 174.880969][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.885570][ T20] usb 3-1: config 0 has no interface number 1 [ 174.910827][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.919706][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.057536][ T20] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 175.066635][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.076053][ T20] usb 3-1: Product: syz [ 175.080456][ T20] usb 3-1: Manufacturer: syz [ 175.084974][ T20] usb 3-1: SerialNumber: syz [ 175.098584][ T20] usb 3-1: config 0 descriptor?? [ 175.141828][ T20] snd-usb-audio: probe of 3-1:0.204 failed with error -22 [ 175.142139][ T24] audit: type=1400 audit(1722252066.430:530): avc: denied { create } for pid=2398 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 175.254425][ T2453] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.257545][ T329] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 175.261383][ T2453] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.276477][ T2453] device bridge_slave_0 entered promiscuous mode [ 175.286918][ T315] usb 1-1: USB disconnect, device number 13 [ 175.297525][ T2453] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.304633][ T2453] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.314047][ T2453] device bridge_slave_1 entered promiscuous mode [ 175.367241][ T1012] usb 3-1: USB disconnect, device number 11 [ 175.490329][ T441] bridge0: port 3(gretap0) entered disabled state [ 175.500433][ T441] device gretap0 left promiscuous mode [ 175.505739][ T441] bridge0: port 3(gretap0) entered disabled state [ 175.507674][ T329] usb 2-1: Using ep0 maxpacket: 8 [ 175.529329][ T2453] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.536277][ T2453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.543480][ T2453] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.550402][ T2453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.607680][ T2466] device pim6reg1 entered promiscuous mode [ 175.624280][ T441] device bridge_slave_1 left promiscuous mode [ 175.628196][ T329] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 175.630443][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.639318][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.656658][ T329] usb 2-1: config 0 descriptor?? [ 175.662150][ T441] device veth1_macvtap left promiscuous mode [ 175.668824][ T441] device veth0_vlan left promiscuous mode [ 175.847634][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.855764][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.868081][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.888191][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.896492][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.903459][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.951573][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.971167][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.978091][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.217562][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.228135][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.241390][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.587628][ T24] audit: type=1400 audit(1722252067.790:531): avc: denied { create } for pid=2472 comm="syz.2.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.748866][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.831968][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.844195][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.906882][ T1932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.920168][ T1932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.944686][ T2453] device veth0_vlan entered promiscuous mode [ 177.953198][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.966411][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.020772][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.034826][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.055723][ T2453] device veth1_macvtap entered promiscuous mode [ 178.089655][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.104743][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.117441][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.135797][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.145333][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.174623][ T2451] erofs: (device loop1): mounted with root inode @ nid 36. [ 178.245259][ T2451] udc-core: couldn't find an available UDC or it's busy [ 178.297443][ T2451] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 178.577603][ T329] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 178.587627][ T297] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 178.595226][ T329] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 178.616820][ T329] asix: probe of 2-1:0.0 failed with error -71 [ 178.644451][ T329] usb 2-1: USB disconnect, device number 14 [ 178.827519][ T297] usb 5-1: Using ep0 maxpacket: 8 [ 178.911474][ T2500] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 179.028746][ T2503] EXT4-fs (loop2): Test dummy encryption mode enabled [ 179.060267][ T2503] EXT4-fs error (device loop2): __ext4_iget:4958: inode #11: block 1: comm syz.2.649: invalid block [ 179.071808][ T2503] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.649: couldn't read orphan inode 11 (err -117) [ 179.084400][ T2503] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 179.127584][ T297] usb 5-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 179.136903][ T24] audit: type=1400 audit(1722252070.410:532): avc: denied { reparent } for pid=2502 comm="syz.2.649" name="file0" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 179.182766][ T297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.191853][ T297] usb 5-1: Product: syz [ 179.195859][ T297] usb 5-1: Manufacturer: syz [ 179.199850][ T2513] EXT4-fs (loop0): Test dummy encryption mode enabled [ 179.206995][ T297] usb 5-1: SerialNumber: syz [ 179.213456][ T297] usb 5-1: config 0 descriptor?? [ 179.217990][ T2513] EXT4-fs error (device loop0): __ext4_iget:4958: inode #11: block 1: comm syz.0.653: invalid block [ 179.268233][ T2513] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.653: couldn't read orphan inode 11 (err -117) [ 179.469711][ T2513] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 179.957442][ T980] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 179.969503][ T297] rndis_host: probe of 5-1:0.0 failed with error -22 [ 179.976253][ T297] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 179.984708][ T297] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 179.991161][ T297] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 180.004747][ T297] usb 5-1: USB disconnect, device number 12 [ 180.023803][ T2513] device syzkaller0 entered promiscuous mode [ 180.239132][ T2529] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 180.319577][ T2532] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.332607][ T2532] EXT4-fs (loop3): 1 truncate cleaned up [ 180.338585][ T2532] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 180.362365][ T2529] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 180.383341][ T2529] EXT4-fs (loop0): Remounting filesystem read-only [ 180.410254][ T2361] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz-executor: invalid indirect mapped block 33554432 (level 0) [ 180.468341][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.729303][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.859119][ T980] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 180.953520][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.227835][ T980] usb 3-1: config 0 descriptor?? [ 181.269830][ T2546] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 181.296966][ T2546] EXT4-fs (loop0): 1 truncate cleaned up [ 181.303668][ T2546] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 181.318690][ T297] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 181.337722][ T1217] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.435906][ T2550] EXT4-fs (loop1): Test dummy encryption mode enabled [ 181.447968][ T2550] EXT4-fs error (device loop1): __ext4_iget:4958: inode #11: block 1: comm syz.1.663: invalid block [ 181.459272][ T2550] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.663: couldn't read orphan inode 11 (err -117) [ 181.471531][ T2550] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 181.577389][ T297] usb 5-1: Using ep0 maxpacket: 8 [ 181.707485][ T297] usb 5-1: config 0 has no interfaces? [ 181.711472][ T980] lg-g15 0003:046D:C222.001E: unknown main item tag 0x0 [ 181.712878][ T297] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 181.728330][ T980] lg-g15 0003:046D:C222.001E: unknown main item tag 0x0 [ 181.738272][ T980] lg-g15 0003:046D:C222.001E: unknown main item tag 0x4 [ 181.738541][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.768801][ T297] usb 5-1: config 0 descriptor?? [ 181.777523][ T980] lg-g15 0003:046D:C222.001E: unknown main item tag 0x0 [ 181.790481][ T980] lg-g15 0003:046D:C222.001E: unknown main item tag 0x2 [ 181.807457][ T980] lg-g15 0003:046D:C222.001E: unknown main item tag 0x0 [ 181.827731][ T980] lg-g15 0003:046D:C222.001E: unknown main item tag 0x0 [ 181.855067][ T980] lg-g15 0003:046D:C222.001E: unknown main item tag 0x0 [ 181.867455][ T980] lg-g15 0003:046D:C222.001E: unknown main item tag 0x0 [ 181.876867][ T980] lg-g15 0003:046D:C222.001E: unknown main item tag 0x4 [ 181.889753][ T980] lg-g15 0003:046D:C222.001E: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 181.925983][ T980] usb 3-1: USB disconnect, device number 12 [ 181.938392][ T2566] netlink: 'syz.0.671': attribute type 4 has an invalid length. [ 181.975427][ T441] device bridge_slave_1 left promiscuous mode [ 181.981852][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.990922][ T441] device bridge_slave_0 left promiscuous mode [ 181.997035][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.004915][ T24] audit: type=1400 audit(1722252073.290:533): avc: denied { unlink } for pid=75 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.039336][ T441] device veth1_macvtap left promiscuous mode [ 182.055458][ T441] device veth0_vlan left promiscuous mode [ 183.101046][ T297] usb 5-1: USB disconnect, device number 13 [ 183.222650][ T2569] netlink: 'syz.0.671': attribute type 4 has an invalid length. [ 183.252360][ T2564] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.263855][ T2564] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.272214][ T2564] device bridge_slave_0 entered promiscuous mode [ 183.290949][ T2564] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.307445][ T2564] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.325759][ T2564] device bridge_slave_1 entered promiscuous mode [ 183.447531][ T1012] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 183.501238][ T2564] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.508205][ T2564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.573642][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.585827][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.594068][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.611163][ T2583] EXT4-fs (loop0): Ignoring removed orlov option [ 183.612138][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.624238][ T2583] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 183.653479][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.654735][ T2583] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 183.672511][ T433] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.688866][ T433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.717403][ T1012] usb 3-1: Using ep0 maxpacket: 32 [ 183.745920][ T24] audit: type=1400 audit(1722252075.030:534): avc: denied { execute } for pid=2582 comm="syz.0.673" path="/33/file1/cgroup.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 183.793140][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.808201][ T433] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.815128][ T433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.856824][ T1012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.872984][ T1012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.894289][ T1012] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 183.914467][ T1012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.941508][ T1012] usb 3-1: config 0 descriptor?? [ 183.952955][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.968807][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.980109][ T1012] hub 3-1:0.0: USB hub found [ 183.986018][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.995288][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.003759][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.012761][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.031308][ T2564] device veth0_vlan entered promiscuous mode [ 184.082568][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.101021][ T2564] device veth1_macvtap entered promiscuous mode [ 184.135174][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.152217][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.267701][ T1012] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 184.489568][ T1217] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.633588][ T2596] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 185.247470][ T1012] usbhid 3-1:0.0: can't add hid device: -71 [ 185.253513][ T1012] usbhid: probe of 3-1:0.0 failed with error -71 [ 185.377930][ T1012] usb 3-1: USB disconnect, device number 13 [ 185.949000][ T2607] EXT4-fs (loop2): orphan cleanup on readonly fs [ 185.955278][ T2607] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #3: comm syz.2.679: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 186.026749][ T2607] EXT4-fs error (device loop2): ext4_quota_enable:6426: comm syz.2.679: Bad quota inode: 3, type: 0 [ 186.074697][ T2607] EXT4-fs warning (device loop2): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 186.097201][ T2607] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 186.104127][ T2607] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 186.158916][ T2610] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 186.203523][ T2607] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 186.218772][ T2607] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #3: comm syz.2.679: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 186.237883][ T2607] EXT4-fs error (device loop2): ext4_quota_enable:6426: comm syz.2.679: Bad quota inode: 3, type: 0 [ 186.249064][ T2607] EXT4-fs warning (device loop2): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 186.292978][ T2599] F2FS-fs (loop3): invalid crc value [ 186.321761][ T2599] F2FS-fs (loop3): Found nat_bits in checkpoint [ 186.374080][ T2610] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 186.390915][ T2610] EXT4-fs (loop0): Remounting filesystem read-only [ 186.397707][ T1217] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 186.677671][ T1217] usb 5-1: Using ep0 maxpacket: 32 [ 186.798189][ T1217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 186.860105][ T1217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 187.045942][ T2599] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 187.076275][ T1217] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 187.274354][ T1217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.728150][ T1217] usb 5-1: config 0 descriptor?? [ 187.747690][ T2613] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.769029][ T1217] hub 5-1:0.0: USB hub found [ 187.773753][ T24] audit: type=1400 audit(1722252079.030:535): avc: denied { read } for pid=2634 comm="syz.1.686" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 187.808214][ T24] audit: type=1400 audit(1722252079.030:536): avc: denied { open } for pid=2634 comm="syz.1.686" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 187.836030][ T24] audit: type=1400 audit(1722252079.030:537): avc: denied { ioctl } for pid=2634 comm="syz.1.686" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 188.339528][ T1217] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 188.383818][ T1932] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.618001][ T980] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 188.756833][ T1217] hid-generic 0003:046D:C314.001F: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.4-1/input0 [ 189.423971][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 189.459175][ T24] audit: type=1400 audit(1722252080.750:538): avc: denied { create } for pid=2664 comm="syz.0.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.496469][ T24] audit: type=1400 audit(1722252080.750:539): avc: denied { bind } for pid=2664 comm="syz.0.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.548088][ T24] audit: type=1400 audit(1722252080.750:540): avc: denied { listen } for pid=2664 comm="syz.0.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.593036][ T24] audit: type=1400 audit(1722252080.750:541): avc: denied { connect } for pid=2664 comm="syz.0.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.677242][ T1217] usb 5-1: USB disconnect, device number 14 [ 189.697487][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 189.708590][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 189.720159][ T980] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 189.732645][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.766165][ T980] usb 2-1: config 0 descriptor?? [ 189.866553][ T2673] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 189.977550][ T2637] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 190.024383][ T980] hub 2-1:0.0: USB hub found [ 190.507310][ T297] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 190.649247][ T980] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 190.737890][ T2675] exfat: Deprecated parameter 'utf8' [ 190.743411][ T2675] exfat: Deprecated parameter 'namecase' [ 190.749616][ T2675] exfat: Deprecated parameter 'utf8' [ 190.791832][ T2675] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 190.811203][ T2670] F2FS-fs (loop0): invalid crc value [ 190.816424][ T2675] syz.3.698[2675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.816550][ T2675] syz.3.698[2675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.839338][ T2670] F2FS-fs (loop0): Found nat_bits in checkpoint [ 190.956266][ T2670] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 190.964008][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.996964][ T980] hid-generic 0003:046D:C314.0020: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.1-1/input0 [ 191.008621][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.044072][ T297] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 191.054640][ T297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.588289][ T24] audit: type=1400 audit(1722252082.880:542): avc: denied { connect } for pid=2682 comm="syz.4.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 192.411862][ T2683] 9pnet: p9_errstr2errno: server reported unknown error œæøýÓ®“Ö¤jê˜ÚUç7µÀúªÅƒ 7 Û’RV [ 192.424725][ T297] usb 3-1: config 0 descriptor?? [ 192.533588][ T1996] attempt to access beyond end of device [ 192.533588][ T1996] loop0: rw=2049, want=45104, limit=40427 [ 192.594464][ T2698] syz.4.703[2698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.594583][ T2698] syz.4.703[2698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.606428][ T297] usbhid 3-1:0.0: can't add hid device: -71 [ 192.623613][ T297] usbhid: probe of 3-1:0.0 failed with error -71 [ 192.644895][ T297] usb 3-1: USB disconnect, device number 14 [ 192.717924][ T298] usb 2-1: USB disconnect, device number 15 [ 192.771798][ T2697] EXT4-fs (loop3): 1 orphan inode deleted [ 192.785962][ T2697] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 192.870320][ T2697] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038 (0x7fffffff) [ 193.588919][ T2715] syz.3.701[2715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.589104][ T2715] syz.3.701[2715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.084951][ T24] audit: type=1400 audit(1722252085.370:543): avc: denied { write } for pid=2718 comm="syz.4.708" path="socket:[26387]" dev="sockfs" ino=26387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.268268][ T24] audit: type=1400 audit(1722252085.560:544): avc: denied { remount } for pid=2723 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 194.417697][ T2731] exfat: Deprecated parameter 'utf8' [ 194.435727][ T2731] exfat: Deprecated parameter 'namecase' [ 194.446126][ T2731] exfat: Deprecated parameter 'utf8' [ 194.469666][ T1932] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 194.504509][ T2731] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 194.773603][ T2738] xt_hashlimit: invalid interval [ 194.878848][ T1932] usb 1-1: Using ep0 maxpacket: 32 [ 195.048286][ T1932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.330955][ T1932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.341077][ T1932] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 195.350143][ T1932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.359553][ T1932] usb 1-1: config 0 descriptor?? [ 195.413361][ T1932] hub 1-1:0.0: USB hub found [ 195.797921][ T1932] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 196.687473][ T1932] usbhid 1-1:0.0: can't add hid device: -71 [ 196.693527][ T1932] usbhid: probe of 1-1:0.0 failed with error -71 [ 196.782096][ T1932] usb 1-1: USB disconnect, device number 14 [ 197.821476][ T2753] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 197.931672][ T2753] exFAT-fs (loop3): hint_cluster is invalid (1) [ 197.943353][ T2753] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 197.962656][ T2753] exFAT-fs (loop3): Filesystem has been set read-only [ 198.013154][ T2753] exFAT-fs (loop3): error, failed to bmap (inode : ffff88812ac85db0 iblock : 9, err : -5) [ 198.043498][ T2772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 198.092967][ T2772] exFAT-fs (loop3): error, failed to bmap (inode : ffff88812ac85db0 iblock : 0, err : -5) [ 198.164965][ T2753] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 198.807517][ T2776] FAT-fs (loop1): Directory bread(block 64) failed [ 198.814570][ T2753] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 198.822435][ T2772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 198.831837][ T2772] exFAT-fs (loop3): error, failed to bmap (inode : ffff88812ac85db0 iblock : 1, err : -5) [ 198.839589][ T2776] FAT-fs (loop1): Directory bread(block 65) failed [ 198.848693][ T2776] FAT-fs (loop1): Directory bread(block 66) failed [ 198.855515][ T2776] FAT-fs (loop1): Directory bread(block 67) failed [ 198.863168][ T2776] FAT-fs (loop1): Directory bread(block 68) failed [ 198.870455][ T2776] FAT-fs (loop1): Directory bread(block 69) failed [ 198.877269][ T2776] FAT-fs (loop1): Directory bread(block 70) failed [ 198.884896][ T2776] FAT-fs (loop1): Directory bread(block 71) failed [ 198.892662][ T2776] FAT-fs (loop1): Directory bread(block 72) failed [ 198.899691][ T2776] FAT-fs (loop1): Directory bread(block 73) failed [ 198.901953][ T2772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 198.947625][ T2772] exFAT-fs (loop3): error, failed to bmap (inode : ffff88812ac85db0 iblock : 2, err : -5) [ 199.233839][ T24] audit: type=1326 audit(1722252090.520:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c96ac299 code=0x7ffc0000 [ 199.307059][ T24] audit: type=1326 audit(1722252090.550:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fd4c96ac299 code=0x7ffc0000 [ 199.441560][ T2778] overlayfs: filesystem on './file1' not supported [ 199.457907][ T24] audit: type=1326 audit(1722252090.550:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c96ac299 code=0x7ffc0000 [ 199.775961][ T2800] xt_hashlimit: invalid interval [ 200.737440][ T1012] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 200.987472][ T1012] usb 4-1: Using ep0 maxpacket: 16 [ 201.008874][ T2809] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 201.039680][ T2809] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 201.067819][ T2809] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #3: comm syz.0.732: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 201.087241][ T2809] EXT4-fs (loop0): no journal found [ 201.092505][ T2809] EXT4-fs (loop0): can't get journal size [ 201.107751][ T1012] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.110036][ T2809] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,journal_dev=0x0000000000000003,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue [ 201.138667][ T1012] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.167486][ T1012] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 201.176432][ T1012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.186959][ T1012] usb 4-1: config 0 descriptor?? [ 201.214233][ T2812] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 201.223063][ T2812] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 201.238595][ T1996] EXT4-fs error (device loop0): __ext4_iget:4958: inode #15: block 1803188595: comm syz-executor: invalid block [ 201.262292][ T1996] EXT4-fs error (device loop0): __ext4_iget:4958: inode #15: block 1803188595: comm syz-executor: invalid block [ 201.514797][ T1012] usb 4-1: USB disconnect, device number 11 [ 201.911735][ T2821] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 201.923651][ T2821] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 201.950265][ T2821] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:403: inode #2: comm syz.1.738: No space for directory leaf checksum. Please run e2fsck -D. [ 201.965575][ T2821] EXT4-fs error (device loop1): htree_dirblock_to_tree:1062: inode #2: comm syz.1.738: Directory block failed checksum [ 202.017512][ T672] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 202.096211][ T110] device bridge_slave_1 left promiscuous mode [ 202.107528][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.125762][ T110] device bridge_slave_0 left promiscuous mode [ 202.131841][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.157492][ T110] device veth1_macvtap left promiscuous mode [ 202.163493][ T110] device veth0_vlan left promiscuous mode [ 202.398498][ T2832] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 202.567923][ T672] usb 3-1: config 0 has an invalid interface number: 182 but max is 1 [ 202.599782][ T672] usb 3-1: config 0 has an invalid interface number: 9 but max is 1 [ 202.711044][ T672] usb 3-1: config 0 has no interface number 0 [ 202.786572][ T672] usb 3-1: config 0 has no interface number 1 [ 202.856950][ T672] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 203.077413][ T672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.111401][ T672] usb 3-1: config 0 descriptor?? [ 203.159679][ T672] snd-usb-audio: probe of 3-1:0.182 failed with error -2 [ 203.191293][ T2814] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 203.197909][ T2814] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 203.210372][ T2814] F2FS-fs (loop4): invalid crc value [ 203.232159][ T2819] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.247353][ T2819] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.265503][ T2819] device bridge_slave_0 entered promiscuous mode [ 203.275676][ T2814] F2FS-fs (loop4): Found nat_bits in checkpoint [ 203.286185][ T2819] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.293457][ T2819] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.328950][ T2819] device bridge_slave_1 entered promiscuous mode [ 203.356868][ T672] usb 3-1: USB disconnect, device number 15 [ 203.427924][ T2844] erofs: Unknown parameter 'ÿÿÿÿ)|' [ 203.481164][ T2814] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 203.488197][ T2814] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 203.701756][ T2453] attempt to access beyond end of device [ 203.701756][ T2453] loop4: rw=2049, want=45104, limit=40427 [ 203.790169][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.798539][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.586615][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.595642][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.604391][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.611360][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.636368][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.660858][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.670272][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.677179][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.684745][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.718465][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.726298][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.747986][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.756830][ T2857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 204.807783][ T24] audit: type=1400 audit(1722252096.060:548): avc: denied { mount } for pid=2850 comm="syz.1.745" name="/" dev="ramfs" ino=25560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 204.885838][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.900783][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.908972][ T2862] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 204.919485][ T24] audit: type=1400 audit(1722252096.060:549): avc: denied { remount } for pid=2850 comm="syz.1.745" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 204.924095][ T2819] device veth0_vlan entered promiscuous mode [ 204.950001][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.959649][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.977610][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.985207][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.993972][ T2862] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 204.998126][ T2819] device veth1_macvtap entered promiscuous mode [ 205.011193][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.020257][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.028643][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.080606][ T2862] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:403: inode #2: comm syz.2.748: No space for directory leaf checksum. Please run e2fsck -D. [ 205.096143][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.118525][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.147420][ T2862] EXT4-fs error (device loop2): htree_dirblock_to_tree:1062: inode #2: comm syz.2.748: Directory block failed checksum [ 205.160536][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.188296][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.354936][ T2868] FAT-fs (loop0): Directory bread(block 64) failed [ 205.445206][ T2868] FAT-fs (loop0): Directory bread(block 65) failed [ 205.452260][ T2868] FAT-fs (loop0): Directory bread(block 66) failed [ 205.468455][ T2868] FAT-fs (loop0): Directory bread(block 67) failed [ 205.485148][ T2868] FAT-fs (loop0): Directory bread(block 68) failed [ 205.495193][ T2868] FAT-fs (loop0): Directory bread(block 69) failed [ 205.514098][ T2868] FAT-fs (loop0): Directory bread(block 70) failed [ 205.524187][ T2868] FAT-fs (loop0): Directory bread(block 71) failed [ 205.531320][ T2868] FAT-fs (loop0): Directory bread(block 72) failed [ 205.547455][ T2868] FAT-fs (loop0): Directory bread(block 73) failed [ 205.579068][ T2864] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 205.586756][ T2864] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 205.607734][ T2864] F2FS-fs (loop3): invalid crc value [ 205.977471][ T2864] F2FS-fs (loop3): Found nat_bits in checkpoint [ 206.525090][ T2877] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 206.618781][ T2877] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038 (0x7fffffff) [ 206.739169][ T2864] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 206.746065][ T2864] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 206.953762][ T2892] input: syz1 as /devices/virtual/input/input11 [ 207.042213][ T24] audit: type=1400 audit(1722252098.330:550): avc: denied { read } for pid=78 comm="acpid" name="event3" dev="devtmpfs" ino=717 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.562612][ T24] audit: type=1400 audit(1722252098.350:551): avc: denied { open } for pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=717 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.589449][ T24] audit: type=1400 audit(1722252098.350:552): avc: denied { ioctl } for pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=717 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.764144][ T24] audit: type=1400 audit(1722252099.040:553): avc: denied { unmount } for pid=2419 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 208.023509][ T2904] attempt to access beyond end of device [ 208.023509][ T2904] loop3: rw=2049, want=53656, limit=40427 [ 208.588333][ T2564] attempt to access beyond end of device [ 208.588333][ T2564] loop3: rw=2049, want=45104, limit=40427 [ 208.638420][ T24] audit: type=1400 audit(1722252099.930:554): avc: denied { read } for pid=2908 comm="syz.1.758" name="loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 208.647725][ T1012] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 208.736315][ T24] audit: type=1400 audit(1722252099.960:555): avc: denied { open } for pid=2908 comm="syz.1.758" path="/dev/loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 208.757036][ T2912] input: syz0 as /devices/virtual/input/input12 [ 208.817514][ T24] audit: type=1400 audit(1722252099.960:556): avc: denied { ioctl } for pid=2908 comm="syz.1.758" path="/dev/loop-control" dev="devtmpfs" ino=110 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 209.077497][ T1012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.097393][ T1012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.107013][ T1012] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 209.157432][ T1012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.193909][ T1012] usb 5-1: config 0 descriptor?? [ 210.870502][ T1012] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 210.992164][ T1012] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 210.999817][ T1012] lg-g15 0003:046D:C222.0021: unknown main item tag 0x4 [ 211.006653][ T1012] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 211.013856][ T1012] lg-g15 0003:046D:C222.0021: unknown main item tag 0x2 [ 211.040896][ T24] audit: type=1400 audit(1722252102.330:557): avc: denied { write } for pid=2934 comm="syz.1.764" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 211.065684][ T1012] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 211.079904][ T1012] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 211.110442][ T1012] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 211.125538][ T1012] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 211.146137][ T1012] lg-g15 0003:046D:C222.0021: unknown main item tag 0x4 [ 211.164007][ T1012] lg-g15 0003:046D:C222.0021: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 211.195214][ T1012] usb 5-1: USB disconnect, device number 15 [ 212.060063][ T2959] erofs: (device loop0): mounted with root inode @ nid 36. [ 212.387537][ T2963] input: syz1 as /devices/virtual/input/input13 [ 212.548192][ T7] device bridge_slave_1 left promiscuous mode [ 212.817792][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.937739][ T7] device bridge_slave_0 left promiscuous mode [ 212.944073][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.988755][ T7] device veth1_macvtap left promiscuous mode [ 212.994675][ T7] device veth0_vlan left promiscuous mode [ 214.283993][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.297360][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.305807][ T2949] device bridge_slave_0 entered promiscuous mode [ 214.326106][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.333515][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.348076][ T2949] device bridge_slave_1 entered promiscuous mode [ 215.698852][ T2992] tipc: Started in network mode [ 215.703613][ T2992] tipc: Own node identity d678fd4e1bc8, cluster identity 4711 [ 215.711067][ T2992] tipc: Enabled bearer , priority 0 [ 216.289118][ T2980] tipc: Disabling bearer [ 216.447895][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.455513][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.485347][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.494466][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.503711][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.510619][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.518323][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.526794][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.543696][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.550684][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.558761][ T2994] EXT4-fs (loop4): Test dummy encryption mode enabled [ 216.577965][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.585759][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.595417][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.618317][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.629878][ T2994] EXT4-fs error (device loop4): __ext4_iget:4958: inode #11: block 1: comm syz.4.783: invalid block [ 216.638294][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.651082][ T2994] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.783: couldn't read orphan inode 11 (err -117) [ 216.667963][ T3002] EXT4-fs (loop2): Test dummy encryption mode enabled [ 216.676077][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.685883][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.706013][ T3002] EXT4-fs error (device loop2): __ext4_iget:4958: inode #11: block 1: comm syz.2.786: invalid block [ 216.715335][ T2994] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 216.717784][ T3002] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.786: couldn't read orphan inode 11 (err -117) [ 216.750721][ T2949] device veth0_vlan entered promiscuous mode [ 216.760417][ T3002] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 216.816115][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.827966][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.856685][ T2949] device veth1_macvtap entered promiscuous mode [ 216.864587][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.872566][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.881655][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.891009][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.899561][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.917602][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.925948][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.935612][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.944903][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.055159][ T24] audit: type=1400 audit(1722252108.340:558): avc: denied { name_bind } for pid=3010 comm="syz.4.789" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 217.193339][ T24] audit: type=1400 audit(1722252108.480:559): avc: denied { rename } for pid=3012 comm="syz.3.769" name="bus" dev="loop3" ino=1048654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.288648][ T24] audit: type=1400 audit(1722252108.480:560): avc: denied { reparent } for pid=3012 comm="syz.3.769" name="file0" dev="loop3" ino=1048654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.438663][ T2999] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (67108865, 24) [ 217.457064][ T2999] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 217.676952][ T24] audit: type=1400 audit(1722252108.960:561): avc: denied { mount } for pid=3017 comm="syz.2.790" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 217.711950][ T2999] F2FS-fs (loop0): invalid crc value [ 217.721211][ T2999] F2FS-fs (loop0): Found nat_bits in checkpoint [ 217.767808][ T3009] F2FS-fs (loop1): invalid crc value [ 217.822371][ T3031] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 217.969376][ T3009] F2FS-fs (loop1): Found nat_bits in checkpoint [ 218.655906][ T24] audit: type=1400 audit(1722252109.940:562): avc: denied { unmount } for pid=635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 218.676279][ T3031] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 218.710024][ T3031] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 218.758793][ T3031] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 218.767989][ T2999] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 218.778134][ T2999] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 218.817702][ T3031] [EXT4 FS bs=4096, gc=2, bpg=33, ipg=32, mo=e040e01c, mo2=0000] [ 218.830370][ T3027] attempt to access beyond end of device [ 218.830370][ T3027] loop0: rw=2049, want=45104, limit=40427 [ 218.846860][ T3031] EXT4-fs (loop4): failed to initialize system zone (-117) [ 218.873889][ T3031] EXT4-fs (loop4): mount failed [ 218.897980][ T24] audit: type=1326 audit(1722252110.190:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3046 comm="syz.3.797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe238ac299 code=0x0 [ 218.930700][ T3009] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 218.957489][ T3009] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 220.102871][ T3057] EXT4-fs (loop3): Test dummy encryption mode enabled [ 220.150253][ T3057] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 220.208419][ T3057] EXT4-fs (loop3): 1 truncate cleaned up [ 220.259739][ T3057] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue [ 220.381844][ T3069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.804'. [ 220.403259][ T3053] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 220.425541][ T3053] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 220.447929][ T3053] F2FS-fs (loop4): invalid crc value [ 220.518077][ T3072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 220.527817][ T3072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 220.545353][ T3053] F2FS-fs (loop4): Found nat_bits in checkpoint [ 220.654728][ T3053] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 220.661861][ T3053] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 221.399476][ T3088] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3088 comm=syz.4.799 [ 223.450888][ T3116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.816'. [ 223.575378][ T3118] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.817: bad orphan inode 8192 [ 223.585967][ T3118] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 223.712595][ T3111] netlink: 'syz.1.814': attribute type 4 has an invalid length. [ 223.776439][ T3111] netlink: 'syz.1.814': attribute type 4 has an invalid length. [ 224.718411][ T3142] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 224.729092][ T3142] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 224.738801][ T3142] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 224.778036][ T3142] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 224.796059][ T3142] [EXT4 FS bs=4096, gc=2, bpg=33, ipg=32, mo=e040e01c, mo2=0000] [ 224.837797][ T3142] EXT4-fs (loop4): failed to initialize system zone (-117) [ 224.870619][ T3142] EXT4-fs (loop4): mount failed [ 226.074609][ T3161] EXT4-fs (loop2): 1 orphan inode deleted [ 226.108558][ T3161] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 226.131134][ T3161] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038 (0x7fffffff) [ 227.103231][ T3170] device syzkaller0 entered promiscuous mode [ 227.123863][ T2419] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 227.157476][ T2419] FAT-fs (loop1): Filesystem has been set read-only [ 227.177680][ T2419] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 227.327758][ T3182] syz.2.829[3182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.327933][ T3182] syz.2.829[3182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.967574][ T3179] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.834: bad orphan inode 8192 [ 227.989281][ T3179] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 229.050619][ T3190] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,usrjquota=,lazytime,noblock_validity,data_err=abort,data_err=abort,,errors=continue [ 229.308983][ T24] audit: type=1400 audit(1722252120.600:564): avc: denied { setattr } for pid=3189 comm="syz.4.837" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.483700][ T24] audit: type=1400 audit(1722252120.760:565): avc: denied { bind } for pid=3203 comm="syz.3.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 230.077754][ T297] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 230.314447][ T3207] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.331616][ T3207] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.352860][ T3207] device bridge_slave_0 entered promiscuous mode [ 230.363518][ T3207] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.399467][ T3207] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.412857][ T3220] EXT4-fs (loop3): 1 orphan inode deleted [ 230.418704][ T3220] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 230.439639][ T3207] device bridge_slave_1 entered promiscuous mode [ 230.478174][ T3220] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038 (0x7fffffff) [ 230.497508][ T297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.517815][ T297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 230.537683][ T297] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 230.563213][ T297] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 230.602931][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.657528][ T3211] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 230.678704][ T297] hub 5-1:1.0: bad descriptor, ignoring hub [ 230.684534][ T297] hub: probe of 5-1:1.0 failed with error -5 [ 230.707720][ T297] cdc_wdm 5-1:1.0: skipping garbage [ 230.767573][ T297] cdc_wdm 5-1:1.0: skipping garbage [ 230.789701][ T297] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 230.859730][ T3207] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.866659][ T3207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.873905][ T3207] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.880827][ T3207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.941768][ T3228] syz.3.845[3228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.941888][ T3228] syz.3.845[3228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.972677][ T672] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.015137][ T672] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.734228][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.746464][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.771866][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.781385][ T980] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.788315][ T980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.796523][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.806128][ T980] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.813069][ T980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.837417][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.845707][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.854706][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.863903][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.904233][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.913456][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.930848][ T3207] device veth0_vlan entered promiscuous mode [ 231.938245][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.946364][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.966391][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.974082][ T329] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 231.999576][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.017814][ T672] usb 5-1: USB disconnect, device number 16 [ 232.023875][ T3207] device veth1_macvtap entered promiscuous mode [ 232.031886][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.043319][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.051671][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 232.078801][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.087234][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.101464][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.112300][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.208395][ T3244] EXT4-fs (loop3): Ignoring removed orlov option [ 232.215836][ T3244] EXT4-fs (loop3): Test dummy encryption mode enabled [ 232.227303][ T3244] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 232.242246][ T3244] System zones: 1-12 [ 232.248020][ T3244] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.852: casefold flag without casefold feature [ 232.260910][ T3244] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.852: missing EA_INODE flag [ 232.273483][ T3244] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.852: error while reading EA inode 12 err=-117 [ 232.286557][ T3244] EXT4-fs (loop3): 1 orphan inode deleted [ 232.293120][ T3244] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 232.357574][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.375365][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.386903][ T329] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 232.396234][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.405948][ T329] usb 1-1: config 0 descriptor?? [ 232.557391][ T1217] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 233.407473][ T1217] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 233.417847][ T1217] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 233.426650][ T1217] usb 2-1: config 0 has no interface number 1 [ 233.616037][ T1217] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 233.629481][ T1217] usb 2-1: config 0 interface 6 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 233.687249][ T3254] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 233.964876][ T3261] udc-core: couldn't find an available UDC or it's busy [ 233.972109][ T3261] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 234.029064][ T1217] usb 2-1: New USB device found, idVendor=0f19, idProduct=0105, bcdDevice= 1.00 [ 234.110177][ T1217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.200728][ T1217] usb 2-1: Product: syz [ 234.248251][ T1217] usb 2-1: Manufacturer: syz [ 234.288821][ T1217] usb 2-1: SerialNumber: syz [ 234.384857][ T1217] usb 2-1: config 0 descriptor?? [ 234.498706][ T1217] usb-storage 2-1:0.0: USB Mass Storage device detected [ 234.538953][ T1217] usb-storage 2-1:0.0: Quirks match for vid 0f19 pid 0105: 20 [ 234.576466][ T3271] SELinux: Context system_u:object_r:inetd_log_t:s0 is not valid (left unmapped). [ 234.590148][ T1217] usb-storage 2-1:0.6: USB Mass Storage device detected [ 234.615796][ T1217] usb-storage 2-1:0.6: Quirks match for vid 0f19 pid 0105: 20 [ 234.729622][ T1217] usb 2-1: USB disconnect, device number 16 [ 234.957881][ T298] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 235.191081][ T20] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 235.862048][ T635] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 235.869675][ T635] FAT-fs (loop2): Filesystem has been set read-only [ 235.876443][ T635] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 235.897686][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.910942][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.921363][ T20] usb 5-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 235.929524][ T3290] EXT4-fs (loop1): Test dummy encryption mode enabled [ 235.930790][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.943299][ T3290] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 235.952544][ T329] usbhid 1-1:0.0: can't add hid device: -71 [ 235.953817][ T20] usb 5-1: config 0 descriptor?? [ 235.961565][ T329] usbhid: probe of 1-1:0.0 failed with error -71 [ 235.978672][ T329] usb 1-1: USB disconnect, device number 15 [ 235.987514][ T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.998521][ T3290] EXT4-fs (loop1): 1 truncate cleaned up [ 236.004025][ T3290] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue [ 236.035921][ T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.046534][ T298] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.084533][ T298] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 236.103591][ T298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.128814][ T298] usb 4-1: config 0 descriptor?? [ 236.424900][ T3295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 236.482403][ T3296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 237.218447][ T298] acrux 0003:1A34:0802.0022: item fetching failed at offset 3/5 [ 237.226571][ T298] acrux 0003:1A34:0802.0022: parse failed [ 237.232935][ T298] acrux: probe of 0003:1A34:0802.0022 failed with error -22 [ 237.271694][ T298] usb 4-1: USB disconnect, device number 12 [ 237.634901][ T110] device bridge_slave_1 left promiscuous mode [ 237.641181][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.649684][ T110] device bridge_slave_0 left promiscuous mode [ 237.655952][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.696491][ T110] device veth1_macvtap left promiscuous mode [ 237.707354][ T110] device veth0_vlan left promiscuous mode [ 238.541951][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 238.548508][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 238.610535][ T20] usb 5-1: USB disconnect, device number 17 [ 238.740893][ T110] ================================================================== [ 238.748854][ T110] BUG: KASAN: null-ptr-deref in up_write+0x2e/0x120 [ 238.755261][ T110] Write of size 8 at addr 0000000000000070 by task kworker/u4:2/110 [ 238.763062][ T110] [ 238.765258][ T110] CPU: 0 PID: 110 Comm: kworker/u4:2 Tainted: G W 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 238.776434][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 238.786407][ T110] Workqueue: netns cleanup_net [ 238.791038][ T110] Call Trace: [ 238.794171][ T110] dump_stack_lvl+0x1e2/0x24b [ 238.798679][ T110] ? panic+0x812/0x812 [ 238.802611][ T110] ? bfq_pos_tree_add_move+0x43b/0x43b [ 238.807888][ T110] kasan_report+0x167/0x1c0 [ 238.812227][ T110] ? up_write+0x2e/0x120 [ 238.816305][ T110] ? up_write+0x2e/0x120 [ 238.820391][ T110] kasan_check_range+0x293/0x2a0 [ 238.825169][ T110] __kasan_check_write+0x14/0x20 [ 238.829936][ T110] up_write+0x2e/0x120 [ 238.833839][ T110] __kernfs_remove+0x4b2/0x9d0 [ 238.838441][ T110] ? slab_free_freelist_hook+0xc0/0x190 [ 238.843828][ T110] ? kernfs_iop_rename+0x550/0x550 [ 238.848773][ T110] ? __kasan_check_write+0x14/0x20 [ 238.853754][ T110] ? down_write+0xd7/0x150 [ 238.857976][ T110] ? kernfs_find_ns+0x457/0x4a0 [ 238.862712][ T110] kernfs_remove_by_name_ns+0xec/0x160 [ 238.867952][ T110] sysfs_remove_group+0x10c/0x2a0 [ 238.872819][ T110] sysfs_remove_groups+0x56/0xb0 [ 238.877586][ T110] device_remove_attrs+0x113/0x130 [ 238.882522][ T110] device_del+0x683/0xf00 [ 238.886706][ T110] ? kill_device+0xd0/0xd0 [ 238.890960][ T110] ? __kasan_check_write+0x14/0x20 [ 238.895903][ T110] ? mutex_unlock+0x1c/0x40 [ 238.900245][ T110] ? pm_runtime_set_memalloc_noio+0x21f/0x270 [ 238.906160][ T110] netdev_unregister_kobject+0x18a/0x250 [ 238.911626][ T110] unregister_netdevice_many+0x1276/0x17d0 [ 238.917272][ T110] ? alloc_netdev_mqs+0xcd0/0xcd0 [ 238.922129][ T110] ? unregister_netdevice_queue+0x258/0x350 [ 238.927849][ T110] ? list_netdevice+0x4c0/0x4c0 [ 238.932537][ T110] default_device_exit_batch+0x38a/0x3f0 [ 238.938003][ T110] ? default_device_exit+0x390/0x390 [ 238.943128][ T110] ? wait_woken+0x250/0x250 [ 238.947478][ T110] ? rtnl_unlock+0xe/0x10 [ 238.951639][ T110] ? cfg802154_pernet_exit+0xc7/0xe0 [ 238.956760][ T110] ? default_device_exit+0x390/0x390 [ 238.961875][ T110] cleanup_net+0x6e9/0xcb0 [ 238.966123][ T110] ? __switch_to_asm+0x34/0x60 [ 238.970724][ T110] ? ops_init+0x4a0/0x4a0 [ 238.974878][ T110] ? read_word_at_a_time+0x12/0x20 [ 238.979829][ T110] ? strscpy+0x9c/0x260 [ 238.983826][ T110] process_one_work+0x6dc/0xbd0 [ 238.988521][ T110] worker_thread+0xaea/0x1510 [ 238.993031][ T110] ? _raw_spin_lock+0x1b0/0x1b0 [ 238.997729][ T110] kthread+0x34b/0x3d0 [ 239.001618][ T110] ? worker_clr_flags+0x180/0x180 [ 239.006584][ T110] ? kthread_blkcg+0xd0/0xd0 [ 239.010994][ T110] ret_from_fork+0x1f/0x30 [ 239.015238][ T110] ================================================================== [ 239.023125][ T110] Disabling lock debugging due to kernel taint [ 239.045404][ T110] general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN [ 239.056978][ T110] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 239.065252][ T110] CPU: 1 PID: 110 Comm: kworker/u4:2 Tainted: G B W 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 239.076421][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 239.086409][ T110] Workqueue: netns cleanup_net [ 239.091017][ T110] RIP: 0010:up_write+0x35/0x120 [ 239.095782][ T110] Code: 49 89 ff 49 bc 00 00 00 00 00 fc ff df 0f 1f 44 00 00 49 8d 5f 08 48 89 df be 08 00 00 00 e8 72 d1 57 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 fc cf 57 00 49 c7 47 08 00 00 00 [ 239.115327][ T110] RSP: 0018:ffffc90000ba7610 EFLAGS: 00010202 [ 239.121218][ T110] RAX: 000000000000000e RBX: 0000000000000070 RCX: ffff88810d5013c0 [ 239.129029][ T110] RDX: 0000000000000000 RSI: 0000000000000282 RDI: 00000000ffffffff [ 239.136847][ T110] RBP: ffffc90000ba7630 R08: ffffffff813e275b R09: 0000000000000003 [ 239.144745][ T110] R10: fffffbfff0e10c48 R11: dffffc0000000001 R12: dffffc0000000000 [ 239.152552][ T110] R13: dffffc0000000000 R14: ffff888107fed004 R15: 0000000000000068 [ 239.160369][ T110] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 239.169128][ T110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.175551][ T110] CR2: 00007fd4c9806ab8 CR3: 000000010c879000 CR4: 00000000003526a0 [ 239.183368][ T110] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.191177][ T110] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 239.198973][ T110] Call Trace: [ 239.202138][ T110] ? __die_body+0x62/0xb0 [ 239.206300][ T110] ? die_addr+0x9f/0xd0 [ 239.210283][ T110] ? exc_general_protection+0x3ff/0x490 [ 239.215866][ T110] ? asm_exc_general_protection+0x1e/0x30 [ 239.221401][ T110] ? check_panic_on_warn+0x5b/0xb0 [ 239.226356][ T110] ? up_write+0x35/0x120 [ 239.230425][ T110] __kernfs_remove+0x4b2/0x9d0 [ 239.235021][ T110] ? slab_free_freelist_hook+0xc0/0x190 [ 239.240494][ T110] ? kernfs_iop_rename+0x550/0x550 [ 239.245435][ T110] ? __kasan_check_write+0x14/0x20 [ 239.250391][ T110] ? down_write+0xd7/0x150 [ 239.254633][ T110] ? kernfs_find_ns+0x457/0x4a0 [ 239.259336][ T110] kernfs_remove_by_name_ns+0xec/0x160 [ 239.264626][ T110] sysfs_remove_group+0x10c/0x2a0 [ 239.269487][ T110] sysfs_remove_groups+0x56/0xb0 [ 239.274254][ T110] device_remove_attrs+0x113/0x130 [ 239.279205][ T110] device_del+0x683/0xf00 [ 239.283375][ T110] ? kill_device+0xd0/0xd0 [ 239.287719][ T110] ? __kasan_check_write+0x14/0x20 [ 239.292669][ T110] ? mutex_unlock+0x1c/0x40 [ 239.297010][ T110] ? pm_runtime_set_memalloc_noio+0x21f/0x270 [ 239.302918][ T110] netdev_unregister_kobject+0x18a/0x250 [ 239.308387][ T110] unregister_netdevice_many+0x1276/0x17d0 [ 239.314032][ T110] ? alloc_netdev_mqs+0xcd0/0xcd0 [ 239.318883][ T110] ? unregister_netdevice_queue+0x258/0x350 [ 239.324612][ T110] ? list_netdevice+0x4c0/0x4c0 [ 239.329310][ T110] default_device_exit_batch+0x38a/0x3f0 [ 239.334950][ T110] ? default_device_exit+0x390/0x390 [ 239.340057][ T110] ? wait_woken+0x250/0x250 [ 239.344412][ T110] ? rtnl_unlock+0xe/0x10 [ 239.348566][ T110] ? cfg802154_pernet_exit+0xc7/0xe0 [ 239.353684][ T110] ? default_device_exit+0x390/0x390 [ 239.358807][ T110] cleanup_net+0x6e9/0xcb0 [ 239.363064][ T110] ? __switch_to_asm+0x34/0x60 [ 239.367751][ T110] ? ops_init+0x4a0/0x4a0 [ 239.371914][ T110] ? read_word_at_a_time+0x12/0x20 [ 239.376860][ T110] ? strscpy+0x9c/0x260 [ 239.380857][ T110] process_one_work+0x6dc/0xbd0 [ 239.385553][ T110] worker_thread+0xaea/0x1510 [ 239.390060][ T110] ? _raw_spin_lock+0x1b0/0x1b0 [ 239.394755][ T110] kthread+0x34b/0x3d0 [ 239.398645][ T110] ? worker_clr_flags+0x180/0x180 [ 239.403510][ T110] ? kthread_blkcg+0xd0/0xd0 [ 239.407931][ T110] ret_from_fork+0x1f/0x30 [ 239.412166][ T110] Modules linked in: [ 239.426726][ T110] ---[ end trace 886394d48d77c520 ]--- [ 239.432803][ T110] RIP: 0010:up_write+0x35/0x120 [ 239.438471][ T110] Code: 49 89 ff 49 bc 00 00 00 00 00 fc ff df 0f 1f 44 00 00 49 8d 5f 08 48 89 df be 08 00 00 00 e8 72 d1 57 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 fc cf 57 00 49 c7 47 08 00 00 00 [ 239.458414][ T110] RSP: 0018:ffffc90000ba7610 EFLAGS: 00010202 [ 239.464409][ T110] RAX: 000000000000000e RBX: 0000000000000070 RCX: ffff88810d5013c0 [ 239.482790][ T110] RDX: 0000000000000000 RSI: 0000000000000282 RDI: 00000000ffffffff [ 239.487465][ T1217] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 239.491123][ T110] RBP: ffffc90000ba7630 R08: ffffffff813e275b R09: 0000000000000003 [ 239.506047][ T110] R10: fffffbfff0e10c48 R11: dffffc0000000001 R12: dffffc0000000000 [ 239.514199][ T110] R13: dffffc0000000000 R14: ffff888107fed004 R15: 0000000000000068 [ 239.522141][ T110] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 239.530987][ T110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.537456][ T110] CR2: 00007efe1a0e9000 CR3: 000000011d3c1000 CR4: 00000000003526b0 [ 239.545177][ T110] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.553381][ T110] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 239.561226][ T110] Kernel panic - not syncing: Fatal exception [ 239.567335][ T110] Kernel Offset: disabled [ 239.571493][ T110] Rebooting in 86400 seconds..