last executing test programs: 3m51.17938507s ago: executing program 3 (id=1477): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000004c0)={{0x3, 0x0, 0x8000000, 0x2, 0xd8f}}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x2, 0xa, 0x0, 0x80, 0x84}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000004, 0x6, 0x0, 0x79ffdea1, 0x8000}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0xc, 0xf5, 0x5, 0x40, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x768, 0x3, 0x100}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x48010000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012cbd7000fddbdf25180000002c00018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="03000000", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x20000011) 3m51.12740754s ago: executing program 3 (id=1478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000150a010400000000000000c1acd09948f8dad6b8f4137ca9ec85d7d3ed444c96d5a823d8"], 0x38}, 0x1, 0x0, 0x0, 0x440c1}, 0x20080040) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) r4 = getpid() creat(&(0x7f0000000040)='./file0\x00', 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES16=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="7bfe41cd920283b200a0abc59f464ba99035075d58e71fbedfbde133693173885db657268cc479beb4f529aafe665b0383b09376badf019fdde6eb2c9eb3bb2156ab7ae57df09f13a13aab6b129671", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x130, 0x0, 0x218, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xe7}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xab}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m49.8234601s ago: executing program 3 (id=1489): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000180), 0x1, 0x43c, &(0x7f0000000280)="$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") r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3m44.369460751s ago: executing program 3 (id=1512): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x238, 0x0, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'vxcan1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x11a) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0x28011, r2, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) renameat2(r3, 0x0, r2, &(0x7f0000000800)='./bus\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 3m43.068654241s ago: executing program 3 (id=1514): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) gettid() r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') pread64(r7, &(0x7f0000000800)=""/254, 0xfe, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) sendmsg$nl_route(r2, 0x0, 0x4008040) 3m42.665457037s ago: executing program 3 (id=1520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000180), 0x1, 0x43c, &(0x7f0000000280)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$inet6_udp_int(r7, 0x11, 0x67, 0x0, 0x0) close(r5) 3m42.42803s ago: executing program 32 (id=1520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000180), 0x1, 0x43c, &(0x7f0000000280)="$eJzs28tvG0UYAPBv7SR9k1CVR9MCgYKIeCRNWkoPXEAgcQAJCQ7lGJK0CnUb1ASJVhEEhMoRVeKOOCLxF3CCCwJOSFzhjipVKJcWTkZr7ya2Y7tJ6tSh/v2kbWd2x5n5vDv2zI43gJ41kv6TROyPiD8iYrCarS8wUv3v1srS9D8rS9NJlMtv/51Uyt1cWZrOi+av25dn+iIKnydxpEm9C5evnJ8qlWYvZfnxxQsfjC9cvvL83IWpc7PnZi9Onj598sTEi6cmX+hInGlcN4c/nj96+PV3r705febae798l+TxN8TRISPtDj5VLne4uu46UJNO+rrYEDalWO2m0V/p/4NRjLWTNxivfdbVxgHbqlwulx9sfXi5DNzDkuh2C4DuyL/o0/lvvt2loceOcOPl6gQojftWtlWP9EUhK9PfML/tpJGIOLP879fpFttzHwIAoM4P6fjnuWbjv0LU3he6L1tDGYqI+yPiYESciohDEfFARKXsQxHx8Cbrb1wkWT/+KVzfUmAblI7/XsrWturHf/noL4aKWe5AJf7+5OxcafZ49p6MRv+uND/Rpo4fX/39y1bHasd/6ZbWn48Fs3Zc79tV/5qZqcWpO4m51o1PI4b7msWfrK4EJBFxOCKGt1jH3DPfHm117Pbxt9GBdabyNxFPV8//cjTEn0var0+O747S7PHx/KpY79ffrr7Vqv47ir8D0vO/t+n1vxr/UFK7Xruw+Tqu/vlFyznNVq//geSdun0fTS0uXpqIGEjeqDa6dv9kQ7nJtfJp/KPHsvgH6vv/wVh7J45ERHoRPxIRj0bEY1nbH4+IJyLiWJv4f37lyfe3Fv/uNn+1M9L4ZzZ1/tcSA9G4p3mieP6n7+sqHdpo/JGd/5OV1Gi2ZyOffxtp19auZgAAAPj/KUTE/kgKY6vpQmFsrPob/kOxt1CaX1h89uz8hxdnqs8IDEV/Ib/TNVhzP3Qim9bn+cmG/InsvvFXxT2V/Nj0fGmm28FDj9vXov+n/ip2u3XAtvO8FvQu/R96l/4PvUv/h55U+ZVfk/6/pwttAbqg2ff/J11oB3D3NfR/y37QQ8z/oXfp/9C79H/oSQt74vYPyUtIrEtEYUc04x5MxI5oRrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrjvwAAAP//qSDljg==") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$inet6_udp_int(r7, 0x11, 0x67, 0x0, 0x0) close(r5) 9.504841889s ago: executing program 1 (id=2896): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10) 5.003598947s ago: executing program 1 (id=2899): getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f00000001c0)='GPL\x00', 0xec08, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x7ffd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000700)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001140040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r6 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r7}}) close(r1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008100)={0x2020}, 0xfffffddd) 4.10009406s ago: executing program 1 (id=2930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r1}, 0x10) setregid(0x0, 0x0) 4.09995896s ago: executing program 1 (id=2931): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 4.09956536s ago: executing program 1 (id=2932): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) 2.600029902s ago: executing program 4 (id=2938): ioperm(0x80, 0x4, 0xf) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) 2.340183996s ago: executing program 2 (id=2944): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x4, 0x5eb, &(0x7f0000000c00)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, 0x0, 0x0) 2.295814657s ago: executing program 2 (id=2945): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_bridge\x00', 'nicvf0\x00'}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) capset(0x0, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x7}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x7c, 0x4) 2.263967857s ago: executing program 5 (id=2946): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,u']) 2.159328899s ago: executing program 5 (id=2947): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000007111aa00000000008510000002000000850000000700000095000000000000009500a5050000000034ec15a08b04c90a4a9738d7b953690016ff04f872ac7dfb1c5e3c1f16010601bc879a03ad40b71472b5804cc2df7226d01961d5c798743d24091728a44951f1c0991b58d596b6977972f9b13cb5cdcab870673cdf13529970ba187eb76292fc217009fa278451f4cdef2e56d505938a13dd1af9a30361a3808557fb1d65398cf0578b7e1ebce30f4d2331831b4a64276876953f19ff4fa60b7cd4f125bac71ebbfc39f49937ff8483a6baef86ed7ae81cac8bf216a0be1f604f63167f5c06495011743d455773e8e8"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.730394945s ago: executing program 4 (id=2948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 1.718458405s ago: executing program 4 (id=2949): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x2, 0x1, 0x804, 0x4, 0xf, 0x120000, 0xff, 0x0, 0x8, 0x8000000000000004, 0xfffffffffffffffa, 0x9, 0x101, 0x6], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.663332946s ago: executing program 4 (id=2950): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) 1.662945406s ago: executing program 4 (id=2951): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0xfe, 0x555e, &(0x7f0000005f80)="$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") r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x38, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.486158618s ago: executing program 1 (id=2953): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x7f}}}}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000500000000000000000f4e55c1"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4002004c4, 0x1000], 0xeeee8000, 0x1144}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.447160659s ago: executing program 2 (id=2954): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r1}, 0x10) setregid(0x0, 0x0) 1.39133579s ago: executing program 2 (id=2955): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.37869373s ago: executing program 2 (id=2956): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 712.29542ms ago: executing program 5 (id=2957): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_LK(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, {{0x1, 0xe, 0x2}}}, 0x49) chdir(&(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) 623.382992ms ago: executing program 4 (id=2958): ioperm(0x80, 0x4, 0xf) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) 597.761542ms ago: executing program 0 (id=2959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 591.957382ms ago: executing program 5 (id=2960): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r3, &(0x7f0000000000)=ANY=[], 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) unshare(0x40000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fb1ef000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000010000e1250000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 485.139123ms ago: executing program 0 (id=2961): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) 484.943203ms ago: executing program 5 (id=2962): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000100) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 470.429734ms ago: executing program 5 (id=2963): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) syz_open_dev$evdev(&(0x7f0000000740), 0x0, 0xab42) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 384.017515ms ago: executing program 2 (id=2964): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_bridge\x00', 'nicvf0\x00'}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) capset(0x0, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x7}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x7c, 0x4) 329.679706ms ago: executing program 0 (id=2965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r1}, 0x10) setregid(0x0, 0x0) 329.403016ms ago: executing program 0 (id=2966): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x0, {0x4000000000003, 0x0, 0x0, {0x1, 0x9, 0x1, 0x800000004, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8001, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002800)="d1f89c14e7f8640b43b1f1d1e00b2b0b3146d223d281c321953af4ade40d696d07f4b7d2ed1c1fd5691291056351901df48500519139568c88f49bb32801c2e3e2932895f1eb24b30efbab27313a3acab179fd6ce1f7150b0f0aae8cde4dd46b4f63cd60f647ea9bcf83f107e981a050f61f5d1bb5c7883f93269bba25e4122796c0f88ab27d913586d055f8c977ffcb05c85210f93cbad91499fedb2ab95e06bf009e54b422f66cef043560f4d77ae5c083cc67fcb0d3f10699aac8cceaf6d3b8f32e15555924edbc42b4ca3d2f4a92f5d30c18176c3abd17db4de2ef74472ffb637dd07460aeb7c882811c089217d88cbb5eec41d2be903e1c65cad2ad742f9ba8b512adab575f89d539492034ddfe4fd28205c8f27c52f0f631703d384634bfcad149ea9e842125062ac67006ca474be31f708b4f4f1e0c97a4eb2f26b671e172e251e8a6e9e1510bb74931aaf6b6ff84f8aefd63591f18f2ae8028985d78fcc5ed2d57bf595d3068e904387eeddd19bd359721a432bed0bff033cbca6acfddb6529fb11290bf1563b45034bd9b6c331091efef04303ca9942fcb64e56f3ff74d610e14c8f8a87e41582aebb272e5d6e945fdc7095bd181b93f13ddbdc18545f9cfc4db7f134c9ffa6add6727ab8755a06dca23d24a67658fda84321bb97fc475ace3b9912dad73f0ee6c8b2d6d58d7328ca63d1aeceb22a419fe4ec4c3b943051e9d276c559c33e6a45a97813bfcf80c7d79ebe04b1827878c4c8c2da2d598f9f3e444ae82f142716827dddcd94f8997d88a30be2a76432641125e28d5a0896b3e040a8b6805abc98da90844261468826b89f6cbac8d7b5eb6cd8a23f7c7ae9b99dfa6616f9dd10ac48e8c53a38ebfcee8c0ae1be1ee982515ce12a1ebf5d2d19022b4407a9bd062c453845ce75f54dd07e3d8079e19b3b116dc51f7a07d005ba682da13b73e3854bb60059fb021b8f4b9430629d408b32ccd3678bf1dc149a3493c44b2a52a5572c128957e0db8a4a214848b64bea6733bb48fc17a4e42474e2b1f47b507d038bb87a3fc32e7bf471685a61f736a414772cc1825e9342c58768640c83486dbf058050dd6c8a9843c106d1a4efa5e5b36deae71448e55f4ef2721d2d210ce075bdc52c97bd6c097a9a4120a507f6c99cd9054579c250cd5b207684deadf75f2f8c54349a57500625be7577fd6c81ca72111935f577c74c2bd1e9419344e2a3563b5a7d6026722469a30a061d123b45f93027a01c7d38863589118d25e333c07f5c3eb85d4dde937d8f1421b72035f8733754ef4793acdc8d1362ef08ac1e9f0246bfb478647ada002f809a3e63433d031e6d5e4f86218ace6a6221103608705719c3106b4659c377f7e3b6ae1777075ea45a68df2004deb6ef742c5971c23d409278be94c5de68153d93d1a2378f1b1656786ec896b72de0da8259a6f181be8829f9cb7cb98ce0b169e734e4a240508952f6ce3ca984eef7e0cd549996147fe56a0bb1598f015ab955df145a51d783397366084e53455840d5688cb9b7d2cdf8abbfcdf850a7de4073eada567d6ca989611c4910e692e44677a857eec2b654f8dc66b2be192786dce3b9780f9806652bdef013304a43dba3f8d15e5105414f6d1fb2a57dea02211fa311b489088a9802e36d649ada97d72a216f54ca6da090a51c01f5638a04f364a3cbf24bb374f644fda38856a7e0f5c3c9cd7b00555d105daf57561379cf1d77bce66d12de44f202a866a43a7a05a6e0910a1f0ab5b1341d8ae992ae9d95fa2c876db1bcd3635d7851f03dde1eddae6dcf95b182edab72a0521c88c8c3a8c2ad3c6ec2cc44321ce1550d51476e95a18ae5fdab801ef4f5a7a56580261d850f392929061ae5808ba390b2f7d8fe7325df9c07c39faadeeb0ee1ed95db7ccf49c9b93fca83e06be745156d422c8b936d65b8e7e76d9eeb2bbf19c1f9a59b8ee6b55d594d4794a869b2d3b37b0b936866894f00e6a90c788c22e0fb87d0ac53ce75e519765647deee2862552c77ceb75d419627e0627067ba24571807cbfae0bd959fa95cb14c2812a1ce41f76d2ad620c55df55f473e56cb219f7b13bed8cc4a98dddfda9d3b9b5650754f73c34bf00496993a1c4056aeb44e4160c3e2090d733604b2b13f40ae346b726a31365b7a230d8f66665dcb726594280678a258f8ddddfe69d424d62abe910db05c0efa5e773d0f6d8ef8c4c49926b46568a7a1321d996eacabb2f716539a020e34a02afc3bfead458287dd22c11e1c5f57cda7668853637dba0b2eb5e5318750b63c829ab0145c02d6bc05aef4113ee0ea0ba97c44d74cedcc89adff648eb5d7fe932a7a76c772b1e2e36c148dd3be951cfa0cfe11bc58635b38708fa1ff88f949eb15f4a4a3de71c33e2915c799d8204d7d1f9cf7c13c608e6ddf29e12b409028ee5edf37353df7982f67a120ff1871001094b1a3148ed5f4f75d9372aa21b2bb6e02b470336a2c20efee8af866032acd6dc56d1fa7a84dc314cafea1a7bba5fbae89e037a4a5597d2eefd153406d67ddbb3b4eeed6d981b229c2c1b76347b05d20835ecc979b697a2981f6785df853d3d5ce07c624136c805d4dc6c7419d68afe2ad4822aea38da761742b33de8394bcd2462518b35c6ef265eb2a9b130e5a3d669b55d457f92500a7b69156475e001989d55547fc831edf2afe2290591e902858914af73ad4e87ddb8ea3a719f435fe1c2839a39fe088ccc863e7c82e96b66e1b6d32ddbdc42bf2f6076b9e93ed2ec4b6ba6fce5dd3a8f5b3aa105aecf72a5cc9108d02a0b923de2d490ad90aed3a45c46d4594948e7b3f3cc7d153f4b2837ca378fb4af215657f016fd9c66395b98357c1d12a655ce07268beccb35acb3f928c1522bea5df98a0337c751308bfb361e68f3775c75e020ac9570283119264d4f8916c143ccc28d8e0709df356de6b6f35fccde79a677606b5b4d846fdad7c271fc5c2ae5f5e2fbcd6fbf21508a2615ab8f0208e276164bce80fb886b648b4cb085c7922a829c2bccdd850cec329870c866f7923c2c1cd59d6c2653263f7aa1f13d84c82575a021793ef875954ce8737c98abee465e780ab64f1d23da92828e62908543850e5730099eb34f5e47dee740581f596413b8e2711bbfc9d25e4a35b57416a741a60ba650b52ae2189cdd125f64565544f9e75bd8c2cbd898ed2dbdd704ee40d1746715eab4155a51289cf7d89a19ab7a355609dff8111c94f6cdf94a94c667508d7201eab7e86569b8b08bca2291cf3fb166df68f6d6da05398e8a1c0c5c66ca3cee621727a77f19b92927569ba44709302c1102683f338150989d971ea6d0151b69865e540ad4e5a186ad9fc8ce57a56ad114487c5ad99c0beae0fd49927c52380de839cc952f8e41e167006573b4ffc39ebec8f9f9fb4168386a78fe52c00cf3c3be6dbcd4ab32ac7cb8fdd1bae70a5c3da6f555aa6c8e6bd7e69e511bd5d87e39ee21f9035b0b14dd50b3c4e211794bfd7e8fbc48658044eab550f6b564d8f663c25ddb30233fb260e2d30bc9956f7293fd5532df2f74019f639c7313ca029280c513c2fc3c77dc4d0e7f5a9f273fda00349c28319743bc8f7eaeacc7f487bcf5866a55b2fa5b66e31964f090ac448a1ccd3b8cbc9735db5d7d1dd2f2bcdad1ee48b4f8a36688d8ddead1f166a5afb2efe12e943ce6ca41f1f45fe650536860881c28ff04a66ddce9cd19b4304c26e3238f114a1f4080999aaf6ff1f4b8b59ef5d54c10cd8a6598420949f1c0eff13259ba7da9f4c749b58f31f01627b780c2502cc6d1d82f68271e2bc945ddcb6784532e1aba414385096eeeb45afca0ddec570b16b476fbf7b4818275a05afe4beec9086e1c816ebf96608ed57a570c931577ca5b14c9359718b4b31b4789f291f5cb012f832e5763ba53521f58d3ee0a10930d3b4ea7747c5c751cfb476159287a9d371530e5d7cffa6ab09f049d2435960b0ad34f7890df22a3cfd6ce052b08409e67a1291f8459a59b988d7b97d2534f306d83656fd43313eebce1732837b6c22dc60a80d03c54b695b4efbf31381916c7da9644ef8e0f6739c98e7892ca89bf696715391c989c3bd53362e01b81d998e50e46fab088f9312465d200c034691b7e5dcb22ead3c3f3225f16a5588b2be09470e225290d8073dce5cd955d31e7acd452950505597f01c4b54a6f16f2e7d00ab182258f26e40bb70db783b2a10aae019f87708e1306e1957fcc081dac3659d603d4044c10b0a1fe61f4482e56d031d43fc355100a9dcf822db16d0895e554b439bd032e6103df725123da3fdd4a48b68863e6bb36e05343136e171d39d86168be30188bf1ebac4a1d748115167033149ac61bb4f8d4cad7f4c68c32de226b03fb42d24d5e37ba886fa357100644e64d869f6395e3d6d3768a30f53e2aca3688408807bd4818a2c5150f8ee770121a4a6402c7dc334a9ee5e876566d19867e45d4bdc73477ff7f543a23f38d5f0bf666219b0391e66457af4238c5bd9a05586333556f8972aca1def4507c4b073d1bc1c3051f0bf34f71673ccc1de9c69170c9fc5299ac733569cfde6a7bbb3cd60b601cfca16510bf7fbb26ffab3b674000844daf55fbf4ab48eade708cf70fdf901454acc8cc95c63fd2ee771bffaf19205e9a119b847931bcfb4c738e39701a3882cef4ff47b46b72ce26ac207a1ccaa253cd3ddae2b2eb61d5b9b3c8156928a169d7dbb2874b884c3b2097cb8ea92ce7fe70af90514c11887df33c4f7ec3d3ee6c327e7129b0188b0ca8c777451b17d8f489d547d711404bef72d1914f66a5676e9d716ede8c4282526419adb31d071d241db47a58bb55ee6ebcb67c82765a25e5e6fedc4c8d1d9b17e2b5bac5e0af3c63ea870ad8c5f9521390b660fc735d331e6eb326abde284256cdb381b4651d05f55807f4ad1b5b883bf6b55ee87285fad8de366f3248ae0b9c32bf85fc95d5bc19a716ac2a5f41e4e58d26bfdfa582be5d506f9929bfe7cea70184c81722ef7300f779d5d64c08a225a083d44ce75ced73f3a016f5047af67245bc8a81214024e905f383252cc0228085aa5fc184cbcb41db3eccede89480e0a1c1d1754cc3ffa53edc27c337ec86ae2f68c6225edb0027c1c5bf9aee1b94b62f6144e4631887272a36add32d908add308207559064cd61576f917db864845e5e89efcb27c80d259eb6fd5fca398da0c7e62fc423511bb8eb3969732c862de33448e95aa5e15d2028b84b3b8348a50abb39c5c10ac7fdc2034d1ceeae9870dc4486f48ac6aae573a775716ec380ed57665b9bf1c77f6869f720e428f8b94170b14c23786ff1cacf95a66ae631c70245bf264ce5078c3bddb4aaa7928eb6f1261d52e45ae5fde6f1b3bff90cd560c6c2f77ecfcf553db137051685c925be70def2be6c9bdd5825eac58d4c892a6d4ad5dcc078c6582ca140e5a75993e5ab7b487f31e5c601844f18f13039c099317f5e512eb9e054dcd8535106a9bd8977bf74254b68753b7f3a9b385d4a38ccaa17e029bd9ab4ff9b9b561b2a7e613ea05eb18a50fc231f32b79b9f32514469193a3d12269f58f3c932e501513e48e81774ad389275d9f00b4f8c677b8bb584b503201f83c7ad2e934e909f9ae1fc540f544dd2327fe1d8e3bb86984a252e2ffa88e2aed6d65a302d1883e51654fdb046d35270130fb9f8e4a4861d7278a07ee627fe272dcf99d294d7b1ce72f2f804cddfe4fa7aeb2c9543ef2665bf826c8ce0ca82dc7d4e57b7181b55a5d96ad83417b79376793235ed5a320a3ffac3a025aefa669450a6df20d830042034c0953836097c9461bc0d9c1446485692d1b9d5c991086f3f118a49bfe2a0888a5af8a868d880e31946dbd0c7ddcfcd27dcf5c62c9c5ff8fa9750d129f32e3c4f524eb3c31d5c9cb33fbcf52384a04a9f4faa216020e45be91181efeb7393d96b1f3ad8e9fadcffe49bec1bf36e70c2291475356ec5a416feb5d3b4f1331052271679d1186b338163682ac5b6bb79c64d6d0f8ddfec84d0d9870f45a64413f529c8dd93b358e66c9da2fd233e53b73ae2761f363ee69a38a0d7320a149c90c086e6a426abca5c461088747a2fb5006919ad7640aad79b1ec03cf6f49206f37382ad3105fcbd0e08d00815029d8cc3ca16472e58226f1def116bfab456c32a2a2323bb5a661eacb3b7c915d1eaa8c5aa8b1bf25c3a7bc9a2e047c499d8f2fbf2fe25606fc7f0ae5a539af68830b1955f82962f596e2ad0feb3e99b1982ffe3e553f102b4360b8e1d659575a8f713b8bb88d97dbcfd98f91c147a97e896646a47a43334569da8a01541b012063e0465c4122cb96b57484b0ab8c5f0c8f346c0766be69decf4e3ebef7f74f153ef8c6b6e9c5fe224e8f995f11c1867c5600cd7a345afacafec9076d4ccfca741fd41e445476d31f7cdf06b0d0cf596c755235408782a5e37abeb1f2dad79c83e59a1040c4b3b6a5a2acce9df0ebdb607c9c0549a4b16028595f7a9cd9da115dab0189f3d98b0dc2b8ddf6be4de2b38421a2071d91f14f8752c74df31fecb64de59dce09da2c3a1a2826446d982509baaa89b76379d8320bf3c1f76448e0ddc0889fe57ba756ab1403949cd2ca9ab520fa485576eca5acb471002a14a31e8d7f54c8c3edda8f416b0ae9d9fdfc445b54ed8fb34ed7c1d11b3c57a2c5ad92217ab2fdebafc195d09fee7a518e027ccf9d2e8de8cef1e0ad52144d82b65519495b8a5c314e85361adca8953dce587cf461a461dc9bbc0eb13a54144964930d80d8b4a015676f3efd10ccfd0ec5fe64deb93b5901b506581461bf2aaf04fa9f8118936c5e67e1cee60ccfc4f011ee2812eb9716af42b22c40d83c55d4e4c4838826cc34387a2085aa3e17219c78255ace7bb1fc30ec80676449084744c0887dc4e7696d25a544f3e4b365cc6ad800931d5787be99d678347ea4d6cdeab5662f6cbcb5fa80590e513c4ca96d73d378085026e0e7c71d968a670aefd48519e35beaeef9c67506db6f9b3edb62ef1b3b52b9c2db876b76101644e7dcf5a5056a8d916a0f69ea5bf096e7a4c2f8f1d0da29dbcef9d2ad1b82179ccd0ef95006b7a1d542a847e3e0f864d63434c15d6de4fecad18b788a867da5515e3d51871417bfd783d2dffd852953ea7113d3a61aac3c7c1a4efb449faa928456eb570e62d0ff9542a971b542d7c1fed9d633eb4a81499c105d0f73c5165badb54b0e83f8192d3d51d46ddd9908b04e9f57d5a4e6b65affee3799ae7cc51b4098f71e8ee947ffdeee4fd03095536376e1281ef8158fd1da4a39aebdad37fad75f6217bf45bfad16f2f1a80f5e8a3eea1141a56beb91319fe948bb44350a6e79959c140a5dad9955fb287aeba0a8a45d1fd8d692d30c96d01c9100e417082ae6edf62965fef7e190af60a99145925a307d1e11534d2a64484be3c6cd642432a2db66ba6d3ab1b7ea645edf4e54623d2ba0619bcc2a917cc2df8b0dbed096951947445ed5f08c626e1f9a5f566515bf106c48174f73587314b513962ed556fa7f16d8c6a953bcdda72f083a9b16357b3262c13cd500dfa09cc3d09240a7338514031768ea3053caa5166c8e4e090b3128464a88ccdc751d8ee1b3b1098997c9eaa2b3a13a47e43723a49e5d011dabb22c0d9605e48d5e26b90a47519536fd77c5260bc713e2b510fa6da698069f6c1df7a72462399d7dd288be19a0eab18adb072677268a306f19685c2d813564bab4ac90b7389c2fb87c0517e769577c081ced55572da71b40d18e4979b6b6290afcde4caa610166920549286dfa80197a10ff074b08d6b96c97110e36742fdbc5607f4c48ea9dd53301eecb5c25fce4eec9381b84e6b5af767c5bcca600149a3021c3f4aa237a0143363549a705c5768b5aa6ed51fd1ca9f0f9dd242f0df21f7c3eaf321fca97837d989ca101b5462d2dc248316c21339cb2b4e3451bb483390c09c958d474c6df2f2eac208ef704cbae5c9f6597c19ce48c4c9161c1b14622ed824b0e8669cbe6746051729fd2fcabb020190764a468c58ce369528bfca46cf8ec51ab69e711a53c4121476d2a5d2ceb19c332a5a86a52cabb246d2be739f361d97a6efc2c1d408b6f079ff5cbfdfa7ffb5da3af4611e42f876a44f8180ebadf8efe05645f3326fd1b1bb7f82753ee13e25c406469a6b103b9083ac06d590a48543240bca6e467eafc7069c97aa93a3a4ef61b6043383b6e990d174637d695893bd910f217c9c2465688eccd8a171cb5270fca2e002261f2e3e595f3484b67c0bbd7b50ea53a470e3935c0eafc6226521f0a15fc7cf5494b67fcfb705019a86a5972a9dd285bc50985947e42ca8519de25510db7ba6553419d4e368fe56c2a7acec8e77cd734f557a0f1b507e0869d2d5c9913c52fcd78b42b8f59ad3ae92226e292ea4439b5486629b739f4cca3d7f21cef79045427656fd1679dc5ab23686e13500dcb6284df60599ce81e2570d1cd5c7c2e0026640177bf1395fcf6e999acac08e3a993c3700ad891b1a68d5efc32a4b4f9cc8841e837e778c2500eb6cffc1b9970b2adf724839c7711ebbb2ee3e55f7aa97746d7538153589deafeef63eee6dfbd43fc72e0b763a0e4709da3deb26691303e99230a93c490029383b322099363ba3b2f76b4773c0c43907361b578cfb312cde55ea6de2f477c351ac82786d15b52f08a42385b2a3349116d34f8719264f79082d7c24165423a8e6764c53b922a0b3121cbb88976e6f53c455be77521bc1ad4997135ff24c520b2fa0002cbcc8eb8ee5cb33b1140dc811ee36816f47f23ff0b77d6680d597ec2fe77f5bfe1bb75c3eddb2356940c01e694da66d1c4fd78f7df5857111c01bb5e9954585e54086af287dc0ce861d921b378e9a2a9c9c5a37d9812595063643b1dae4afa57d884501ee0de2d7e39692ed5ecbd2ba1d9bf4e3f291cf0b1dfb809a2f915ae90bd5fbe76d5848752c298f34e69d8e95f6f3c8a8ef365d0927811b8a90c8f58836da07c058f71b01025af8c9829f761d71465d3d813e1e08a7d8f66dcb0f98daa19bb106fb9b25d49a35e8900e6de4502668cecbb9638c5b0d158317970e802be345ab3570f6a452e18da421fb4957429ec4b6c481b5393be9c7f1cea3d77ad1c935ce6cab01ed08f7f24e5b01d25105211d5e28b25d3a5fea30e3c4cd1289bc2606728f127574cdfed91d7c19d7381c3e532c92d7e532e74f3d24281cbf0f4e1908dd4f5cf145daeb21db6b34f2fe175aafd1c20224544c113f132cefe620bd99c5caff7b74d6acf8a1aae2fda5212ec64c80d647308439d5f90f6f481101599b539cd09a1bdfc510b6c9027c879f76bfd397dce9d3985ff01e62ee0455372960b68202412c6d5eb7b09c36f265b7b8b3822aa489dc169f8079e71dc96e0b75de2ade686761b067416e4915287dfdd6309946487a68115ee9d0bec73ffc63223e9463a30b819297d24824cb20724c6b524d58af1e03264e8e2b8dce59377c78dbd5ff5977782181aeaa8c2bd6d9f3d25ec566fa4a01eb5aeaeb6912acad55ca7336d28e305781bf128d6575dba16110d64c55ec9840f299e353fcc5628f248bd660f4dfa5f3a1bb7fbdac78ec727e87a134c98a98f405a4cd3773e79bd4f22bd3239a5fa8cd5806601e07241b25678f048b05bab6f8da56818f8dd9c97d001f4a7ea8beb3fa65ed7a951878bcef7e1da873e21ac6208cf0852c6cb297c10c84b74582bf59aaa11e7d8239997c9e7fd3c5bbee5b8466c17394fa61771aa10a3541f88419b16bb4fa36126745e99c292911d30ed0fa366dcd62c10879a6826609ab2b80b3a0c2de3d877805a564ce925916063c53d9698bb918eed2b49315fb83465a0db1a63a0528a887f5106dd054edbf381280989581c859a517573a6eb4946e0fcc61956fd5868fd37c788090fd7c3341028cf1bcb38ed595a4fd845ccd45558282c6e23d92d4268875f80ebad1c24f8d247595de2f8b83708b504f674447bc6fa1748b86fdfc971c9275baedda1348324c4dbde22d423744e2d537a4e28d95771b18302bc5d92f9e0ba6b1029a3e73761080a4e6e1b52a9ebe3538cb3e982586c23f0b0cfa78126198a0a496d96734880885e4aef7b35d90af287f9d5b18998fba69cf5a13b9153edc5f1c3cd0d181c1cecb4936a489f34682b056eaf5c57caea4a9ebd9fc7d842bc3850046f925dc430769863922ce5bea6709fa9bf7f21098097d7f47c74269b524c4194bceae0571fe968ebdda85a28fa5be7f794632189da179e248fdc237a3ba3fd53845e42db45747caa6cebf574e9abb75e3b33c1096e40e0e845385d6f961c56fd1c71f92ae31a0c9088b2100b457cf2f8b33ac984fe79ceeb65fde350f9c6229433aa20d226aeb7677e0e7e8002e3e220fb74d4a1bc07ca43fa23fcf9cbabe7799b5b8daeb63b35923c4a92d2c636d36d58e719e6855b57445a26072d716aba7b653dfcdee115b3310b0c8af8649337597c1ac8bcee8b0533cb458d165b4ca4ee72c60a49f4a7061aab09449a318a6dc1d5b1a4f2a7f82c5af241e1f0cbe3e9fd5079e385ec86bc978ca82aaf1de5b470dcbb06b5f0360142857a0519583e3a77a6fbdadfff48de440bb5c3dcb2c3e6624800fa7898ab00242b7109809d58e5aa8a25705266d9bb04f165f843f1c61c23b41f010ad67f80aa8e455385cf3ff89073dc9434ce9be78993d6c73a8adf4db6b540e7a9f60d8dbcf3133a8f5c5c59f8378f2e5aad07f31707fb9834c66d6d0ded8a8b2d984ff5b4bfe70bb6479aecf208beb8f4da7b23957ce77d574993e1a44de0b3a5cb245f0ebf8ea32a22472270798defec3deeb94a4d025d1fe276612ebfe0f4e6e639de1300d47e542fb032150ab0aded71ba693817feb9cb43beb6f3074c2d7bfb77b9b2783e0335449c9a9775ccf9060ab2468a6644ebddd41f70add6d2d24fb9dd377c4f0dce3439283f22075ff3973e4e70e0bdcb53001be03800392084d6768c3e8f7fad09b192a497a36f602d07655d3e6a7ccab561ab92c79506e1e06aad05975accc9b8b48c41da8bc611d331717ee312d77403f9f66ee9a81fa4e624cca690540dca722986dc740a919597f7836ee95b554d3c34db3443ee5b6908f8623b2c82f32b65c3e8c3c0e15c3065d09214ea6290b55bf5520ee92825d9c82745bb5368ddda47036390910e26470b96cfd7c4e7b0df89f897153fd5ab4302de65fcda1f48206346d6051a94d8e0c32b959d914c218f54813811d13d99ef6259f54c0e635c04f875772b38524e94fae3a73109f60d0b00c96c1809f37e8fb37e61620690b07d726d388e9ae5dbc3a1c3557d1e4288da0622d77081ab4cd00ce22243824c363ad1be5cb0ceaad6336a797d8ca6d988c4373b3c00667d651452d50f81a830ac6ebb71559590181eea67dce1599d13f2e778d69a40c2b736dcc7c36782c1788cdc8d5c3820d68093ea84d56daaeaac19c19724ed7d3ebc1b8c1e3092839314dc6eddd99dc0eede13dbcb7fd22d401df8eb7f679a04f785006d3b4c4012bf78b7e43b1b355a9f6d04ca0e86c32d44f73fa514d1e2b147464", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x100000001, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 329.168686ms ago: executing program 0 (id=2967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCX_GETX(r1, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 0s ago: executing program 0 (id=2968): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000007111aa00000000008510000002000000850000000700000095000000000000009500a5050000000034ec15a08b04c90a4a9738d7b953690016ff04f872ac7dfb1c5e3c1f16010601bc879a03ad40b71472b5804cc2df7226d01961d5c798743d24091728a44951f1c0991b58d596b6977972f9b13cb5cdcab870673cdf13529970ba187eb76292fc217009fa278451f4cdef2e56d505938a13dd1af9a30361a3808557fb1d65398cf0578b7e1ebce30f4d2331831b4a64276876953f19ff4fa60b7cd4f125bac71ebbfc39f49937ff8483a6baef86ed7ae81cac8bf216a0be1f604f63167f5c06495011743d455773e8e8"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) kernel console output (not intermixed with test programs): s (loop4): Unrecognized mount option "backgr" or missing value [ 440.680800][ T6156] loop4: detected capacity change from 0 to 40427 [ 440.743841][ T6180] FAULT_INJECTION: forcing a failure. [ 440.743841][ T6180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.294803][ T6180] CPU: 1 PID: 6180 Comm: syz.5.1875 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 441.309329][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 441.321126][ T6180] Call Trace: [ 441.324844][ T6180] [ 441.328549][ T6180] __dump_stack+0x21/0x30 [ 441.333368][ T6180] dump_stack_lvl+0xee/0x150 [ 441.339949][ T6180] ? show_regs_print_info+0x20/0x20 [ 441.345600][ T6180] dump_stack+0x15/0x20 [ 441.351293][ T6180] should_fail+0x3c1/0x510 [ 441.356606][ T6180] should_fail_usercopy+0x1a/0x20 [ 441.363295][ T6180] _copy_to_user+0x20/0x90 [ 441.368225][ T6180] simple_read_from_buffer+0xe9/0x160 [ 441.375809][ T6180] proc_fail_nth_read+0x19a/0x210 [ 441.382282][ T6180] ? proc_fault_inject_write+0x2f0/0x2f0 [ 441.389274][ T6180] ? security_file_permission+0x83/0xa0 [ 441.395197][ T6180] ? proc_fault_inject_write+0x2f0/0x2f0 [ 441.402008][ T6180] vfs_read+0x282/0xbe0 [ 441.407319][ T6180] ? kernel_read+0x1f0/0x1f0 [ 441.412312][ T6180] ? __kasan_check_write+0x14/0x20 [ 441.418108][ T6180] ? mutex_lock+0x95/0x1a0 [ 441.422768][ T6180] ? wait_for_completion_killable_timeout+0x10/0x10 [ 441.430958][ T6180] ? __fget_files+0x2c4/0x320 [ 441.436049][ T6180] ? __fdget_pos+0x2d2/0x380 [ 441.441876][ T6180] ? ksys_read+0x71/0x240 [ 441.447149][ T6180] ksys_read+0x140/0x240 [ 441.451963][ T6180] ? vfs_write+0xf70/0xf70 [ 441.457274][ T6180] ? debug_smp_processor_id+0x17/0x20 [ 441.462976][ T6180] __x64_sys_read+0x7b/0x90 [ 441.468198][ T6180] x64_sys_call+0x96d/0x9a0 [ 441.473109][ T6180] do_syscall_64+0x4c/0xa0 [ 441.478604][ T6180] ? clear_bhb_loop+0x50/0xa0 [ 441.484440][ T6180] ? clear_bhb_loop+0x50/0xa0 [ 441.489512][ T6180] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 441.496588][ T6180] RIP: 0033:0x7fbcd0d3f33c [ 441.501664][ T6180] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 441.523683][ T6180] RSP: 002b:00007fbccf3a9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 441.533974][ T6180] RAX: ffffffffffffffda RBX: 00007fbcd0f67fa0 RCX: 00007fbcd0d3f33c [ 441.543375][ T6180] RDX: 000000000000000f RSI: 00007fbccf3a90a0 RDI: 000000000000000d [ 441.552846][ T6180] RBP: 00007fbccf3a9090 R08: 0000000000000000 R09: 0000000000000000 [ 441.562525][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.572780][ T6180] R13: 0000000000000000 R14: 00007fbcd0f67fa0 R15: 00007fffc3f4b0c8 [ 441.581811][ T6180] [ 441.726496][ T6156] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 441.804543][ T6187] loop5: detected capacity change from 0 to 512 [ 441.834167][ T6187] EXT4-fs (loop5): error: could not find journal device path: error -2 [ 443.426614][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 443.426751][ T30] audit: type=1400 audit(1749380830.092:1963): avc: denied { block_suspend } for pid=6208 comm="syz.2.1886" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 443.478249][ T30] audit: type=1326 audit(1749380830.132:1964): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6200 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6ca104d929 code=0x7ffc0000 [ 443.758763][ T1511] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 443.858814][ T663] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 444.118627][ T663] usb 6-1: Using ep0 maxpacket: 16 [ 444.149859][ T1511] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.162634][ T1511] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.208903][ T314] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 444.259408][ T1511] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 444.278392][ T1511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 444.298142][ T1511] usb 5-1: SerialNumber: syz [ 444.300134][ T663] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 444.315727][ T663] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 30 [ 444.332092][ T663] usb 6-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 444.342324][ T663] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.359181][ T663] usb 6-1: config 0 descriptor?? [ 444.508876][ T314] usb 1-1: Using ep0 maxpacket: 32 [ 444.559617][ T6216] xt_hashlimit: max too large, truncated to 1048576 [ 444.609358][ T1511] usb 5-1: 0:2 : does not exist [ 444.615395][ T1511] usb 5-1: unit 5 not found! [ 444.638687][ T1511] usb 5-1: USB disconnect, device number 27 [ 444.709129][ T314] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 444.734012][ T314] usb 1-1: config 1 interface 0 has no altsetting 0 [ 444.841157][ T663] wacom 0003:056A:5002.0034: hidraw0: USB HID v20.00 Device [HID 056a:5002] on usb-dummy_hcd.5-1/input0 [ 444.908870][ T314] usb 1-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.40 [ 444.926075][ T314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.950925][ T314] usb 1-1: Product: Ї [ 444.973985][ T314] usb 1-1: Manufacturer: 왑 [ 444.985438][ T314] usb 1-1: SerialNumber: 㰊 [ 445.057506][ T663] usb 6-1: USB disconnect, device number 10 [ 445.226313][ T6244] loop4: detected capacity change from 0 to 512 [ 445.309530][ T6244] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 445.397835][ T6244] EXT4-fs (loop4): 1 truncate cleaned up [ 445.404996][ T6244] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 446.065902][ T30] audit: type=1400 audit(1749380832.732:1965): avc: denied { create } for pid=6253 comm="syz.1.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 446.068316][ T6255] loop5: detected capacity change from 0 to 512 [ 446.172647][ T30] audit: type=1400 audit(1749380832.842:1966): avc: denied { mount } for pid=6253 comm="syz.1.1896" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 446.179002][ T314] usbhid 1-1:1.0: can't add hid device: -71 [ 446.213416][ T6255] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 446.264116][ T314] usbhid: probe of 1-1:1.0 failed with error -71 [ 446.300360][ T314] usb 1-1: USB disconnect, device number 38 [ 446.327682][ T6255] EXT4-fs (loop5): 1 truncate cleaned up [ 446.339217][ T6255] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 446.508768][ T6276] binder: 6270:6276 ioctl c008ae09 200000000080 returned -22 [ 446.521481][ T6277] binder: 6268:6277 ioctl c008ae09 200000000080 returned -22 [ 446.898641][ T314] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 447.148819][ T314] usb 1-1: Using ep0 maxpacket: 16 [ 447.268927][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 447.297090][ T314] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 30 [ 447.341110][ T314] usb 1-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 447.374505][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.402526][ T314] usb 1-1: config 0 descriptor?? [ 448.111604][ T314] wacom 0003:056A:5002.0035: hidraw0: USB HID v20.00 Device [HID 056a:5002] on usb-dummy_hcd.0-1/input0 [ 448.225365][ T6305] capability: warning: `syz.5.1911' uses 32-bit capabilities (legacy support in use) [ 448.386546][ T314] usb 1-1: USB disconnect, device number 39 [ 449.014179][ T6306] fido_id[6306]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 449.258371][ T30] audit: type=1400 audit(1749380835.922:1967): avc: denied { read } for pid=6312 comm="syz.2.1914" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 449.322952][ T6322] loop5: detected capacity change from 0 to 512 [ 449.331116][ T30] audit: type=1400 audit(1749380835.922:1968): avc: denied { open } for pid=6312 comm="syz.2.1914" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 449.429674][ T6322] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 449.442248][ T6322] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 449.463114][ T6322] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 449.474598][ T6322] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 449.484993][ T6322] System zones: 0-2, 18-18, 34-34 [ 449.494205][ T6322] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 449.513172][ T6322] EXT4-fs (loop5): 1 truncate cleaned up [ 449.521713][ T6322] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 449.615132][ T6331] binder: 6320:6331 ioctl c008ae09 200000000080 returned -22 [ 449.926639][ T6338] binder: 6335:6338 ioctl c008ae09 200000000080 returned -22 [ 450.225120][ T30] audit: type=1400 audit(1749380836.892:1969): avc: denied { ioctl } for pid=6351 comm="syz.1.1925" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 451.407910][ T30] audit: type=1400 audit(1749380837.602:1970): avc: denied { listen } for pid=6348 comm="syz.2.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 451.564261][ T30] audit: type=1400 audit(1749380838.232:1971): avc: denied { ioctl } for pid=6368 comm="syz.2.1930" path="socket:[44671]" dev="sockfs" ino=44671 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 451.741910][ T30] audit: type=1400 audit(1749380838.232:1972): avc: denied { bind } for pid=6368 comm="syz.2.1930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 451.900063][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.911438][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 451.922028][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.930297][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.482873][ T6388] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 452.502212][ T6388] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1933'. [ 452.513732][ T30] audit: type=1400 audit(1749380839.152:1973): avc: denied { unlink } for pid=6379 comm="syz.2.1933" name="#16" dev="tmpfs" ino=1980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 452.703415][ T6394] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1938'. [ 452.714107][ T6392] syz.5.1936[6392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.714188][ T6392] syz.5.1936[6392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.724432][ T30] audit: type=1400 audit(1749380839.382:1974): avc: denied { mounton } for pid=6389 comm="syz.1.1937" path="/387/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 452.785065][ T30] audit: type=1400 audit(1749380839.442:1975): avc: denied { mounton } for pid=6389 comm="syz.1.1937" path="/387/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 452.811890][ T30] audit: type=1400 audit(1749380839.442:1976): avc: denied { sys_admin } for pid=6389 comm="syz.1.1937" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 454.168340][ T6431] syz.2.1947[6431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.170005][ T6431] syz.2.1947[6431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.267478][ T6431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 454.288819][ T6431] IPv6: NLM_F_CREATE should be set when creating new route [ 454.308724][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 454.308755][ T30] audit: type=1400 audit(1749380840.912:1979): avc: denied { write } for pid=6423 comm="syz.2.1947" name="001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 455.213691][ T6440] device veth0_vlan left promiscuous mode [ 455.220206][ T6440] device veth0_vlan entered promiscuous mode [ 455.245897][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 455.371763][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 455.442975][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 455.481575][ T6446] loop4: detected capacity change from 0 to 256 [ 456.739657][ T6462] overlayfs: failed to clone upperpath [ 457.057233][ T6472] loop4: detected capacity change from 0 to 1024 [ 457.100957][ T6472] EXT4-fs (loop4): dax option not supported [ 457.515379][ T6489] loop4: detected capacity change from 0 to 16 [ 458.333875][ T6489] erofs: (device loop4): mounted with root inode @ nid 36. [ 458.360028][ T30] audit: type=1400 audit(1749380845.032:1980): avc: denied { read } for pid=6471 comm="syz.4.1962" name="file1" dev="loop4" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 458.408388][ T30] audit: type=1400 audit(1749380845.032:1981): avc: denied { open } for pid=6471 comm="syz.4.1962" path="/390/file3/file1" dev="loop4" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 459.636411][ T6505] netlink: 'syz.4.1974': attribute type 1 has an invalid length. [ 459.899203][ T6520] futex_wake_op: syz.1.1979 tries to shift op by -1; fix this program [ 460.664808][ T6527] loop5: detected capacity change from 0 to 512 [ 460.740025][ T6527] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 461.854888][ T6536] loop4: detected capacity change from 0 to 512 [ 461.980352][ T6536] EXT4-fs (loop4): Ignoring removed oldalloc option [ 462.018685][ T30] audit: type=1400 audit(1749380848.522:1982): avc: denied { mount } for pid=6532 comm="syz.4.1983" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 462.116643][ T6536] EXT4-fs (loop4): orphan cleanup on readonly fs [ 462.127907][ T6536] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 462.138341][ T6536] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 462.149121][ T6536] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.1983: Failed to acquire dquot type 1 [ 462.166129][ T6536] EXT4-fs (loop4): 1 truncate cleaned up [ 462.173505][ T6536] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue. Quota mode: writeback. [ 463.174204][ T30] audit: type=1400 audit(1749380849.802:1983): avc: denied { create } for pid=6526 comm="syz.5.1981" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 463.200630][ T30] audit: type=1400 audit(1749380849.802:1984): avc: denied { bind } for pid=6526 comm="syz.5.1981" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 463.225267][ T30] audit: type=1400 audit(1749380849.802:1985): avc: denied { listen } for pid=6526 comm="syz.5.1981" path=2F36382FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 463.254572][ T30] audit: type=1400 audit(1749380849.802:1986): avc: denied { connectto } for pid=6526 comm="syz.5.1981" path=2F36382FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 463.452422][ T30] audit: type=1400 audit(1749380850.122:1987): avc: denied { set_context_mgr } for pid=6553 comm="syz.4.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 463.489133][ T6552] device pim6reg1 entered promiscuous mode [ 463.539146][ T6554] loop4: detected capacity change from 0 to 2048 [ 463.589275][ T6554] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 463.607022][ T6554] EXT4-fs (loop4): dax option not supported [ 463.678664][ T30] audit: type=1400 audit(1749380850.302:1988): avc: denied { execute } for pid=6539 comm="syz.1.1984" path="/400/file1" dev="tmpfs" ino=2133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 463.768073][ T30] audit: type=1400 audit(1749380850.432:1989): avc: denied { setopt } for pid=6558 comm="syz.1.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 463.977079][ T6559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1992'. [ 464.090931][ T1661] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 464.240325][ T6571] loop4: detected capacity change from 0 to 256 [ 464.986307][ T6572] netlink: 996 bytes leftover after parsing attributes in process `syz.1.1995'. [ 466.738648][ T1661] usb 6-1: Using ep0 maxpacket: 32 [ 467.148399][ T6575] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1996'. [ 467.210031][ T1661] usb 6-1: device descriptor read/all, error -71 [ 467.298657][ T524] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 467.385562][ T6586] device pim6reg1 entered promiscuous mode [ 467.430015][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 467.430031][ T30] audit: type=1400 audit(1749380854.102:1992): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 468.039710][ T915] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 468.533062][ T30] audit: type=1400 audit(1749380854.932:1993): avc: denied { setopt } for pid=6601 comm="syz.0.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 468.582212][ T30] audit: type=1400 audit(1749380854.932:1994): avc: denied { write } for pid=6601 comm="syz.0.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 468.604648][ T915] usb 5-1: device descriptor read/64, error -71 [ 469.156622][ T6614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2009'. [ 469.277320][ T915] usb 5-1: device descriptor read/64, error -71 [ 469.304388][ T30] audit: type=1400 audit(1749380855.972:1995): avc: denied { read write } for pid=6617 comm="syz.0.2010" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 469.346535][ T30] audit: type=1400 audit(1749380856.002:1996): avc: denied { open } for pid=6617 comm="syz.0.2010" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 470.068077][ T30] audit: type=1326 audit(1749380856.732:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.0.2010" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0da07e5929 code=0x0 [ 470.605467][ T6624] overlayfs: overlapping lowerdir path [ 471.158764][ T6628] loop5: detected capacity change from 0 to 256 [ 471.188541][ T6634] netlink: 'syz.1.2015': attribute type 1 has an invalid length. [ 471.215653][ T6628] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 471.492489][ T6639] netlink: 'syz.0.2016': attribute type 4 has an invalid length. [ 471.768907][ T915] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 472.452166][ T30] audit: type=1400 audit(1749380859.122:1998): avc: denied { load_policy } for pid=6642 comm="syz.0.2018" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 473.278937][ T6645] SELinux: failed to load policy [ 473.447290][ T30] audit: type=1400 audit(1749380860.112:1999): avc: denied { write } for pid=6651 comm="syz.0.2021" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 473.772400][ T6665] overlayfs: failed to clone lowerpath [ 473.793496][ T30] audit: type=1400 audit(1749380860.442:2000): avc: denied { ioctl } for pid=6653 comm="syz.1.2022" path="socket:[45686]" dev="sockfs" ino=45686 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 474.387968][ T30] audit: type=1400 audit(1749380861.052:2001): avc: denied { add_name } for pid=6627 comm="syz.5.2014" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.691735][ T30] audit: type=1400 audit(1749380862.362:2002): avc: denied { create } for pid=6627 comm="syz.5.2014" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 475.715073][ T30] audit: type=1400 audit(1749380862.362:2003): avc: denied { associate } for pid=6627 comm="syz.5.2014" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 475.726147][ T6680] input: syz0 as /devices/virtual/input/input144 [ 475.766389][ T6678] sch_fq: defrate 0 ignored. [ 475.774791][ T30] audit: type=1400 audit(1749380862.442:2004): avc: denied { name_bind } for pid=6679 comm="syz.2.2032" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 476.491398][ T30] audit: type=1400 audit(1749380862.642:2005): avc: denied { watch watch_reads } for pid=6676 comm="syz.4.2029" path="/403/file0" dev="tmpfs" ino=2207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 476.523604][ T30] audit: type=1400 audit(1749380862.762:2006): avc: denied { execute_no_trans } for pid=6676 comm="syz.4.2029" path="/403/file0" dev="tmpfs" ino=2207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 476.638510][ T6690] syz.1.2031[6690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.638623][ T6690] syz.1.2031[6690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.466806][ T30] audit: type=1400 audit(1749380864.132:2007): avc: denied { bind } for pid=6701 comm="syz.5.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 477.508297][ T6702] tipc: Enabled bearer , priority 0 [ 477.630685][ T6702] device syzkaller0 entered promiscuous mode [ 478.991280][ T6701] tipc: Resetting bearer [ 479.006805][ T6701] tipc: Disabling bearer [ 480.315109][ T30] audit: type=1400 audit(1749380866.982:2008): avc: denied { bind } for pid=6761 comm="syz.4.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 481.810191][ T6779] syz.0.2058[6779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.810322][ T6779] syz.0.2058[6779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.832299][ T6781] loop4: detected capacity change from 0 to 512 [ 481.938506][ T6781] EXT4-fs (loop4): orphan cleanup on readonly fs [ 481.948027][ T6781] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2063: bg 0: block 248: padding at end of block bitmap is not set [ 481.969552][ T6781] Quota error (device loop4): write_blk: dquota write failed [ 481.978300][ T6781] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 481.992780][ T6781] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.2063: Failed to acquire dquot type 1 [ 482.009973][ T6781] EXT4-fs (loop4): 1 truncate cleaned up [ 482.017858][ T6781] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 482.111463][ T6781] user requested TSC rate below hardware speed [ 482.202004][ T6794] kvm: pic: non byte write [ 482.206846][ T6781] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=926752543 (1853505086 ns) > initial count (336460 ns). Using initial count to start timer. [ 482.657761][ T30] audit: type=1400 audit(1749380869.322:2009): avc: denied { compute_member } for pid=6797 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 483.637831][ T6820] loop4: detected capacity change from 0 to 512 [ 483.746502][ T6826] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 483.762141][ T6820] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 483.778539][ T6820] EXT4-fs (loop4): Remounting filesystem read-only [ 483.785973][ T6820] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2075: invalid indirect mapped block 4278190080 (level 0) [ 483.804173][ T6820] EXT4-fs (loop4): Remounting filesystem read-only [ 483.811576][ T6820] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2075: invalid indirect mapped block 1 (level 1) [ 483.826851][ T6820] EXT4-fs (loop4): Remounting filesystem read-only [ 483.834344][ T6826] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 483.843607][ T6820] EXT4-fs (loop4): 1 truncate cleaned up [ 483.849850][ T6820] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 483.998849][ T314] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 484.081338][ T30] audit: type=1400 audit(1749380870.752:2010): avc: denied { write } for pid=6839 comm="syz.5.2081" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 484.136692][ T30] audit: type=1400 audit(1749380870.772:2011): avc: denied { map } for pid=6839 comm="syz.5.2081" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 484.219758][ T30] audit: type=1400 audit(1749380870.782:2012): avc: denied { call } for pid=6839 comm="syz.5.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 484.259743][ T30] audit: type=1400 audit(1749380870.782:2013): avc: denied { transfer } for pid=6839 comm="syz.5.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 485.300628][ T30] audit: type=1400 audit(1749380870.852:2014): avc: denied { write } for pid=6847 comm="syz.5.2086" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 485.330230][ T314] usb 3-1: Using ep0 maxpacket: 16 [ 485.459302][ T30] audit: type=1400 audit(1749380872.112:2015): avc: denied { read } for pid=6852 comm="syz.4.2084" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 485.516828][ T6848] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2086'. [ 485.752472][ T314] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 485.806703][ T314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.820807][ T314] usb 3-1: config 0 has no interface number 0 [ 486.288958][ T314] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 486.299722][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.308416][ T314] usb 3-1: Product: syz [ 486.312404][ T30] audit: type=1400 audit(1749380872.972:2016): avc: denied { read } for pid=6879 comm="syz.0.2095" path="socket:[46564]" dev="sockfs" ino=46564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 486.313746][ T314] usb 3-1: Manufacturer: syz [ 486.398809][ T1661] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 486.633754][ T314] usb 3-1: SerialNumber: syz [ 486.640513][ T314] usb 3-1: config 0 descriptor?? [ 486.758999][ T314] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 486.767554][ T314] usb 3-1: No valid video chain found. [ 486.782393][ T314] usb 3-1: USB disconnect, device number 34 [ 486.808455][ T6888] device pim6reg1 entered promiscuous mode [ 486.815079][ T1661] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 487.155011][ T1661] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 487.163896][ T1661] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 487.179688][ T1661] usb 6-1: config 8 has no interface number 0 [ 487.213780][ T1661] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 487.248937][ T1661] usb 6-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.299475][ T1661] usb 6-1: string descriptor 0 read error: -71 [ 487.308665][ T1661] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 487.325584][ T1661] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.358799][ T1661] usb 6-1: can't set config #8, error -71 [ 487.371596][ T1661] usb 6-1: USB disconnect, device number 13 [ 487.439639][ T6896] kvm [6895]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 487.475137][ T6896] kvm [6895]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 487.484808][ T30] audit: type=1326 audit(1749380874.152:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5a7be929 code=0x7ffc0000 [ 487.511938][ T6896] kvm [6895]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4000 [ 487.526146][ T30] audit: type=1326 audit(1749380874.182:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5a7be929 code=0x7ffc0000 [ 487.807676][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 487.807696][ T30] audit: type=1326 audit(1749380874.472:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5a7be929 code=0x7ffc0000 [ 488.659237][ T30] audit: type=1400 audit(1749380875.272:2042): avc: denied { bind } for pid=6916 comm="syz.1.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 488.783012][ T30] audit: type=1326 audit(1749380875.302:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5a7be929 code=0x7ffc0000 [ 488.819703][ T30] audit: type=1326 audit(1749380875.492:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.2.2113" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc76e14b929 code=0x0 [ 489.064753][ T6932] binfmt_misc: register: failed to install interpreter file ./file0 [ 490.422242][ T6961] device pim6reg1 entered promiscuous mode [ 490.506531][ T30] audit: type=1400 audit(1749380877.172:2045): avc: denied { create } for pid=6969 comm="syz.2.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 490.532545][ T30] audit: type=1400 audit(1749380877.202:2046): avc: denied { write } for pid=6969 comm="syz.2.2129" path="socket:[46704]" dev="sockfs" ino=46704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 495.077895][ T6990] loop5: detected capacity change from 0 to 40427 [ 495.089984][ T6990] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 495.098530][ T6990] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 495.120033][ T6990] F2FS-fs (loop5): invalid crc value [ 495.127407][ T6990] F2FS-fs (loop5): Found nat_bits in checkpoint [ 495.160767][ T7007] device pim6reg1 entered promiscuous mode [ 495.171734][ T6990] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 495.179874][ T6990] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 499.569360][ T7073] hub 6-0:1.0: USB hub found [ 499.575207][ T7073] hub 6-0:1.0: 1 port detected [ 500.070669][ T30] audit: type=1400 audit(1749381399.733:2047): avc: denied { validate_trans } for pid=7088 comm="syz.2.2158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 500.117512][ T30] audit: type=1400 audit(1749381399.773:2048): avc: denied { lock } for pid=7086 comm="syz.0.2157" path="socket:[47486]" dev="sockfs" ino=47486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 500.526285][ T7078] loop4: detected capacity change from 0 to 40427 [ 500.536688][ T7078] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 500.545910][ T7078] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 500.569169][ T7078] F2FS-fs (loop4): invalid crc value [ 500.593010][ T7078] F2FS-fs (loop4): Found nat_bits in checkpoint [ 500.642824][ T7108] 9pnet: Insufficient options for proto=fd [ 500.679413][ T7078] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 500.689532][ T7078] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 500.753800][ T30] audit: type=1400 audit(1749381400.403:2049): avc: denied { read write } for pid=7110 comm="syz.5.2165" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 500.787737][ T30] audit: type=1400 audit(1749381400.403:2050): avc: denied { open } for pid=7110 comm="syz.5.2165" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 500.831050][ T30] audit: type=1400 audit(1749381400.493:2051): avc: denied { read } for pid=7114 comm="syz.0.2164" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 500.862089][ T30] audit: type=1400 audit(1749381400.533:2052): avc: denied { open } for pid=7114 comm="syz.0.2164" path="/dev/usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 500.887834][ T30] audit: type=1400 audit(1749381400.533:2053): avc: denied { ioctl } for pid=7114 comm="syz.0.2164" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 502.216240][ T7127] hub 6-0:1.0: USB hub found [ 502.222597][ T7127] hub 6-0:1.0: 1 port detected [ 502.283419][ T7133] kvm: emulating exchange as write [ 503.504839][ T7154] 9pnet: Insufficient options for proto=fd [ 503.535329][ T7156] loop5: detected capacity change from 0 to 256 [ 503.645034][ T7156] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 503.699978][ T30] audit: type=1400 audit(1749381403.363:2054): avc: denied { read write open } for pid=7155 comm="syz.5.2178" path="/95/file2/file0/file1" dev="loop5" ino=1048657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 504.143597][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'. [ 504.500355][ T663] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 504.589167][ T7180] loop5: detected capacity change from 0 to 2048 [ 504.679613][ T7180] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 504.690307][ T7180] EXT4-fs (loop5): dax option not supported [ 504.785550][ T663] usb 5-1: Using ep0 maxpacket: 16 [ 504.939739][ T663] usb 5-1: config 0 has an invalid interface number: 167 but max is 7 [ 504.959783][ T663] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 504.969905][ T663] usb 5-1: config 0 has no interface number 0 [ 504.977078][ T663] usb 5-1: config 0 interface 167 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 504.991275][ T663] usb 5-1: config 0 interface 167 has no altsetting 0 [ 505.318917][ T663] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 505.357919][ T663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.407097][ T663] usb 5-1: Product: syz [ 505.412052][ T663] usb 5-1: Manufacturer: syz [ 505.580745][ T663] usb 5-1: SerialNumber: syz [ 505.587043][ T663] usb 5-1: config 0 descriptor?? [ 506.468940][ T30] audit: type=1400 audit(1749381406.123:2055): avc: denied { setopt } for pid=7157 comm="syz.4.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 506.628026][ T7215] netlink: 'syz.4.2179': attribute type 6 has an invalid length. [ 507.795322][ T7238] sch_fq: defrate 0 ignored. [ 507.810107][ T663] ftdi_sio 5-1:0.167: FTDI USB Serial Device converter detected [ 507.831764][ T663] usb 5-1: Detected FT232RL [ 507.859779][ T663] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 507.916876][ T663] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 507.959772][ T663] ftdi_sio 5-1:0.167: GPIO initialisation failed: -71 [ 507.984215][ T663] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 508.190197][ T663] usb 5-1: USB disconnect, device number 30 [ 508.205358][ T7244] binder: BINDER_SET_CONTEXT_MGR already set [ 508.213772][ T7244] binder: 7243:7244 ioctl 4018620d 200000000040 returned -16 [ 508.352747][ T663] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 508.363304][ T663] ftdi_sio 5-1:0.167: device disconnected [ 508.658106][ T7252] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 509.144288][ T7261] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2214'. [ 509.420089][ T7261] loop5: detected capacity change from 0 to 16 [ 509.501126][ T7261] erofs: (device loop5): mounted with root inode @ nid 36. [ 510.783003][ T7266] device pim6reg1 entered promiscuous mode [ 510.805130][ T7285] loop4: detected capacity change from 0 to 512 [ 510.820121][ T7285] EXT4-fs (loop4): Test dummy encryption mode enabled [ 510.838202][ T7285] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 510.890096][ T7285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 510.898930][ T7285] System zones: 1-12 [ 510.910088][ T7285] EXT4-fs (loop4): 1 truncate cleaned up [ 510.916341][ T7285] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,nogrpid,test_dummy_encryption,debug,nobarrier,quota,,errors=continue. Quota mode: writeback. [ 510.943425][ T30] audit: type=1400 audit(1749381410.603:2056): avc: denied { write } for pid=7284 comm="syz.4.2223" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 511.466925][ T30] audit: type=1400 audit(1749381411.123:2057): avc: denied { ioctl } for pid=7284 comm="syz.4.2223" path="/445/file2/file1" dev="loop4" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 512.411460][ T7333] loop5: detected capacity change from 0 to 256 [ 512.462057][ T7333] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 512.473141][ T7333] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 512.482509][ T7333] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 512.491728][ T7333] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 512.500934][ T7333] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 512.516234][ T7333] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 512.531704][ T7333] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 512.547194][ T7333] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 512.572756][ T7333] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 512.589910][ T7333] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 513.074561][ T7345] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 514.405060][ T7362] bridge0: port 3(macsec1) entered blocking state [ 514.413066][ T7362] bridge0: port 3(macsec1) entered disabled state [ 514.434024][ T30] audit: type=1400 audit(1749381414.013:2058): avc: denied { create } for pid=7353 comm="syz.2.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 514.620785][ T30] audit: type=1400 audit(1749381414.033:2059): avc: denied { bind } for pid=7353 comm="syz.2.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 514.659648][ T7373] loop5: detected capacity change from 0 to 512 [ 514.668241][ T30] audit: type=1400 audit(1749381414.033:2060): avc: denied { write } for pid=7353 comm="syz.2.2250" path="socket:[47939]" dev="sockfs" ino=47939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 515.198853][ T534] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 515.247887][ T30] audit: type=1400 audit(1749381414.903:2061): avc: denied { write } for pid=7384 comm="syz.2.2261" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 515.441208][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2264'. [ 515.467824][ T7396] device syzkaller0 entered promiscuous mode [ 515.544217][ T30] audit: type=1400 audit(1749381415.203:2062): avc: denied { mount } for pid=7399 comm="syz.0.2267" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 515.621891][ T534] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.733626][ T7407] user requested TSC rate below hardware speed [ 516.035000][ T534] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.203017][ T534] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 516.282025][ T534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 516.290601][ T534] usb 5-1: SerialNumber: syz [ 516.310295][ T7434] sch_fq: defrate 0 ignored. [ 516.591921][ T534] usb 5-1: 0:2 : does not exist [ 516.640598][ T534] usb 5-1: USB disconnect, device number 31 [ 516.653112][ T6983] udevd[6983]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 516.852863][ T7452] loop5: detected capacity change from 0 to 2048 [ 516.897535][ T6983] loop5: p1 < > p3 [ 516.903108][ T6983] loop5: p3 size 134217728 extends beyond EOD, truncated [ 516.913537][ T7452] loop5: p1 < > p3 [ 516.919550][ T7452] loop5: p3 size 134217728 extends beyond EOD, truncated [ 517.025891][ T7452] loop5: detected capacity change from 0 to 512 [ 517.026065][ T6980] udevd[6980]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 517.033316][ T6983] udevd[6983]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 517.044048][ T7452] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 517.283673][ T7452] EXT4-fs (loop5): orphan cleanup on readonly fs [ 517.299036][ T7452] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #3: comm syz.5.2286: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 517.323183][ T7452] EXT4-fs error (device loop5): ext4_quota_enable:6406: comm syz.5.2286: Bad quota inode: 3, type: 0 [ 517.336928][ T6983] udevd[6983]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 517.336964][ T6980] udevd[6980]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 517.351590][ T7452] EXT4-fs warning (device loop5): ext4_enable_quotas:6447: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 517.381642][ T7452] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 517.388963][ T7452] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 517.440217][ T7464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2290'. [ 517.466679][ T7467] sch_fq: defrate 0 ignored. [ 517.748634][ T534] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 517.913418][ T30] audit: type=1400 audit(1749381417.573:2063): avc: denied { relabelfrom } for pid=7487 comm="syz.0.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 517.950106][ T30] audit: type=1400 audit(1749381417.573:2064): avc: denied { relabelto } for pid=7487 comm="syz.0.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 518.032298][ T7495] sch_fq: defrate 0 ignored. [ 518.048589][ T534] usb 3-1: Using ep0 maxpacket: 16 [ 518.168672][ T534] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.179667][ T534] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 518.213860][ T534] usb 3-1: config 0 has no interface number 0 [ 518.293022][ T534] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 518.363154][ T534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.436694][ T534] usb 3-1: config 0 descriptor?? [ 518.479700][ T534] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 518.494367][ T30] audit: type=1400 audit(1749381418.153:2065): avc: denied { ioctl } for pid=7509 comm="syz.0.2309" path="socket:[48544]" dev="sockfs" ino=48544 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 518.683393][ T1511] usb 3-1: USB disconnect, device number 35 [ 519.111403][ T7522] loop5: detected capacity change from 0 to 128 [ 519.130181][ T7522] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 520.613589][ T302] Bluetooth: hci0: Frame reassembly failed (-84) [ 520.640674][ T7528] sch_fq: defrate 0 ignored. [ 520.698289][ T30] audit: type=1400 audit(1749381420.353:2066): avc: denied { create } for pid=7532 comm="syz.2.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 520.840934][ T30] audit: type=1400 audit(1749381420.383:2067): avc: denied { write } for pid=7532 comm="syz.2.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 521.173868][ T7550] device pim6reg1 entered promiscuous mode [ 521.312915][ T7563] sch_fq: defrate 0 ignored. [ 521.712696][ T7571] input: syz1 as /devices/virtual/input/input145 [ 521.884907][ T7588] device pim6reg1 entered promiscuous mode [ 522.306018][ T7613] sch_fq: defrate 0 ignored. [ 522.484185][ T7621] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 522.672608][ T60] Bluetooth: hci0: command 0x1003 tx timeout [ 522.678945][ T419] Bluetooth: hci0: sending frame failed (-49) [ 523.442850][ T7640] syz.0.2358[7640] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 523.442937][ T7640] syz.0.2358[7640] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 524.422127][ T30] audit: type=1326 audit(1749381424.083:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.4.2366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda5a7be929 code=0x0 [ 524.573885][ T7669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7669 comm=syz.4.2366 [ 524.728697][ T534] Bluetooth: hci0: command 0x1001 tx timeout [ 524.735853][ T419] Bluetooth: hci0: sending frame failed (-49) [ 525.250790][ T7684] user requested TSC rate below hardware speed [ 525.287128][ T7688] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 526.786249][ T7706] loop4: detected capacity change from 0 to 2048 [ 526.803982][ T7706] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 526.812096][ T534] Bluetooth: hci0: command 0x1009 tx timeout [ 526.818376][ T7706] EXT4-fs (loop4): dax option not supported [ 531.637125][ T7776] bridge0: port 3(gretap0) entered blocking state [ 531.644049][ T7776] bridge0: port 3(gretap0) entered disabled state [ 531.651229][ T7776] device gretap0 entered promiscuous mode [ 531.657273][ T7776] bridge0: port 3(gretap0) entered blocking state [ 531.663766][ T7776] bridge0: port 3(gretap0) entered forwarding state [ 531.798614][ T534] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 532.268505][ T30] audit: type=1400 audit(1749381431.923:2069): avc: denied { getopt } for pid=7786 comm="syz.5.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 533.129101][ T7795] binder: BINDER_SET_CONTEXT_MGR already set [ 533.135531][ T7795] binder: 7794:7795 ioctl 4018620d 200000000040 returned -16 [ 533.272178][ T915] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 533.659621][ T915] usb 6-1: no configurations [ 533.664349][ T915] usb 6-1: can't read configurations, error -22 [ 534.329274][ T915] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 534.505293][ T7815] device veth1_to_batadv entered promiscuous mode [ 534.516332][ T7815] device macsec1 entered promiscuous mode [ 534.556858][ T30] audit: type=1400 audit(1749381434.213:2070): avc: denied { name_bind } for pid=7809 comm="syz.4.2418" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 534.652743][ T7828] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2423'. [ 534.696515][ T7828] loop4: detected capacity change from 0 to 512 [ 534.741123][ T7828] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 534.762892][ T7828] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 534.772816][ T7828] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 534.788033][ T7828] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 534.796587][ T7828] System zones: 0-2, 18-18, 34-34 [ 534.803582][ T7828] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 534.819247][ T7828] EXT4-fs (loop4): 1 truncate cleaned up [ 534.824992][ T7828] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 534.850114][ T915] usb 6-1: no configurations [ 534.855284][ T915] usb 6-1: can't read configurations, error -22 [ 534.886853][ T30] audit: type=1400 audit(1749381434.543:2071): avc: denied { execute } for pid=7827 comm="syz.4.2423" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 534.893072][ T915] usb usb6-port1: attempt power cycle [ 536.541153][ T7868] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 537.108259][ T7879] binder: 7878:7879 ioctl c0306201 0 returned -14 [ 537.792222][ T7910] binder: 7909:7910 ioctl c0306201 0 returned -14 [ 537.930235][ T7921] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 539.801979][ T7951] sch_fq: defrate 0 ignored. [ 539.863630][ T7957] netem: change failed [ 540.047484][ T30] audit: type=1400 audit(1749381439.703:2072): avc: denied { mounton } for pid=7970 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 540.096770][ T7970] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.104069][ T7970] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.111897][ T7970] device bridge_slave_0 entered promiscuous mode [ 540.119060][ T7970] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.126240][ T7970] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.134108][ T7970] device bridge_slave_1 entered promiscuous mode [ 540.189670][ T7970] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.196773][ T7970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.204519][ T7970] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.211591][ T7970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.236106][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 540.244583][ T4518] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.252195][ T4518] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.269431][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 540.278173][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.285247][ T4518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.292857][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 540.301620][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.308705][ T4518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.324464][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 540.332544][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 540.347968][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 540.361043][ T6607] tipc: Disabling bearer [ 540.366364][ T6607] tipc: Disabling bearer [ 540.371894][ T6607] tipc: Left network mode [ 540.372184][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 540.385566][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 540.393391][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 540.404302][ T7970] device veth0_vlan entered promiscuous mode [ 540.417363][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 540.428261][ T7970] device veth1_macvtap entered promiscuous mode [ 540.450553][ T30] audit: type=1400 audit(1749381440.113:2073): avc: denied { mounton } for pid=7970 comm="syz-executor" path="/root/syzkaller.faylP4/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 540.475833][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 540.488078][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 540.512940][ T30] audit: type=1400 audit(1749381440.153:2074): avc: denied { mount } for pid=7970 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 540.539420][ T30] audit: type=1400 audit(1749381440.153:2075): avc: denied { mounton } for pid=7970 comm="syz-executor" path="/root/syzkaller.faylP4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 540.614212][ T30] audit: type=1400 audit(1749381440.153:2076): avc: denied { mounton } for pid=7970 comm="syz-executor" path="/root/syzkaller.faylP4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=50686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 541.183185][ T30] audit: type=1400 audit(1749381440.163:2077): avc: denied { mounton } for pid=7970 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 541.254366][ T7988] sch_fq: defrate 0 ignored. [ 541.438848][ T8005] device pim6reg1 entered promiscuous mode [ 541.728640][ T534] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 541.817155][ T30] audit: type=1400 audit(1749381441.473:2078): avc: denied { create } for pid=8013 comm="syz.5.2489" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 541.872220][ T30] audit: type=1400 audit(1749381441.473:2079): avc: denied { write } for pid=8013 comm="syz.5.2489" name="file2" dev="tmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 541.899986][ T30] audit: type=1400 audit(1749381441.473:2080): avc: denied { open } for pid=8013 comm="syz.5.2489" path="/128/file2" dev="tmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 541.923720][ T30] audit: type=1400 audit(1749381441.473:2081): avc: denied { ioctl } for pid=8013 comm="syz.5.2489" path="/128/file2" dev="tmpfs" ino=704 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 541.999772][ T8018] loop5: detected capacity change from 0 to 40427 [ 542.008828][ T534] usb 1-1: Using ep0 maxpacket: 16 [ 542.018295][ T8018] F2FS-fs (loop5): Unrecognized mount option "fsync_e=posix" or missing value [ 542.028652][ T6607] device bridge_slave_1 left promiscuous mode [ 542.034904][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.043382][ T6607] device bridge_slave_0 left promiscuous mode [ 542.051065][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.061983][ T6607] device veth0_vlan left promiscuous mode [ 542.208809][ T534] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.227840][ T534] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 542.241072][ T534] usb 1-1: config 0 has no interface number 0 [ 542.251358][ T534] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 542.260742][ T534] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.277610][ T534] usb 1-1: config 0 descriptor?? [ 542.322291][ T534] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 542.386977][ T8031] loop4: detected capacity change from 0 to 8192 [ 542.532111][ T1661] usb 1-1: USB disconnect, device number 42 [ 542.961291][ T8041] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2499'. [ 543.030377][ T8043] device pim6reg1 entered promiscuous mode [ 543.473792][ T8076] device pim6reg1 entered promiscuous mode [ 543.718609][ T60] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 544.098804][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 544.123158][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.248601][ T60] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 544.259207][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.284595][ T60] usb 5-1: config 0 descriptor?? [ 544.857526][ T60] steelseries_srws1 0003:1038:1410.0036: unknown main item tag 0x0 [ 544.896547][ T60] steelseries_srws1 0003:1038:1410.0036: unknown main item tag 0x0 [ 545.070420][ T60] steelseries_srws1 0003:1038:1410.0036: item fetching failed at offset 2/7 [ 545.106165][ T60] steelseries_srws1 0003:1038:1410.0036: parse failed [ 545.121298][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 545.121315][ T30] audit: type=1326 audit(1749381444.783:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.5.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd0d40929 code=0x7ffc0000 [ 545.293699][ T60] steelseries_srws1: probe of 0003:1038:1410.0036 failed with error -22 [ 545.299166][ T30] audit: type=1326 audit(1749381444.953:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.5.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fbcd0d40929 code=0x7ffc0000 [ 545.329448][ T60] usb 5-1: USB disconnect, device number 32 [ 545.370222][ T30] audit: type=1326 audit(1749381444.953:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.5.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd0d40929 code=0x7ffc0000 [ 545.498774][ T30] audit: type=1326 audit(1749381444.953:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.5.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd0d40929 code=0x7ffc0000 [ 545.894875][ T8108] loop4: detected capacity change from 0 to 1024 [ 545.986208][ T8108] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 546.015634][ T8108] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.228742][ T524] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 546.348803][ T1661] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 546.379700][ T8139] syz.0.2537[8139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 546.379786][ T8139] syz.0.2537[8139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 546.392391][ T8139] binder: 8138:8139 ioctl c0306201 0 returned -14 [ 546.498685][ T524] usb 6-1: Using ep0 maxpacket: 16 [ 546.588785][ T1661] usb 5-1: Using ep0 maxpacket: 16 [ 546.618819][ T524] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.629994][ T524] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 546.639357][ T524] usb 6-1: config 0 has no interface number 0 [ 546.645793][ T524] usb 6-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 546.681985][ T524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.691586][ T524] usb 6-1: config 0 descriptor?? [ 546.718770][ T1661] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 546.727075][ T1661] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.902494][ T524] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 546.909504][ T1661] usb 5-1: config 0 has no interface number 0 [ 547.298692][ T30] audit: type=1400 audit(1749381446.463:2087): avc: denied { setopt } for pid=8148 comm="syz.1.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 547.343992][ T524] usb 6-1: USB disconnect, device number 17 [ 547.362031][ T8156] device pim6reg1 entered promiscuous mode [ 547.508860][ T1661] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 547.518308][ T1661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.526567][ T1661] usb 5-1: Product: syz [ 547.531547][ T1661] usb 5-1: Manufacturer: syz [ 547.536343][ T1661] usb 5-1: SerialNumber: syz [ 547.542481][ T1661] usb 5-1: config 0 descriptor?? [ 547.869461][ T1661] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 547.878633][ T1661] usb 5-1: No valid video chain found. [ 548.090923][ T534] usb 5-1: USB disconnect, device number 33 [ 548.542344][ T8179] binder: BINDER_SET_CONTEXT_MGR already set [ 548.548844][ T8179] binder: 8178:8179 ioctl 4018620d 200000000040 returned -16 [ 548.785899][ T8200] loop5: detected capacity change from 0 to 512 [ 548.879321][ T8200] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 548.891897][ T8200] EXT4-fs (loop5): 1 orphan inode deleted [ 548.897783][ T8200] EXT4-fs (loop5): 1 truncate cleaned up [ 548.903723][ T8200] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 549.008617][ T915] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 549.408810][ T915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 549.420327][ T915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.431128][ T915] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 549.440524][ T915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.453634][ T915] usb 5-1: config 0 descriptor?? [ 549.793515][ T8211] device pim6reg1 entered promiscuous mode [ 550.009974][ T8213] loop5: detected capacity change from 0 to 40427 [ 550.038740][ T915] usbhid 5-1:0.0: can't add hid device: -71 [ 550.044866][ T915] usbhid: probe of 5-1:0.0 failed with error -71 [ 550.056867][ T915] usb 5-1: USB disconnect, device number 34 [ 550.064925][ T8213] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 550.073172][ T8213] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 550.083277][ T8213] F2FS-fs (loop5): invalid crc value [ 550.091711][ T8213] F2FS-fs (loop5): Found nat_bits in checkpoint [ 550.128857][ T8213] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 550.136235][ T8213] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 550.225355][ T8229] netlink: 'syz.2.2570': attribute type 27 has an invalid length. [ 550.270738][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.278207][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.329456][ T30] audit: type=1400 audit(1749381449.993:2088): avc: denied { mount } for pid=8228 comm="syz.2.2570" name="/" dev="configfs" ino=13734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 551.351341][ T8229] device macsec0 left promiscuous mode [ 551.401464][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.408643][ T8231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.421909][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.429136][ T8231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.445344][ T8231] device veth0_vlan left promiscuous mode [ 551.451795][ T8231] device veth0_vlan entered promiscuous mode [ 551.461036][ T8231] device veth1_macvtap entered promiscuous mode [ 551.477585][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2568'. [ 551.488770][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 551.502579][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 551.542723][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 551.561086][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 551.594100][ T8259] binder: 8258:8259 ioctl 4018620d 0 returned -22 [ 551.614138][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 551.624607][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 551.635666][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 551.644142][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 551.696296][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 551.708941][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 551.718103][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 551.726782][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 551.744530][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 551.753629][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 551.764131][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 551.772906][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 551.850966][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 551.859331][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 551.867771][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 551.876120][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 551.883814][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 552.278623][ T1661] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 552.444464][ T8290] device pim6reg1 entered promiscuous mode [ 552.618090][ T8295] binder: 8294:8295 ioctl 4018620d 0 returned -22 [ 553.168808][ T1661] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 553.618668][ T1661] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 553.637325][ T1661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.647562][ T1661] usb 5-1: Product: syz [ 553.652047][ T1661] usb 5-1: Manufacturer: syz [ 553.656809][ T1661] usb 5-1: SerialNumber: syz [ 553.669307][ T1661] usb 5-1: config 0 descriptor?? [ 553.733224][ T8319] loop5: detected capacity change from 0 to 2048 [ 553.769199][ T6980] loop5: p1 < > p3 [ 553.774285][ T6980] loop5: p3 size 134217728 extends beyond EOD, truncated [ 553.784438][ T8319] loop5: p1 < > p3 [ 553.790879][ T8319] loop5: p3 size 134217728 extends beyond EOD, truncated [ 553.846452][ T8322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2599'. [ 553.855844][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2599'. [ 553.865274][ T8322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2599'. [ 553.874517][ T8322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2599'. [ 553.951266][ T6980] udevd[6980]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 553.957347][ T8320] udevd[8320]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 553.978256][ T6980] udevd[6980]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 553.978417][ T8320] udevd[8320]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 554.003416][ T6980] udevd[6980]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 554.268730][ T30] audit: type=1400 audit(1749381453.913:2089): avc: denied { getopt } for pid=8323 comm="syz.5.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 554.329380][ T8320] udevd[8320]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 554.385917][ T524] usb 5-1: USB disconnect, device number 35 [ 554.525132][ T8350] sch_fq: defrate 0 ignored. [ 555.429762][ T8378] binder: 8377:8378 ioctl c0306201 0 returned -14 [ 555.450812][ T8380] sch_fq: defrate 0 ignored. [ 556.318370][ T30] audit: type=1400 audit(1749381455.763:2090): avc: denied { connect } for pid=8394 comm="syz.1.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 556.355068][ T8402] device pim6reg1 entered promiscuous mode [ 556.742206][ T8421] sch_fq: defrate 0 ignored. [ 557.076189][ T8446] sch_fq: defrate 0 ignored. [ 557.939141][ T30] audit: type=1400 audit(1749381457.593:2091): avc: denied { write } for pid=8463 comm="syz.2.2655" path="socket:[52596]" dev="sockfs" ino=52596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 558.093320][ T30] audit: type=1400 audit(1749381457.593:2092): avc: denied { listen } for pid=8463 comm="syz.2.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 558.264992][ T8477] device pim6reg1 entered promiscuous mode [ 558.287949][ T8476] device pim6reg1 entered promiscuous mode [ 558.297552][ T8479] sch_fq: defrate 0 ignored. [ 558.412653][ T30] audit: type=1400 audit(1749381458.063:2093): avc: denied { search } for pid=8480 comm="syz.1.2661" name="/" dev="configfs" ino=13734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 558.459669][ T30] audit: type=1400 audit(1749381458.063:2094): avc: denied { read } for pid=8480 comm="syz.1.2661" name="/" dev="configfs" ino=13734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 558.580769][ T30] audit: type=1400 audit(1749381458.063:2095): avc: denied { open } for pid=8480 comm="syz.1.2661" path="/" dev="configfs" ino=13734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 558.615556][ T8491] loop4: detected capacity change from 0 to 256 [ 558.631070][ T8491] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 558.668234][ T8502] sch_fq: defrate 0 ignored. [ 558.767593][ T8512] device pim6reg1 entered promiscuous mode [ 558.878612][ T534] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 558.901878][ T8518] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 559.202775][ T8525] bridge0: port 3(macsec1) entered blocking state [ 559.209743][ T8525] bridge0: port 3(macsec1) entered disabled state [ 559.277210][ T8529] sch_fq: defrate 0 ignored. [ 559.282514][ T534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 559.288107][ T8531] 9pnet: Insufficient options for proto=fd [ 559.294937][ T534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.316784][ T534] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 559.327140][ T534] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.338303][ T534] usb 1-1: config 0 descriptor?? [ 559.347603][ T8537] fuse: Bad value for 'group_id' [ 559.375030][ T8539] device pim6reg1 entered promiscuous mode [ 559.416606][ T8541] kvm: pic: non byte write [ 559.680847][ T8544] loop5: detected capacity change from 0 to 40427 [ 559.719096][ T8544] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 559.727166][ T8544] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 559.736184][ T8556] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 559.745810][ T8544] F2FS-fs (loop5): invalid crc value [ 559.752896][ T8544] F2FS-fs (loop5): Found nat_bits in checkpoint [ 559.762103][ T8561] 9pnet: Insufficient options for proto=fd [ 559.782591][ T8563] sch_fq: defrate 0 ignored. [ 559.795728][ T8544] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 559.803093][ T8544] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 559.814828][ T8568] fuse: Bad value for 'group_id' [ 559.898740][ T534] usbhid 1-1:0.0: can't add hid device: -71 [ 559.905268][ T534] usbhid: probe of 1-1:0.0 failed with error -71 [ 559.919835][ T534] usb 1-1: USB disconnect, device number 43 [ 560.023284][ T8580] loop5: detected capacity change from 0 to 2048 [ 560.079536][ T8580] loop5: p1 < > p3 [ 560.084092][ T8580] loop5: p3 size 134217728 extends beyond EOD, truncated [ 560.159959][ T8583] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 560.170028][ T6980] udevd[6980]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 560.186236][ T6983] udevd[6983]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 560.202297][ T6980] udevd[6980]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 560.213719][ T6983] udevd[6983]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 560.375482][ T8588] device sit0 entered promiscuous mode [ 560.400173][ T8590] device pim6reg1 entered promiscuous mode [ 560.459412][ T8592] sch_fq: defrate 0 ignored. [ 560.491418][ T8594] 9pnet: Insufficient options for proto=fd [ 561.063258][ T1661] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 561.121063][ T8612] loop5: detected capacity change from 0 to 2048 [ 561.139537][ T6983] loop5: p1 < > p3 [ 561.143998][ T6983] loop5: p3 size 134217728 extends beyond EOD, truncated [ 561.154024][ T8612] loop5: p1 < > p3 [ 561.158950][ T8612] loop5: p3 size 134217728 extends beyond EOD, truncated [ 561.353781][ T6983] udevd[6983]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 561.366660][ T6980] udevd[6980]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 561.378867][ T8612] loop5: detected capacity change from 0 to 512 [ 561.392224][ T8612] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 561.407958][ T6980] udevd[6980]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 561.419916][ T6983] udevd[6983]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 561.443297][ T8612] EXT4-fs (loop5): orphan cleanup on readonly fs [ 561.453345][ T8612] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #3: comm syz.5.2716: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 561.483919][ T8612] EXT4-fs error (device loop5): ext4_quota_enable:6406: comm syz.5.2716: Bad quota inode: 3, type: 0 [ 561.502159][ T8612] EXT4-fs warning (device loop5): ext4_enable_quotas:6447: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 561.518217][ T8612] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 561.525826][ T8612] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 561.598840][ T1661] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.616480][ T1661] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 561.732883][ T1661] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 561.742266][ T1661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 561.750676][ T1661] usb 1-1: SerialNumber: syz [ 562.159542][ T1661] usb 1-1: 0:2 : does not exist [ 562.170697][ T1661] usb 1-1: USB disconnect, device number 44 [ 562.268163][ T8646] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 562.549188][ T8654] device pim6reg1 entered promiscuous mode [ 562.886969][ T8661] loop4: detected capacity change from 0 to 2048 [ 563.096702][ T8661] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 563.250615][ T8682] loop5: detected capacity change from 0 to 2048 [ 563.619559][ T30] audit: type=1400 audit(1749381463.153:2096): avc: denied { bind } for pid=8674 comm="syz.2.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 563.640996][ T8682] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 563.648360][ T8682] EXT4-fs (loop5): dax option not supported [ 564.147527][ T8702] device pim6reg1 entered promiscuous mode [ 564.229879][ T8708] binder: 8707:8708 ioctl c0306201 0 returned -14 [ 564.266680][ T30] audit: type=1400 audit(1749381463.923:2097): avc: denied { mount } for pid=8705 comm="syz.2.2747" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 564.331548][ T8711] loop4: detected capacity change from 0 to 2048 [ 564.370013][ T8711] loop4: p1 < > p3 [ 564.374698][ T8711] loop4: p3 size 134217728 extends beyond EOD, truncated [ 564.461083][ T6980] udevd[6980]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 564.463109][ T6983] udevd[6983]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 564.473709][ T8711] loop4: detected capacity change from 0 to 512 [ 564.530884][ T8711] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 564.558711][ T289] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 564.569949][ T8711] EXT4-fs (loop4): orphan cleanup on readonly fs [ 564.617929][ T8711] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz.4.2750: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 564.636087][ T8711] EXT4-fs error (device loop4): ext4_quota_enable:6406: comm syz.4.2750: Bad quota inode: 3, type: 0 [ 564.647245][ T8711] EXT4-fs warning (device loop4): ext4_enable_quotas:6447: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 564.668938][ T8711] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 564.675823][ T8711] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 565.219109][ T289] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.229777][ T289] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 565.243260][ T289] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 565.252835][ T289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.310456][ T30] audit: type=1400 audit(1749381464.963:2098): avc: denied { connect } for pid=8735 comm="syz.5.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 565.630564][ T289] usb 3-1: config 0 descriptor?? [ 565.669606][ T289] hub 3-1:0.0: bad descriptor, ignoring hub [ 565.675653][ T289] hub: probe of 3-1:0.0 failed with error -5 [ 565.682173][ T289] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 565.847276][ T8743] device pim6reg1 entered promiscuous mode [ 565.872786][ T30] audit: type=1400 audit(1749381465.533:2099): avc: denied { mounton } for pid=8705 comm="syz.2.2747" path="/545/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 565.898601][ T30] audit: type=1400 audit(1749381465.533:2100): avc: denied { mount } for pid=8705 comm="syz.2.2747" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 565.905597][ T8745] binder: 8744:8745 ioctl c0306201 0 returned -14 [ 565.988972][ T1661] usb 3-1: USB disconnect, device number 36 [ 566.193280][ T8756] loop5: detected capacity change from 0 to 2048 [ 566.236178][ T8756] loop5: p1 < > p3 [ 566.241823][ T8756] loop5: p3 size 134217728 extends beyond EOD, truncated [ 566.328427][ T6980] udevd[6980]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 566.340822][ T8756] loop5: detected capacity change from 0 to 512 [ 566.347826][ T6983] udevd[6983]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 566.361850][ T8756] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 566.389338][ T8756] EXT4-fs (loop5): orphan cleanup on readonly fs [ 566.389396][ T8769] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 566.396513][ T8756] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #3: comm syz.5.2765: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 566.424851][ T8756] EXT4-fs error (device loop5): ext4_quota_enable:6406: comm syz.5.2765: Bad quota inode: 3, type: 0 [ 566.435124][ T30] audit: type=1400 audit(1749381466.093:2101): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 566.461873][ T8756] EXT4-fs warning (device loop5): ext4_enable_quotas:6447: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 566.478690][ T8756] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 566.486299][ T8756] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 566.509333][ T8773] binder: BINDER_SET_CONTEXT_MGR already set [ 566.515353][ T8773] binder: 8772:8773 ioctl 4018620d 200000000040 returned -16 [ 566.528695][ T30] audit: type=1400 audit(1749381466.143:2102): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 566.559817][ T8775] device pim6reg1 entered promiscuous mode [ 566.569079][ T8773] binder: 8772:8773 ioctl c0306201 0 returned -14 [ 566.953653][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2778'. [ 568.255973][ T8825] sch_fq: defrate 0 ignored. [ 568.374772][ T8829] loop5: detected capacity change from 0 to 40427 [ 568.420721][ T8829] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 568.428709][ T8829] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 568.438221][ T8829] F2FS-fs (loop5): invalid crc value [ 568.445970][ T8829] F2FS-fs (loop5): Found nat_bits in checkpoint [ 568.476625][ T8829] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 568.490035][ T8829] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 568.554484][ T8835] loop4: detected capacity change from 0 to 512 [ 568.579523][ T8835] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2794: inode #1: comm syz.4.2794: iget: illegal inode # [ 568.598964][ T8835] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2794: error while reading EA inode 1 err=-117 [ 568.612099][ T8835] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2794: inode #1: comm syz.4.2794: iget: illegal inode # [ 568.625903][ T8835] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2794: error while reading EA inode 1 err=-117 [ 568.655216][ T8835] EXT4-fs (loop4): 1 orphan inode deleted [ 568.661522][ T8835] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 568.699921][ T8835] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2794'. [ 568.709830][ T8835] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2794'. [ 568.719834][ T8843] device pim6reg1 entered promiscuous mode [ 568.822791][ T30] audit: type=1326 audit(1749381468.483:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8852 comm="syz.2.2800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc76e14b929 code=0x0 [ 569.160636][ T8863] loop4: detected capacity change from 0 to 40427 [ 569.199440][ T8863] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 569.207331][ T8863] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 569.217097][ T8863] F2FS-fs (loop4): invalid crc value [ 569.224487][ T8863] F2FS-fs (loop4): Found nat_bits in checkpoint [ 569.254871][ T8863] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 569.262234][ T8863] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 569.371535][ T8880] device pim6reg1 entered promiscuous mode [ 569.892621][ T8905] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 569.901442][ T30] audit: type=1400 audit(1749381469.573:2104): avc: denied { setopt } for pid=8902 comm="syz.5.2818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 570.086188][ T8914] device pim6reg1 entered promiscuous mode [ 570.910982][ T30] audit: type=1400 audit(1749381470.573:2105): avc: denied { unmount } for pid=5085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 571.518580][ T60] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 571.789410][ T60] usb 1-1: device descriptor read/64, error -71 [ 572.034266][ T8970] device pim6reg1 entered promiscuous mode [ 572.208585][ T60] usb 1-1: device descriptor read/64, error -71 [ 572.478899][ T60] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 572.835555][ T8994] input: syz0 as /devices/virtual/input/input146 [ 572.843986][ T60] usb 1-1: device descriptor read/64, error -71 [ 573.060498][ T9002] device pim6reg1 entered promiscuous mode [ 573.128732][ T1661] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 573.295364][ T60] usb 1-1: device descriptor read/64, error -71 [ 573.398751][ T1661] usb 6-1: Using ep0 maxpacket: 16 [ 573.418683][ T60] usb usb1-port1: attempt power cycle [ 573.425984][ T9019] device pim6reg1 entered promiscuous mode [ 573.518822][ T1661] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.536842][ T1661] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 573.548381][ T1661] usb 6-1: config 0 has no interface number 0 [ 573.555208][ T1661] usb 6-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 573.565062][ T1661] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.585120][ T1661] usb 6-1: config 0 descriptor?? [ 573.630801][ T1661] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 573.654818][ T9025] incfs: Can't find or create .index dir in ./file0 [ 573.661884][ T9025] incfs: mount failed -14 [ 573.787500][ T9029] device pim6reg1 entered promiscuous mode [ 573.834093][ T534] usb 6-1: USB disconnect, device number 18 [ 573.840107][ T60] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 574.018832][ T60] usb 1-1: device descriptor read/8, error -71 [ 574.210046][ T1714] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 574.263168][ T9047] device pim6reg1 entered promiscuous mode [ 574.270026][ T60] usb 1-1: device descriptor read/8, error -71 [ 574.277060][ T9049] loop4: detected capacity change from 0 to 256 [ 574.329557][ T9049] exfat: Unknown parameter 'sys_tz' [ 574.416596][ T9056] fuse: Unknown parameter 'grou00000000000000000000' [ 574.518172][ T9061] loop4: detected capacity change from 0 to 2048 [ 574.538758][ T1714] usb 3-1: device descriptor read/64, error -71 [ 574.560731][ T9061] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 574.568809][ T9061] EXT4-fs (loop4): dax option not supported [ 574.779210][ T60] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 574.948588][ T1714] usb 3-1: device descriptor read/64, error -71 [ 574.998853][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 575.009990][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.020412][ T60] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 575.029936][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.039235][ T60] usb 1-1: config 0 descriptor?? [ 575.218781][ T1714] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 575.419309][ T30] audit: type=1400 audit(1749381475.083:2106): avc: denied { ioctl } for pid=9072 comm="syz.4.2885" path="/dev/loop-control" dev="devtmpfs" ino=115 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 575.533164][ T1714] usb 3-1: device descriptor read/64, error -71 [ 576.732501][ T9089] loop4: detected capacity change from 0 to 1024 [ 577.091345][ T9089] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 577.133807][ T30] audit: type=1400 audit(1749381476.773:2107): avc: denied { mounton } for pid=9076 comm="syz.4.2888" path="/553/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 577.350718][ T60] steelseries_srws1 0003:1038:1410.0037: unknown main item tag 0x0 [ 577.358946][ T60] steelseries_srws1 0003:1038:1410.0037: unknown main item tag 0x0 [ 577.367151][ T60] steelseries_srws1 0003:1038:1410.0037: item fetching failed at offset 2/7 [ 577.376993][ T60] steelseries_srws1 0003:1038:1410.0037: parse failed [ 577.383959][ T60] steelseries_srws1: probe of 0003:1038:1410.0037 failed with error -22 [ 577.393882][ T60] usb 1-1: USB disconnect, device number 48 [ 577.512118][ T30] audit: type=1400 audit(1749381476.773:2108): avc: denied { setattr } for pid=9076 comm="syz.4.2888" name="work" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 577.825497][ T728] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 577.985764][ T30] audit: type=1400 audit(1749381476.773:2109): avc: denied { write } for pid=9076 comm="syz.4.2888" name="work" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 578.034341][ T30] audit: type=1400 audit(1749381476.783:2110): avc: denied { add_name } for pid=9076 comm="syz.4.2888" name="#1a" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 578.130962][ T30] audit: type=1400 audit(1749381476.783:2111): avc: denied { remove_name } for pid=9076 comm="syz.4.2888" name="#1a" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 578.187539][ T30] audit: type=1400 audit(1749381476.783:2112): avc: denied { rename } for pid=9076 comm="syz.4.2888" name="#1a" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 578.214559][ T4518] tipc: Disabling bearer [ 578.219782][ T30] audit: type=1400 audit(1749381476.783:2113): avc: denied { unlink } for pid=9076 comm="syz.4.2888" name="#1a" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 578.219816][ T30] audit: type=1400 audit(1749381476.783:2114): avc: denied { unlink } for pid=9076 comm="syz.4.2888" name="#1b" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 578.219844][ T30] audit: type=1400 audit(1749381477.643:2115): avc: denied { remove_name } for pid=282 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 578.328590][ C0] ------------[ cut here ]------------ [ 578.334381][ C0] refcount_t: addition on 0; use-after-free. [ 578.340551][ C0] WARNING: CPU: 0 PID: 9118 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 578.350097][ C0] Modules linked in: [ 578.354105][ C0] CPU: 0 PID: 9118 Comm: syz.4.2900 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 578.364280][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.374608][ C0] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 578.380829][ C0] Code: 04 01 48 c7 c7 60 ef 62 85 e8 08 9d 50 02 0f 0b eb df e8 5f d6 1c ff c6 05 ba f8 99 04 01 48 c7 c7 a0 ee 62 85 e8 ec 9c 50 02 <0f> 0b eb c3 e8 43 d6 1c ff c6 05 9f f8 99 04 01 48 c7 c7 00 ef 62 [ 578.400571][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010246 [ 578.406760][ C0] RAX: 83f276018aa9ea00 RBX: 0000000000000002 RCX: ffff8881134ecf00 [ 578.414792][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 578.422904][ C0] RBP: ffffc90000007a10 R08: dffffc0000000000 R09: fffff52000000e8d [ 578.431129][ C0] R10: fffff52000000e8d R11: 1ffff92000000e8c R12: ffff888107f8d408 [ 578.439334][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffffc90000007bc0 [ 578.447439][ C0] FS: 00007fda58e276c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 578.456409][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.463039][ C0] CR2: 00007ffc8ade0a48 CR3: 000000012b044000 CR4: 00000000003506b0 [ 578.471088][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 578.479094][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 578.487327][ C0] Call Trace: [ 578.490643][ C0] [ 578.493504][ C0] tipc_crypto_xmit+0x1938/0x2400 [ 578.498665][ C0] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 578.503885][ C0] ? __copy_skb_header+0x437/0x600 [ 578.509063][ C0] tipc_bearer_xmit_skb+0x226/0x360 [ 578.514312][ C0] ? __skb_clone+0x47a/0x790 [ 578.518967][ C0] ? tipc_bearer_mtu+0x160/0x160 [ 578.523922][ C0] ? skb_clone+0x202/0x360 [ 578.528361][ C0] tipc_disc_timeout+0x6a2/0x830 [ 578.533362][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 578.540625][ C0] ? __kasan_check_write+0x14/0x20 [ 578.545858][ C0] ? _raw_spin_lock_irqsave+0x110/0x110 [ 578.551463][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 578.557213][ C0] call_timer_fn+0x38/0x290 [ 578.562177][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 578.567855][ C0] __run_timers+0x639/0x9a0 [ 578.573053][ C0] ? calc_index+0x200/0x200 [ 578.577919][ C0] run_timer_softirq+0x6a/0xf0 [ 578.583207][ C0] handle_softirqs+0x250/0x560 [ 578.588224][ C0] __do_softirq+0xb/0xd [ 578.592540][ C0] do_softirq+0xc6/0x120 [ 578.596809][ C0] [ 578.599936][ C0] [ 578.603093][ C0] ? __local_bh_enable_ip+0x80/0x80 [ 578.608424][ C0] __local_bh_enable_ip+0x75/0x80 [ 578.613764][ C0] _raw_spin_unlock_bh+0x51/0x60 [ 578.619010][ C0] htable_selective_cleanup+0x269/0x2f0 [ 578.624675][ C0] htable_put+0x23e/0x2a0 [ 578.629154][ C0] hashlimit_mt_destroy_v1+0x58/0x60 [ 578.634472][ C0] ? hashlimit_mt_check_v1+0x2d0/0x2d0 [ 578.640140][ C0] translate_table+0x1999/0x1fe0 [ 578.645132][ C0] ? ipt_register_table+0x7e0/0x7e0 [ 578.650582][ C0] ? kvmalloc_node+0x242/0x330 [ 578.655367][ C0] ? kvmalloc_node+0x26d/0x330 [ 578.660279][ C0] ? __kasan_check_write+0x14/0x20 [ 578.665424][ C0] ? copy_from_sockptr_offset+0x77/0x90 [ 578.671035][ C0] do_ipt_set_ctl+0x95c/0xce0 [ 578.675736][ C0] ? release_firmware_map_entry+0x190/0x190 [ 578.681691][ C0] ? ipt_unregister_table_exit+0x220/0x220 [ 578.687605][ C0] ? plist_add+0x3e8/0x470 [ 578.692076][ C0] ? __kasan_check_read+0x11/0x20 [ 578.697122][ C0] ? __kasan_check_write+0x14/0x20 [ 578.702278][ C0] ? mutex_unlock+0x89/0x220 [ 578.706883][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 578.712243][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 578.717232][ C0] ? _raw_spin_lock_irq+0xe0/0xe0 [ 578.722318][ C0] ? futex_wait+0x545/0x810 [ 578.726844][ C0] nf_setsockopt+0x272/0x2a0 [ 578.731502][ C0] ip_setsockopt+0x25e6/0x3520 [ 578.736296][ C0] ? ipv4_pktinfo_prepare+0x580/0x580 [ 578.741735][ C0] ? __kasan_slab_alloc+0xcf/0xf0 [ 578.746784][ C0] ? __kasan_slab_alloc+0xbd/0xf0 [ 578.751862][ C0] ? do_futex+0xcb2/0x2620 [ 578.756301][ C0] ? memcpy+0x56/0x70 [ 578.760452][ C0] ? avc_has_perm_noaudit+0x2f4/0x460 [ 578.765940][ C0] ? avc_denied+0x1b0/0x1b0 [ 578.770501][ C0] ? avc_has_perm+0x158/0x240 [ 578.775211][ C0] ? avc_has_perm_noaudit+0x460/0x460 [ 578.780668][ C0] ? should_failslab+0x9/0x20 [ 578.785376][ C0] ? selinux_socket_setsockopt+0x21c/0x300 [ 578.791248][ C0] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 578.797100][ C0] ? __fget_files+0x2c4/0x320 [ 578.801834][ C0] udp_setsockopt+0x8a/0xa0 [ 578.806364][ C0] sock_common_setsockopt+0xa0/0xb0 [ 578.811624][ C0] ? sock_common_recvmsg+0x1b0/0x1b0 [ 578.816939][ C0] __sys_setsockopt+0x2f0/0x460 [ 578.821830][ C0] ? __ia32_sys_recv+0xb0/0xb0 [ 578.826921][ C0] ? preempt_count_add+0x90/0x1b0 [ 578.832406][ C0] ? __kasan_check_write+0x14/0x20 [ 578.838657][ C0] __x64_sys_setsockopt+0xbf/0xd0 [ 578.844088][ C0] x64_sys_call+0x982/0x9a0 [ 578.849116][ C0] do_syscall_64+0x4c/0xa0 [ 578.854443][ C0] ? clear_bhb_loop+0x50/0xa0 [ 578.859277][ C0] ? clear_bhb_loop+0x50/0xa0 [ 578.864710][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 578.870987][ C0] RIP: 0033:0x7fda5a7be929 [ 578.875602][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.897651][ C0] RSP: 002b:00007fda58e27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 578.906785][ C0] RAX: ffffffffffffffda RBX: 00007fda5a9e5fa0 RCX: 00007fda5a7be929 [ 578.915184][ C0] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 578.923902][ C0] RBP: 00007fda5a840b39 R08: 0000000000000448 R09: 0000000000000000 [ 578.932371][ C0] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 578.941147][ C0] R13: 0000000000000000 R14: 00007fda5a9e5fa0 R15: 00007ffce8148b78 [ 578.949498][ C0] [ 578.952739][ C0] ---[ end trace 2874dd5a4e9e6335 ]--- [ 578.958674][ C0] ------------[ cut here ]------------ [ 578.964413][ C0] refcount_t: underflow; use-after-free. [ 578.970375][ C0] WARNING: CPU: 0 PID: 9118 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 578.980186][ C0] Modules linked in: [ 578.984346][ C0] CPU: 0 PID: 9118 Comm: syz.4.2900 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 578.996307][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 579.008533][ C0] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 579.014875][ C0] Code: 04 01 48 c7 c7 a0 ee 62 85 e8 ec 9c 50 02 0f 0b eb c3 e8 43 d6 1c ff c6 05 9f f8 99 04 01 48 c7 c7 00 ef 62 85 e8 d0 9c 50 02 <0f> 0b eb a7 e8 27 d6 1c ff c6 05 80 f8 99 04 01 48 c7 c7 40 ee 62 [ 579.035328][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010246 [ 579.041607][ C0] RAX: 83f276018aa9ea00 RBX: 0000000000000003 RCX: ffff8881134ecf00 [ 579.050723][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 579.059078][ C0] RBP: ffffc90000007a10 R08: dffffc0000000000 R09: fffff52000000e8d [ 579.068496][ C0] R10: fffff52000000e8d R11: 1ffff92000000e8c R12: ffff888107f8d408 [ 579.077003][ C0] R13: dffffc0000000000 R14: 0000000000000003 R15: 00000000c0000000 [ 579.085844][ C0] FS: 00007fda58e276c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 579.095112][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.102191][ C0] CR2: 00007ffc8ade0a48 CR3: 000000012b044000 CR4: 00000000003506b0 [ 579.110363][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 579.118908][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 579.127000][ C0] Call Trace: [ 579.130590][ C0] [ 579.133461][ C0] tipc_crypto_xmit+0x1a82/0x2400 [ 579.138568][ C0] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 579.138934][ C1] ------------[ cut here ]------------ [ 579.144486][ C0] ? __copy_skb_header+0x437/0x600 [ 579.144516][ C0] tipc_bearer_xmit_skb+0x226/0x360 [ 579.144536][ C0] ? __skb_clone+0x47a/0x790 [ 579.150318][ C1] refcount_t: saturated; leaking memory. [ 579.150445][ C1] WARNING: CPU: 1 PID: 4518 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 579.155435][ C0] ? tipc_bearer_mtu+0x160/0x160 [ 579.160651][ C1] Modules linked in: [ 579.165234][ C0] ? skb_clone+0x202/0x360 [ 579.170977][ C1] CPU: 1 PID: 4518 Comm: kworker/u4:7 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 579.180363][ C0] tipc_disc_timeout+0x6a2/0x830 [ 579.185302][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 579.189206][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 579.193697][ C1] Workqueue: netns cleanup_net [ 579.205351][ C0] ? __kasan_check_write+0x14/0x20 [ 579.210313][ C1] [ 579.210321][ C1] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 579.221164][ C0] ? _raw_spin_lock_irqsave+0x110/0x110 [ 579.226444][ C1] Code: 04 01 48 c7 c7 40 ee 62 85 e8 b4 9c 50 02 0f 0b eb 8b e8 0b d6 1c ff c6 05 65 f8 99 04 01 48 c7 c7 40 ee 62 85 e8 98 9c 50 02 <0f> 0b e9 6c ff ff ff e8 ec d5 1c ff c6 05 4a f8 99 04 01 48 c7 c7 [ 579.231325][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 579.236439][ C1] RSP: 0018:ffffc900001d09e0 EFLAGS: 00010246 [ 579.238786][ C0] call_timer_fn+0x38/0x290 [ 579.244926][ C1] [ 579.244933][ C1] RAX: 552092f747d1c500 RBX: 0000000000000001 RCX: ffff88810b68cf00 [ 579.250508][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 579.270493][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 579.275689][ C0] __run_timers+0x639/0x9a0 [ 579.281849][ C1] RBP: ffffc900001d09f0 R08: 0000000000000004 R09: 0000000000000003 [ 579.286451][ C0] ? calc_index+0x200/0x200 [ 579.288785][ C1] R10: fffff5200003a0ec R11: 1ffff9200003a0ec R12: ffff888107f8d408 [ 579.297004][ C0] run_timer_softirq+0x6a/0xf0 [ 579.302241][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc900001d0ba0 [ 579.310229][ C0] handle_softirqs+0x250/0x560 [ 579.314808][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 579.323110][ C0] __do_softirq+0xb/0xd [ 579.327604][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.335691][ C0] do_softirq+0xc6/0x120 [ 579.340552][ C1] CR2: 000000110c2ae408 CR3: 0000000126f86000 CR4: 00000000003506a0 [ 579.348660][ C0] [ 579.353530][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 579.353545][ C1] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 579.353558][ C1] Call Trace: [ 579.362582][ C0] [ 579.362592][ C0] ? __local_bh_enable_ip+0x80/0x80 [ 579.366735][ C1] [ 579.366744][ C1] tipc_crypto_xmit+0x1938/0x2400 [ 579.373361][ C0] __local_bh_enable_ip+0x75/0x80 [ 579.377597][ C1] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 579.385663][ C0] _raw_spin_unlock_bh+0x51/0x60 [ 579.388627][ C1] ? __copy_skb_header+0x437/0x600 [ 579.396606][ C0] htable_selective_cleanup+0x269/0x2f0 [ 579.404795][ C1] tipc_bearer_xmit_skb+0x226/0x360 [ 579.408128][ C0] htable_put+0x23e/0x2a0 [ 579.411190][ C1] ? __skb_clone+0x47a/0x790 [ 579.416384][ C0] hashlimit_mt_destroy_v1+0x58/0x60 [ 579.419246][ C1] ? tipc_bearer_mtu+0x160/0x160 [ 579.424256][ C0] ? hashlimit_mt_check_v1+0x2d0/0x2d0 [ 579.429291][ C1] ? skb_clone+0x202/0x360 [ 579.434570][ C0] translate_table+0x1999/0x1fe0 [ 579.439517][ C1] tipc_disc_timeout+0x6a2/0x830 [ 579.444638][ C0] ? ipt_register_table+0x7e0/0x7e0 [ 579.450322][ C1] ? update_rq_clock+0x4f0/0x580 [ 579.455542][ C0] ? kvmalloc_node+0x242/0x330 [ 579.459917][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 579.464610][ C0] ? kvmalloc_node+0x26d/0x330 [ 579.470014][ C1] ? _find_next_bit+0x106/0x200 [ 579.475008][ C0] ? __kasan_check_write+0x14/0x20 [ 579.480483][ C1] ? __kasan_check_write+0x14/0x20 [ 579.484897][ C0] ? copy_from_sockptr_offset+0x77/0x90 [ 579.489847][ C1] ? _raw_spin_lock_irq+0x8f/0xe0 [ 579.494825][ C0] do_ipt_set_ctl+0x95c/0xce0 [ 579.500117][ C1] ? _raw_spin_lock_irqsave+0x110/0x110 [ 579.505189][ C0] ? release_firmware_map_entry+0x190/0x190 [ 579.510192][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 579.515389][ C0] ? ipt_unregister_table_exit+0x220/0x220 [ 579.520743][ C1] call_timer_fn+0x38/0x290 [ 579.525679][ C0] ? plist_add+0x3e8/0x470 [ 579.530941][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 579.536044][ C0] ? __kasan_check_read+0x11/0x20 [ 579.541597][ C1] __run_timers+0x639/0x9a0 [ 579.546622][ C0] ? __kasan_check_write+0x14/0x20 [ 579.551322][ C1] ? calc_index+0x200/0x200 [ 579.556872][ C0] ? mutex_unlock+0x89/0x220 [ 579.562799][ C1] ? sched_clock_cpu+0x18/0x3c0 [ 579.567988][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 579.573922][ C1] run_timer_softirq+0x6a/0xf0 [ 579.578433][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 579.583000][ C1] handle_softirqs+0x250/0x560 [ 579.588189][ C0] ? _raw_spin_lock_irq+0xe0/0xe0 [ 579.593235][ C1] __irq_exit_rcu+0x52/0xf0 [ 579.597727][ C0] ? futex_wait+0x545/0x810 [ 579.602948][ C1] irq_exit_rcu+0x9/0x10 [ 579.607551][ C0] nf_setsockopt+0x272/0x2a0 [ 579.612290][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 579.617777][ C0] ip_setsockopt+0x25e6/0x3520 [ 579.623180][ C1] [ 579.623192][ C1] [ 579.628213][ C0] ? ipv4_pktinfo_prepare+0x580/0x580 [ 579.633166][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 579.637922][ C0] ? __kasan_slab_alloc+0xcf/0xf0 [ 579.643141][ C1] RIP: 0010:del_timer_sync+0xe4/0x1a0 [ 579.647645][ C0] ? __kasan_slab_alloc+0xbd/0xf0 [ 579.652176][ C1] Code: 28 00 74 08 4c 89 ff e8 2a 97 4d 00 49 39 1f 74 07 e8 50 25 0f 00 eb 54 4c 8d 7d c8 48 8b 75 c8 4c 89 f7 e8 be 22 4c 03 f3 90 <48> c7 45 c8 00 00 00 00 48 89 df 4c 89 fe e8 29 f8 ff ff 49 89 c6 [ 579.656414][ C0] ? do_futex+0xcb2/0x2620 [ 579.661089][ C1] RSP: 0018:ffffc90001017b18 EFLAGS: 00000286 [ 579.666716][ C0] ? memcpy+0x56/0x70 [ 579.671486][ C1] [ 579.671492][ C1] RAX: 0000000080000000 RBX: ffff888129afa048 RCX: 0000000000000000 [ 579.674421][ C0] ? avc_has_perm_noaudit+0x2f4/0x460 [ 579.677347][ C1] RDX: 0000000000000000 RSI: 0000000000000a02 RDI: 00000000ffffffff [ 579.682816][ C0] ? avc_denied+0x1b0/0x1b0 [ 579.689332][ C1] RBP: ffffc90001017b50 R08: 0000000000000004 R09: 0000000000000003 [ 579.694546][ C0] ? avc_has_perm+0x158/0x240 [ 579.700629][ C1] R10: fffff52000202f44 R11: 1ffff92000202f44 R12: ffff8881f7027908 [ 579.705749][ C0] ? avc_has_perm_noaudit+0x460/0x460 [ 579.727094][ C1] R13: dffffc0000000000 R14: ffff8881f7027900 R15: ffffc90001017b18 [ 579.731640][ C0] ? should_failslab+0x9/0x20 [ 579.737894][ C1] ? del_timer_sync+0xe2/0x1a0 [ 579.741898][ C0] ? selinux_socket_setsockopt+0x21c/0x300 [ 579.744355][ C1] tipc_disc_delete+0x16/0x50 [ 579.752456][ C0] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 579.758570][ C1] bearer_disable+0x174/0x2c0 [ 579.766648][ C0] ? __fget_files+0x2c4/0x320 [ 579.771178][ C1] tipc_bearer_stop+0x128/0x1d0 [ 579.779263][ C0] udp_setsockopt+0x8a/0xa0 [ 579.783934][ C1] tipc_net_stop+0xda/0x140 [ 579.792145][ C0] sock_common_setsockopt+0xa0/0xb0 [ 579.797608][ C1] tipc_exit_net+0x7d/0x190 [ 579.805624][ C0] ? sock_common_recvmsg+0x1b0/0x1b0 [ 579.810315][ C1] cleanup_net+0x58b/0xad0 [ 579.815070][ C0] __sys_setsockopt+0x2f0/0x460 [ 579.820932][ C1] ? ops_init+0x4a0/0x4a0 [ 579.825691][ C0] ? __ia32_sys_recv+0xb0/0xb0 [ 579.831588][ C1] ? __schedule+0xb76/0x14c0 [ 579.836284][ C0] ? preempt_count_add+0x90/0x1b0 [ 579.840994][ C1] process_one_work+0x6be/0xba0 [ 579.845889][ C0] ? __kasan_check_write+0x14/0x20 [ 579.850419][ C1] worker_thread+0xa59/0x1200 [ 579.854935][ C0] __x64_sys_setsockopt+0xbf/0xd0 [ 579.860145][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 579.864917][ C0] x64_sys_call+0x982/0x9a0 [ 579.870381][ C1] kthread+0x411/0x500 [ 579.874785][ C0] do_syscall_64+0x4c/0xa0 [ 579.879643][ C1] ? worker_clr_flags+0x190/0x190 [ 579.883968][ C0] ? clear_bhb_loop+0x50/0xa0 [ 579.888863][ C1] ? kthread_blkcg+0xd0/0xd0 [ 579.893543][ C0] ? clear_bhb_loop+0x50/0xa0 [ 579.898694][ C1] ret_from_fork+0x1f/0x30 [ 579.903542][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 579.908666][ C1] [ 579.913331][ C0] RIP: 0033:0x7fda5a7be929 [ 579.918434][ C1] ---[ end trace 2874dd5a4e9e6336 ]--- [ 579.923926][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.999998][ C0] RSP: 002b:00007fda58e27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 580.008554][ C0] RAX: ffffffffffffffda RBX: 00007fda5a9e5fa0 RCX: 00007fda5a7be929 [ 580.016651][ C0] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 580.024677][ C0] RBP: 00007fda5a840b39 R08: 0000000000000448 R09: 0000000000000000 [ 580.036740][ C0] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 580.044805][ C0] R13: 0000000000000000 R14: 00007fda5a9e5fa0 R15: 00007ffce8148b78 [ 580.053103][ C0] [ 580.056201][ C0] ---[ end trace 2874dd5a4e9e6337 ]--- [ 580.062968][ T4518] tipc: Disabling bearer [ 580.104359][ T4518] tipc: Left network mode [ 580.128609][ T728] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 580.143939][ T9130] fuse: Unknown parameter 'group_i00000000000000000000' [ 580.158615][ T728] usb 6-1: can't read configurations, error -71 [ 580.194313][ T4518] ------------[ cut here ]------------ [ 580.201565][ T4518] refcount_t: saturated; leaking memory. [ 580.220053][ T4518] WARNING: CPU: 0 PID: 4518 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0 [ 580.242194][ T4518] Modules linked in: [ 580.247046][ T4518] CPU: 0 PID: 4518 Comm: kworker/u4:7 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 580.259452][ T4518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 580.271345][ T4518] Workqueue: netns cleanup_net [ 580.276243][ T4518] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0 [ 580.284055][ T4518] Code: 04 01 48 c7 c7 00 ef 62 85 e8 d0 9c 50 02 0f 0b eb a7 e8 27 d6 1c ff c6 05 80 f8 99 04 01 48 c7 c7 40 ee 62 85 e8 b4 9c 50 02 <0f> 0b eb 8b e8 0b d6 1c ff c6 05 65 f8 99 04 01 48 c7 c7 40 ee 62 [ 580.312020][ T4518] RSP: 0018:ffffc900010177c0 EFLAGS: 00010246 [ 580.323602][ T4518] RAX: 552092f747d1c500 RBX: 0000000000000000 RCX: ffff88810b68cf00 [ 580.332754][ T4518] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 580.341616][ T4518] RBP: ffffc900010177d0 R08: dffffc0000000000 R09: ffffed103ee065e8 [ 580.351011][ T4518] R10: ffffed103ee065e8 R11: 1ffff1103ee065e7 R12: 1ffff92000202f04 [ 580.363486][ T4518] R13: ffff888120c4c08c R14: 0000000000000000 R15: 0000000000000cc0 [ 580.376198][ T4518] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 580.386303][ T4518] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 580.394436][ T4518] CR2: 00007f5326249d60 CR3: 000000010dafd000 CR4: 00000000003506a0 [ 580.405616][ T4518] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 580.415684][ T4518] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 580.427356][ T4518] Call Trace: [ 580.431566][ T4518] [ 580.435278][ T4518] nf_nat_masq_schedule+0x439/0x4c0 [ 580.443001][ T4518] ? __kasan_check_write+0x14/0x20 [ 580.448481][ T4518] ? nf_nat_masq_schedule+0x4c0/0x4c0 [ 580.457274][ T4518] ? masq_device_event+0xd0/0xd0 [ 580.463263][ T4518] ? nfqnl_rcv_dev_event+0x441/0x470 [ 580.470323][ T4518] ? __kasan_check_read+0x11/0x20 [ 580.475581][ T4518] masq_device_event+0x9b/0xd0 [ 580.482257][ T4518] raw_notifier_call_chain+0x90/0x100 [ 580.488005][ T4518] dev_close_many+0x32d/0x4d0 [ 580.501102][ T4518] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 580.513050][ T4518] ? __dev_open+0x4c0/0x4c0 [ 580.519054][ T4518] ? _raw_spin_lock_irq+0x8f/0xe0 [ 580.524238][ T4518] ? _raw_spin_lock_irqsave+0x110/0x110 [ 580.532346][ T4518] ? generic_exec_single+0x226/0x390 [ 580.537923][ T4518] ? __kasan_check_read+0x11/0x20 [ 580.544314][ T4518] unregister_netdevice_many+0x44c/0x1990 [ 580.551324][ T4518] ? alloc_netdev_mqs+0xc90/0xc90 [ 580.556848][ T4518] ? unregister_netdevice_queue+0x1aa/0x360 [ 580.563225][ T4518] ? list_netdevice+0x4c0/0x4c0 [ 580.568282][ T4518] ip6gre_exit_batch_net+0x5a5/0x5f0 [ 580.575001][ T4518] ? ip6gre_init_net+0x340/0x340 [ 580.581306][ T4518] ? ip6gre_init_net+0x340/0x340 [ 580.586418][ T4518] cleanup_net+0x602/0xad0 [ 580.591037][ T4518] ? ops_init+0x4a0/0x4a0 [ 580.595515][ T4518] ? __schedule+0xb76/0x14c0 [ 580.601129][ T4518] process_one_work+0x6be/0xba0 [ 580.606231][ T4518] worker_thread+0xa59/0x1200 [ 580.611694][ T4518] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 580.617288][ T4518] kthread+0x411/0x500 [ 580.621987][ T4518] ? worker_clr_flags+0x190/0x190 [ 580.627185][ T4518] ? kthread_blkcg+0xd0/0xd0 [ 580.632036][ T4518] ret_from_fork+0x1f/0x30 [ 580.637167][ T4518] [ 580.640603][ T4518] ---[ end trace 2874dd5a4e9e6338 ]--- [ 580.648585][ T60] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 580.726981][ T9119] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.734746][ T9119] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.743227][ T9119] device bridge_slave_0 entered promiscuous mode [ 580.750884][ T9153] device pim6reg1 entered promiscuous mode [ 580.768112][ T9119] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.775935][ T9119] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.784545][ T9119] device bridge_slave_1 entered promiscuous mode [ 580.919705][ T9119] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.926905][ T9119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.935717][ T9119] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.942857][ T9119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.994291][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 581.003650][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.012896][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.035565][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 581.055492][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.062615][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.070360][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 581.081612][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.088484][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 581.091654][ T60] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 581.109648][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.118502][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.122857][ T60] usb 1-1: config 0 descriptor?? [ 581.127189][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.146874][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 581.155498][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 581.174067][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 581.182736][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 581.198329][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 581.207279][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 581.216161][ T1714] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 581.227868][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 581.236547][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 581.245206][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 581.253483][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 581.262667][ T9119] device veth0_vlan entered promiscuous mode [ 581.279274][ T9119] device veth1_macvtap entered promiscuous mode [ 581.289249][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 581.298003][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 581.307604][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 581.324002][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 581.338374][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 581.354380][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 581.364475][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 581.380957][ T4518] device bridge_slave_1 left promiscuous mode [ 581.387387][ T4518] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.396757][ T4518] device bridge_slave_0 left promiscuous mode [ 581.404543][ T4518] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.413612][ T4518] device veth0_vlan left promiscuous mode [ 581.600804][ T60] steelseries_srws1 0003:1038:1410.0038: unknown main item tag 0x0 [ 581.610038][ T60] steelseries_srws1 0003:1038:1410.0038: unknown main item tag 0x0 [ 581.619066][ T60] steelseries_srws1 0003:1038:1410.0038: item fetching failed at offset 2/7 [ 581.628377][ T60] steelseries_srws1 0003:1038:1410.0038: parse failed [ 581.635747][ T60] steelseries_srws1: probe of 0003:1038:1410.0038 failed with error -22 [ 581.698747][ T1714] usb 3-1: unable to get BOS descriptor or descriptor too short [ 581.778860][ T1714] usb 3-1: config 1 has an invalid interface number: 38 but max is 0 [ 581.789182][ T1714] usb 3-1: config 1 has no interface number 0 [ 581.795301][ T1714] usb 3-1: config 1 interface 38 has no altsetting 0 [ 581.805092][ T728] usb 1-1: USB disconnect, device number 49 [ 581.881257][ T9167] fuse: Unknown parameter 'group_i00000000000000000000' [ 582.048738][ T1714] usb 3-1: string descriptor 0 read error: -22 [ 582.055315][ T1714] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=fd.63 [ 582.064713][ T1714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.106786][ T9172] loop5: detected capacity change from 0 to 2048 [ 582.158722][ T9172] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 582.166075][ T9172] EXT4-fs (loop5): dax option not supported [ 582.320097][ T9155] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 582.336379][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 582.336396][ T30] audit: type=1400 audit(1749381481.993:2120): avc: denied { relabelto } for pid=9154 comm="syz.2.2912" name="cgroup.procs" dev="cgroup" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 582.347144][ T1714] snd-usb-audio: probe of 3-1:1.38 failed with error -71 [ 582.379266][ T1714] usb 3-1: USB disconnect, device number 39 [ 582.387504][ T30] audit: type=1400 audit(1749381481.993:2121): avc: denied { associate } for pid=9154 comm="syz.2.2912" name="cgroup.procs" dev="cgroup" ino=57 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:net_conf_t:s0" [ 582.658691][ T9187] 9pnet: Insufficient options for proto=fd [ 583.070664][ T9192] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 583.648589][ T1714] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 584.499632][ T1714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 584.636429][ T1714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.646335][ T1714] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 584.655593][ T1714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.703463][ T1714] usb 2-1: config 0 descriptor?? [ 584.709405][ T9221] fuse: Unknown parameter 'group_id00000000000000000000' [ 585.171223][ T9243] fuse: Unknown parameter '0x0000000000000006' [ 585.171224][ T30] audit: type=1400 audit(1749381484.833:2122): avc: denied { mounton } for pid=9242 comm="syz.5.2946" path="/207/file0" dev="tmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 585.190342][ T1714] steelseries_srws1 0003:1038:1410.0039: unknown main item tag 0x0 [ 585.209476][ T1714] steelseries_srws1 0003:1038:1410.0039: unknown main item tag 0x0 [ 585.210512][ T9241] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 585.228491][ T1714] steelseries_srws1 0003:1038:1410.0039: item fetching failed at offset 2/7 [ 585.285080][ T1714] steelseries_srws1 0003:1038:1410.0039: parse failed [ 585.292396][ T1714] steelseries_srws1: probe of 0003:1038:1410.0039 failed with error -22 [ 585.391390][ T1661] usb 2-1: USB disconnect, device number 40 [ 585.845842][ T9255] loop4: detected capacity change from 0 to 40427 [ 585.909273][ T9255] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 585.928942][ T9255] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 585.945036][ T30] audit: type=1400 audit(1749381485.603:2123): avc: denied { listen } for pid=9256 comm="syz.0.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 585.965244][ T9255] F2FS-fs (loop4): invalid crc value [ 586.040277][ T9255] F2FS-fs (loop4): Found nat_bits in checkpoint [ 586.403649][ T9255] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 586.448644][ T9255] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 586.469565][ T1661] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 586.748955][ T1661] usb 2-1: Using ep0 maxpacket: 16 [ 587.024264][ T1661] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 587.033390][ T1661] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.064167][ T1661] usb 2-1: config 0 descriptor?? [ 587.083440][ T9292] fuse: Bad value for 'user_id' [ 587.538658][ T1661] usbhid 2-1:0.0: can't add hid device: -71 [ 587.545020][ T1661] usbhid: probe of 2-1:0.0 failed with error -71 [ 587.553563][ T1661] usb 2-1: USB disconnect, device number 41 [ 587.621687][ T6607] ================================================================== [ 587.629988][ T6607] BUG: KASAN: use-after-free in tcp_metrics_flush_all+0xd3/0x210 [ 587.637939][ T6607] Read of size 4 at addr ffff888120c4c08c by task kworker/u4:8/6607 [ 587.646131][ T6607] [ 587.648473][ T6607] CPU: 0 PID: 6607 Comm: kworker/u4:8 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 587.659930][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 587.669997][ T6607] Workqueue: netns cleanup_net [ 587.674860][ T6607] Call Trace: [ 587.678161][ T6607] [ 587.681101][ T6607] __dump_stack+0x21/0x30 [ 587.685446][ T6607] dump_stack_lvl+0xee/0x150 [ 587.690139][ T6607] ? show_regs_print_info+0x20/0x20 [ 587.695425][ T6607] ? load_image+0x3a0/0x3a0 [ 587.699968][ T6607] ? ____kasan_slab_free+0x130/0x160 [ 587.705255][ T6607] ? __kasan_check_read+0x11/0x20 [ 587.710286][ T6607] ? preempt_schedule_common+0xbe/0xf0 [ 587.715840][ T6607] print_address_description+0x7f/0x2c0 [ 587.721751][ T6607] ? tcp_metrics_flush_all+0xd3/0x210 [ 587.727135][ T6607] kasan_report+0xf1/0x140 [ 587.731752][ T6607] ? _raw_spin_lock_bh+0x8e/0xe0 [ 587.736797][ T6607] ? tcp_metrics_flush_all+0xd3/0x210 [ 587.742213][ T6607] kasan_check_range+0x280/0x290 [ 587.747169][ T6607] __kasan_check_read+0x11/0x20 [ 587.752204][ T6607] tcp_metrics_flush_all+0xd3/0x210 [ 587.757709][ T6607] ? tcp_net_metrics_init+0x150/0x150 [ 587.763362][ T6607] tcp_net_metrics_exit_batch+0x10/0x20 [ 587.769181][ T6607] cleanup_net+0x602/0xad0 [ 587.773749][ T6607] ? ops_init+0x4a0/0x4a0 [ 587.778237][ T6607] ? __schedule+0xb76/0x14c0 [ 587.783030][ T6607] process_one_work+0x6be/0xba0 [ 587.788437][ T6607] worker_thread+0xa59/0x1200 [ 587.793140][ T6607] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 587.798721][ T6607] kthread+0x411/0x500 [ 587.802799][ T6607] ? worker_clr_flags+0x190/0x190 [ 587.807847][ T6607] ? kthread_blkcg+0xd0/0xd0 [ 587.812458][ T6607] ret_from_fork+0x1f/0x30 [ 587.816880][ T6607] [ 587.819901][ T6607] [ 587.822332][ T6607] Allocated by task 281: [ 587.826565][ T6607] __kasan_slab_alloc+0xbd/0xf0 [ 587.831413][ T6607] slab_post_alloc_hook+0x4f/0x2b0 [ 587.836523][ T6607] kmem_cache_alloc+0xf7/0x260 [ 587.841297][ T6607] copy_net_ns+0x145/0x5c0 [ 587.845717][ T6607] create_new_namespaces+0x3a2/0x660 [ 587.851002][ T6607] unshare_nsproxy_namespaces+0x120/0x170 [ 587.856745][ T6607] ksys_unshare+0x4ac/0x7b0 [ 587.861340][ T6607] __x64_sys_unshare+0x38/0x40 [ 587.866139][ T6607] x64_sys_call+0x442/0x9a0 [ 587.870733][ T6607] do_syscall_64+0x4c/0xa0 [ 587.875160][ T6607] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 587.881162][ T6607] [ 587.883482][ T6607] The buggy address belongs to the object at ffff888120c4c000 [ 587.883482][ T6607] which belongs to the cache net_namespace of size 3968 [ 587.898116][ T6607] The buggy address is located 140 bytes inside of [ 587.898116][ T6607] 3968-byte region [ffff888120c4c000, ffff888120c4cf80) [ 587.911482][ T6607] The buggy address belongs to the page: [ 587.917108][ T6607] page:ffffea0004831200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888120c4c000 pfn:0x120c48 [ 587.928734][ T6607] head:ffffea0004831200 order:3 compound_mapcount:0 compound_pincount:0 [ 587.937406][ T6607] flags: 0x4000000000010200(slab|head|zone=1) [ 587.943678][ T6607] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881001c4600 [ 587.952446][ T6607] raw: ffff888120c4c000 0000000080080004 00000001ffffffff 0000000000000000 [ 587.961029][ T6607] page dumped because: kasan: bad access detected [ 587.967439][ T6607] page_owner tracks the page as allocated [ 587.973320][ T6607] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 281, ts 24735025938, free_ts 24641478089 [ 587.992337][ T6607] post_alloc_hook+0x192/0x1b0 [ 587.997487][ T6607] prep_new_page+0x1c/0x110 [ 588.002009][ T6607] get_page_from_freelist+0x2cc5/0x2d50 [ 588.007724][ T6607] __alloc_pages+0x18f/0x440 [ 588.012852][ T6607] new_slab+0xa1/0x4d0 [ 588.016942][ T6607] ___slab_alloc+0x381/0x810 [ 588.022508][ T6607] __slab_alloc+0x49/0x90 [ 588.026865][ T6607] kmem_cache_alloc+0x138/0x260 [ 588.031730][ T6607] copy_net_ns+0x145/0x5c0 [ 588.036263][ T6607] create_new_namespaces+0x3a2/0x660 [ 588.041659][ T6607] unshare_nsproxy_namespaces+0x120/0x170 [ 588.048211][ T6607] ksys_unshare+0x4ac/0x7b0 [ 588.052722][ T6607] __x64_sys_unshare+0x38/0x40 [ 588.057506][ T6607] x64_sys_call+0x442/0x9a0 [ 588.062546][ T6607] do_syscall_64+0x4c/0xa0 [ 588.066973][ T6607] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 588.073028][ T6607] page last free stack trace: [ 588.077776][ T6607] free_unref_page_prepare+0x542/0x550 [ 588.083251][ T6607] free_unref_page+0xa2/0x550 [ 588.087961][ T6607] free_compound_page+0x78/0xa0 [ 588.092927][ T6607] __put_compound_page+0x77/0xb0 [ 588.097959][ T6607] __put_page+0xbc/0xe0 [ 588.102235][ T6607] skb_release_data+0x3d3/0xa10 [ 588.107273][ T6607] __kfree_skb+0x50/0x70 [ 588.111534][ T6607] tcp_recvmsg_locked+0x14ac/0x2640 [ 588.117191][ T6607] tcp_recvmsg+0x21b/0x720 [ 588.121715][ T6607] inet_recvmsg+0x134/0x470 [ 588.126233][ T6607] sock_read_iter+0x2a2/0x340 [ 588.131042][ T6607] vfs_read+0x68b/0xbe0 [ 588.135206][ T6607] ksys_read+0x140/0x240 [ 588.140069][ T6607] __x64_sys_read+0x7b/0x90 [ 588.144625][ T6607] x64_sys_call+0x96d/0x9a0 [ 588.149858][ T6607] do_syscall_64+0x4c/0xa0 [ 588.154294][ T6607] [ 588.156657][ T6607] Memory state around the buggy address: [ 588.162591][ T6607] ffff888120c4bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 588.171411][ T6607] ffff888120c4c000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.179756][ T6607] >ffff888120c4c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.187911][ T6607] ^ [ 588.192272][ T6607] ffff888120c4c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.200340][ T6607] ffff888120c4c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.208492][ T6607] ================================================================== [ 588.216673][ T6607] Disabling lock debugging due to kernel taint [ 588.240111][ T30] audit: type=1400 audit(1749381487.903:2124): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 588.264579][ T30] audit: type=1400 audit(1749381487.903:2125): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.292771][ T30] audit: type=1400 audit(1749381487.903:2126): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.315561][ T30] audit: type=1400 audit(1749381487.903:2127): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.336762][ T30] audit: type=1400 audit(1749381487.903:2128): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 588.357696][ T30] audit: type=1400 audit(1749381487.903:2129): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 588.381254][ T30] audit: type=1400 audit(1749381487.903:2130): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1