last executing test programs: 13.644279586s ago: executing program 4 (id=578): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b708000008", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000013c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r7}}]}, {0x4, 0x6, "b1a0a8c29f95e001860674a8c31f811e72577da3db00e8460eedd9985038c13872388f2253dc40a273cd15e2c982b8551fe7cf67818c6c3e4d07a16a7ee2ecd9a6284f2451154f4b897afab3b2fd3b9a14dd6d8e8994048728dff4189640af3f2f8e63dc22591532"}, {0xc}, {0x2a}}}]}, {0x0, 0x1, [@m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @link_local}]}, {0x0, 0x6, "c17a9b161aa1ed359f8ca84a68b7fe7b96e7051b71ab820cd0dfd3c7ec3c0cd52a0f261f6eeb5c8e16517ae2b2d7ebee61fc09d2318aaa2744c2f1ec3d4ada09b9e0e10a09033a0f67d4e9bdfbb8e06b22bb777c3c86c97cba364bc1d6534d4af847aa94c37cfcc11f39abb2038c67b49ee558c9178643aacdac547419795884fe87c2853b84764bc83c1c94089ab9b8e9171095b01800b90bd1fecd5fe9f81b984e1823193247"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_bpf={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS, @TCA_ACT_BPF_OPS_LEN, @TCA_ACT_BPF_OPS={0x0, 0x4, [{}, {}, {}, {}, {}, {}]}]}, {0x0, 0x6, "d4a1b0177987526d421555722f2b33a00cf4e440b78d80a2b6dc9fc0ee8f7eab3a8f64d631d09ee020f4d5a5f6c958e6d0577dfe59bd8edf2b30ae8c373897e42d8b5ce0ad0bf9d4"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x1}}}}, @m_connmark={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS, @TCA_CONNMARK_PARMS]}, {0x0, 0x6, "357e55c8d11fc37316b5c890f2c5260971cd48bd4572494b551cb5a84d522c3a7cff2143d2bc99dbb83a300fc9f05f8c"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_mirred={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS]}, {0x0, 0x6, "e429537536772ddb55fc856055fe83d0b4b9c7038ce61e970ce9bc626896f6597b1f0d95a49b"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @broadcast}, @TCA_IFE_DMAC={0x0, 0x3, @random="e42f4a24bfd8"}]}, {0x0, 0x6, "3f96d8e0e4e426165d2d2bdad144e735babe6c27b77b211a0e5d3e145c75bdc82df3bef1308a9c2f1df4d9ff4bd68af3989432a38049d0b2a6cc43d78cd088b796ffa7e07b8c270ab4404f6679050ac700d0220f492ad182359d77514e8333b76c867045a8775ccf00563c8838881dcac0580d8891ea864db4cda38cd674d28813"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}]}, {0x0, 0x1, [@m_tunnel_key={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS, @TCA_TUNNEL_KEY_ENC_DST_PORT, @TCA_TUNNEL_KEY_ENC_KEY_ID, @TCA_TUNNEL_KEY_ENC_DST_PORT]}, {0x0, 0x6, "7c9682c1a82229bbdbef684ab89cee6544447f12aca99ca80e6edd710effdaa5a9db63a0fe63fdf0ab19cb1a410b2fab05d0298a5a97f7eb71c2e7e37d9579c4ccf529cde7b0a48591862bac68201493466b3f145454f9f6dc211b1bd2bd82d200d78ef8b03c121f30334d5dfb185f08275a0c2602a8455d72e156c5f9e5272eb3165d88b466"}, {}, {0x0, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING, @TCA_SKBEDIT_PRIORITY, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "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"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x35}, @TCA_SKBEDIT_MARK, @TCA_SKBEDIT_PARMS, @TCA_SKBEDIT_PRIORITY, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "abc14bfebf112ecea3ac15c5012181eeb7a0b6bd15d03b707ced5f8ba073c8f6a9a479311f95c654326031b3cc982385fa58ba389376d90717a824b4a91fff3e662e59b01f1cc7241dc9629cc4dcc05e8bb6a2f75d1a7abd1b5d81de96735c88727665098ef8b387ac3c4f545a449f77d754cdd77f645543516966034536c6a1318e86655af02c8bd792618f46a80e11e631b7751dbfc00d3ce26cf7f9f31148eb7d45610557de5cd40e851a93d3df720762f458de15062301df79ba7ff93ac0edcde3e41d6f840bfacbba953abf54fcfe0f4f1d"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x3, 0x3}}}}]}]}, 0x68}}, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000480)={0x1, r3}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f0000000600)=""/99}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 13.635359007s ago: executing program 4 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) ptrace(0x10, 0x1) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4204, r2, 0x202, &(0x7f0000000000)) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES16], 0x2, 0x218, &(0x7f0000000440)="$eJzsmb9v00AUx793dpxQoW4wsJShEkWiju0AKkgMZUcgtQgYI2qqgtOg1ENbCakRCwt/AP8EI0NZGNiYYGYAJCQGMjIhceh+xdfEQBLwxPtIvX79fO/du3fJs+SAIIj/lk8fv314enVl/RyA41hE3di/eMUc7sx//8yrGfl6e/7RoRtLujAAQhQ2/w/rBwBerXrAgQ4rhPa+/lzfXzQx18GVltwEx1mjb4EhtLkK6w2kYLhjzPcd3T1mRJayu91s495WlkZyiOWQyKEFiCP5D/oMGwAaZgnm5L+zt/+gnQE9LbLUipqw64zdmlaYpWpl9VP5rXJccUogz+v2k8d9eR1qs3uEiMERG90Cw5rRK6gjDMMFc5nGzv5P+UV8Tx+bs/9Jd9L4u0JMJWSmy/8uoK3gDO4/RCUbDGY6gmqEzMNaOj4wmRdfKLzsrcC1vEQVObNRi/xCDy0nB4dvxr0+V1/DtxNNvjR9ZNW4UHIo7+ay7Fqp14kjltNufRxhP4Fli3pFf2I+cMbpT77zVGjmnYfNnb395a1OezPdTLeTpHUxOh9FF5Km6s16LGt9Jn5D9ac5J75ulJfnR+cGLMBuO8978S6Q9+LhdaJHp+Ouveh+HTbOQZ9j6bsQ9vGitl0vz4eZP67+S7Xk/TJ5giAIgiAIgiAIgiAIgiCI3yNGXkUeMJh3lcz+JjaOn9xQk38GAAD//8hnY/U=") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080), 0xc) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000619b3b4063070120af9c2aa6a11b523ce33eae0000000109021b0002000000000904b60000ff81ca00"], 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x3, 0x96f2]}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x16, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 5.346235001s ago: executing program 1 (id=651): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=0xffffffffffffffff, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b708000008", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000013c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r8}}]}, {0x4, 0x6, "b1a0a8c29f95e001860674a8c31f811e72577da3db00e8460eedd9985038c13872388f2253dc40a273cd15e2c982b8551fe7cf67818c6c3e4d07a16a7ee2ecd9a6284f2451154f4b897afab3b2fd3b9a14dd6d8e8994048728dff4189640af3f2f8e63dc22591532"}, {0xc}, {0x2a}}}]}, {0x0, 0x1, [@m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @link_local}]}, {0x0, 0x6, "c17a9b161aa1ed359f8ca84a68b7fe7b96e7051b71ab820cd0dfd3c7ec3c0cd52a0f261f6eeb5c8e16517ae2b2d7ebee61fc09d2318aaa2744c2f1ec3d4ada09b9e0e10a09033a0f67d4e9bdfbb8e06b22bb777c3c86c97cba364bc1d6534d4af847aa94c37cfcc11f39abb2038c67b49ee558c9178643aacdac547419795884fe87c2853b84764bc83c1c94089ab9b8e9171095b01800b90bd1fecd5fe9f81b984e1823193247"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_bpf={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS, @TCA_ACT_BPF_OPS_LEN, @TCA_ACT_BPF_OPS={0x0, 0x4, [{}, {}, {}, {}, {}, {}]}]}, {0x0, 0x6, "d4a1b0177987526d421555722f2b33a00cf4e440b78d80a2b6dc9fc0ee8f7eab3a8f64d631d09ee020f4d5a5f6c958e6d0577dfe59bd8edf2b30ae8c373897e42d8b5ce0ad0bf9d4"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x1}}}}, @m_connmark={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS, @TCA_CONNMARK_PARMS]}, {0x0, 0x6, "357e55c8d11fc37316b5c890f2c5260971cd48bd4572494b551cb5a84d522c3a7cff2143d2bc99dbb83a300fc9f05f8c"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_mirred={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS]}, {0x0, 0x6, "e429537536772ddb55fc856055fe83d0b4b9c7038ce61e970ce9bc626896f6597b1f0d95a49b"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @broadcast}, @TCA_IFE_DMAC={0x0, 0x3, @random="e42f4a24bfd8"}]}, {0x0, 0x6, "3f96d8e0e4e426165d2d2bdad144e735babe6c27b77b211a0e5d3e145c75bdc82df3bef1308a9c2f1df4d9ff4bd68af3989432a38049d0b2a6cc43d78cd088b796ffa7e07b8c270ab4404f6679050ac700d0220f492ad182359d77514e8333b76c867045a8775ccf00563c8838881dcac0580d8891ea864db4cda38cd674d28813"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}]}, {0x0, 0x1, [@m_tunnel_key={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS, @TCA_TUNNEL_KEY_ENC_DST_PORT, @TCA_TUNNEL_KEY_ENC_KEY_ID, @TCA_TUNNEL_KEY_ENC_DST_PORT]}, {0x0, 0x6, "7c9682c1a82229bbdbef684ab89cee6544447f12aca99ca80e6edd710effdaa5a9db63a0fe63fdf0ab19cb1a410b2fab05d0298a5a97f7eb71c2e7e37d9579c4ccf529cde7b0a48591862bac68201493466b3f145454f9f6dc211b1bd2bd82d200d78ef8b03c121f30334d5dfb185f08275a0c2602a8455d72e156c5f9e5272eb3165d88b466"}, {}, {0x0, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING, @TCA_SKBEDIT_PRIORITY, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "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"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x35}, @TCA_SKBEDIT_MARK, @TCA_SKBEDIT_PARMS, @TCA_SKBEDIT_PRIORITY, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "abc14bfebf112ecea3ac15c5012181eeb7a0b6bd15d03b707ced5f8ba073c8f6a9a479311f95c654326031b3cc982385fa58ba389376d90717a824b4a91fff3e662e59b01f1cc7241dc9629cc4dcc05e8bb6a2f75d1a7abd1b5d81de96735c88727665098ef8b387ac3c4f545a449f77d754cdd77f645543516966034536c6a1318e86655af02c8bd792618f46a80e11e631b7751dbfc00d3ce26cf7f9f31148eb7d45610557de5cd40e851a93d3df720762f458de15062301df79ba7ff93ac0edcde3e41d6f840bfacbba953abf54fcfe0f4f1d"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x3, 0x3}}}}]}]}, 0x68}}, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000480)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f0000000600)=""/99}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 5.316085822s ago: executing program 1 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x1) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0x20002078) 5.247679175s ago: executing program 1 (id=653): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b708000008", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup(r6) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000013c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4, 0x6, "b1a0a8c29f95e001860674a8c31f811e72577da3db00e8460eedd9985038c13872388f2253dc40a273cd15e2c982b8551fe7cf67818c6c3e4d07a16a7ee2ecd9a6284f2451154f4b897afab3b2fd3b9a14dd6d8e8994048728dff4189640af3f2f8e63dc22591532"}, {0xc}, {0x2a}}}]}, {0x0, 0x1, [@m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @link_local}]}, {0x0, 0x6, "c17a9b161aa1ed359f8ca84a68b7fe7b96e7051b71ab820cd0dfd3c7ec3c0cd52a0f261f6eeb5c8e16517ae2b2d7ebee61fc09d2318aaa2744c2f1ec3d4ada09b9e0e10a09033a0f67d4e9bdfbb8e06b22bb777c3c86c97cba364bc1d6534d4af847aa94c37cfcc11f39abb2038c67b49ee558c9178643aacdac547419795884fe87c2853b84764bc83c1c94089ab9b8e9171095b01800b90bd1fecd5fe9f81b984e1823193247"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_bpf={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS, @TCA_ACT_BPF_OPS_LEN, @TCA_ACT_BPF_OPS={0x0, 0x4, [{}, {}, {}, {}, {}, {}]}]}, {0x0, 0x6, "d4a1b0177987526d421555722f2b33a00cf4e440b78d80a2b6dc9fc0ee8f7eab3a8f64d631d09ee020f4d5a5f6c958e6d0577dfe59bd8edf2b30ae8c373897e42d8b5ce0ad0bf9d4"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x1}}}}, @m_connmark={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS, @TCA_CONNMARK_PARMS]}, {0x0, 0x6, "357e55c8d11fc37316b5c890f2c5260971cd48bd4572494b551cb5a84d522c3a7cff2143d2bc99dbb83a300fc9f05f8c"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_mirred={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS]}, {0x0, 0x6, "e429537536772ddb55fc856055fe83d0b4b9c7038ce61e970ce9bc626896f6597b1f0d95a49b"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @broadcast}, @TCA_IFE_DMAC={0x0, 0x3, @random="e42f4a24bfd8"}]}, {0x0, 0x6, "3f96d8e0e4e426165d2d2bdad144e735babe6c27b77b211a0e5d3e145c75bdc82df3bef1308a9c2f1df4d9ff4bd68af3989432a38049d0b2a6cc43d78cd088b796ffa7e07b8c270ab4404f6679050ac700d0220f492ad182359d77514e8333b76c867045a8775ccf00563c8838881dcac0580d8891ea864db4cda38cd674d28813"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}]}, {0x0, 0x1, [@m_tunnel_key={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS, @TCA_TUNNEL_KEY_ENC_DST_PORT, @TCA_TUNNEL_KEY_ENC_KEY_ID, @TCA_TUNNEL_KEY_ENC_DST_PORT]}, {0x0, 0x6, "7c9682c1a82229bbdbef684ab89cee6544447f12aca99ca80e6edd710effdaa5a9db63a0fe63fdf0ab19cb1a410b2fab05d0298a5a97f7eb71c2e7e37d9579c4ccf529cde7b0a48591862bac68201493466b3f145454f9f6dc211b1bd2bd82d200d78ef8b03c121f30334d5dfb185f08275a0c2602a8455d72e156c5f9e5272eb3165d88b466"}, {}, {0x0, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING, @TCA_SKBEDIT_PRIORITY, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "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"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x35}, @TCA_SKBEDIT_MARK, @TCA_SKBEDIT_PARMS, @TCA_SKBEDIT_PRIORITY, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "abc14bfebf112ecea3ac15c5012181eeb7a0b6bd15d03b707ced5f8ba073c8f6a9a479311f95c654326031b3cc982385fa58ba389376d90717a824b4a91fff3e662e59b01f1cc7241dc9629cc4dcc05e8bb6a2f75d1a7abd1b5d81de96735c88727665098ef8b387ac3c4f545a449f77d754cdd77f645543516966034536c6a1318e86655af02c8bd792618f46a80e11e631b7751dbfc00d3ce26cf7f9f31148eb7d45610557de5cd40e851a93d3df720762f458de15062301df79ba7ff93ac0edcde3e41d6f840bfacbba953abf54fcfe0f4f1d"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x3, 0x3}}}}]}]}, 0x68}}, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000480)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f0000000600)=""/99}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 5.151639849s ago: executing program 1 (id=656): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{}, {}, {0x0, 0x0, 0x0, 0x3e}]}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) setgroups(0x1, &(0x7f00000021c0)=[r2]) write$FUSE_INIT(r3, &(0x7f0000002200)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x100018}}, 0x50) setxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)='system.posix_acl_default\x00', &(0x7f00000025c0), 0x24, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004900)="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", 0x2000, &(0x7f0000002800)={&(0x7f0000002140)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000100)={[0x100000, 0x3000, 0x4000, 0x2000], 0x3, 0x0, 0x8000000000000001}) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b708000008", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup(r5) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000013c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4, 0x6, "b1a0a8c29f95e001860674a8c31f811e72577da3db00e8460eedd9985038c13872388f2253dc40a273cd15e2c982b8551fe7cf67818c6c3e4d07a16a7ee2ecd9a6284f2451154f4b897afab3b2fd3b9a14dd6d8e8994048728dff4189640af3f2f8e63dc22591532"}, {0xc}, {0x2a}}}]}, {0x0, 0x1, [@m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @link_local}]}, {0x0, 0x6, "c17a9b161aa1ed359f8ca84a68b7fe7b96e7051b71ab820cd0dfd3c7ec3c0cd52a0f261f6eeb5c8e16517ae2b2d7ebee61fc09d2318aaa2744c2f1ec3d4ada09b9e0e10a09033a0f67d4e9bdfbb8e06b22bb777c3c86c97cba364bc1d6534d4af847aa94c37cfcc11f39abb2038c67b49ee558c9178643aacdac547419795884fe87c2853b84764bc83c1c94089ab9b8e9171095b01800b90bd1fecd5fe9f81b984e1823193247"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_bpf={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS, @TCA_ACT_BPF_OPS_LEN, @TCA_ACT_BPF_OPS={0x0, 0x4, [{}, {}, {}, {}, {}, {}]}]}, {0x0, 0x6, "d4a1b0177987526d421555722f2b33a00cf4e440b78d80a2b6dc9fc0ee8f7eab3a8f64d631d09ee020f4d5a5f6c958e6d0577dfe59bd8edf2b30ae8c373897e42d8b5ce0ad0bf9d4"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x1}}}}, @m_connmark={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS, @TCA_CONNMARK_PARMS]}, {0x0, 0x6, "357e55c8d11fc37316b5c890f2c5260971cd48bd4572494b551cb5a84d522c3a7cff2143d2bc99dbb83a300fc9f05f8c"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_mirred={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS]}, {0x0, 0x6, "e429537536772ddb55fc856055fe83d0b4b9c7038ce61e970ce9bc626896f6597b1f0d95a49b"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @broadcast}, @TCA_IFE_DMAC={0x0, 0x3, @random="e42f4a24bfd8"}]}, {0x0, 0x6, "3f96d8e0e4e426165d2d2bdad144e735babe6c27b77b211a0e5d3e145c75bdc82df3bef1308a9c2f1df4d9ff4bd68af3989432a38049d0b2a6cc43d78cd088b796ffa7e07b8c270ab4404f6679050ac700d0220f492ad182359d77514e8333b76c867045a8775ccf00563c8838881dcac0580d8891ea864db4cda38cd674d28813"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}]}, {0x0, 0x1, [@m_tunnel_key={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS, @TCA_TUNNEL_KEY_ENC_DST_PORT, @TCA_TUNNEL_KEY_ENC_KEY_ID, @TCA_TUNNEL_KEY_ENC_DST_PORT]}, {0x0, 0x6, "7c9682c1a82229bbdbef684ab89cee6544447f12aca99ca80e6edd710effdaa5a9db63a0fe63fdf0ab19cb1a410b2fab05d0298a5a97f7eb71c2e7e37d9579c4ccf529cde7b0a48591862bac68201493466b3f145454f9f6dc211b1bd2bd82d200d78ef8b03c121f30334d5dfb185f08275a0c2602a8455d72e156c5f9e5272eb3165d88b466"}, {}, {0x0, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING, @TCA_SKBEDIT_PRIORITY, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "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"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x35}, @TCA_SKBEDIT_MARK, @TCA_SKBEDIT_PARMS, @TCA_SKBEDIT_PRIORITY, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "abc14bfebf112ecea3ac15c5012181eeb7a0b6bd15d03b707ced5f8ba073c8f6a9a479311f95c654326031b3cc982385fa58ba389376d90717a824b4a91fff3e662e59b01f1cc7241dc9629cc4dcc05e8bb6a2f75d1a7abd1b5d81de96735c88727665098ef8b387ac3c4f545a449f77d754cdd77f645543516966034536c6a1318e86655af02c8bd792618f46a80e11e631b7751dbfc00d3ce26cf7f9f31148eb7d45610557de5cd40e851a93d3df720762f458de15062301df79ba7ff93ac0edcde3e41d6f840bfacbba953abf54fcfe0f4f1d"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x3, 0x3}}}}]}]}, 0x68}}, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000480)={0x1, r3}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f0000000600)=""/99}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 3.433847236s ago: executing program 3 (id=679): inotify_init1(0x40800) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) syz_emit_ethernet(0x100, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ab00", 0xca, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202"}, {0x0, 0x1, "000000050000000026000400"}, {0x2, 0x1, "fe906d26efe393"}, {0x18, 0xa, "d57b401ec2a776552bedbf0253488636b737a8ccf412543dc9fd297f070945f83eb28d7e95c86705a838c290c3260586ddb1979a1dcebd5745c3ce812a369d374a700206de172d8078a051d41e9d01"}]}}}}}}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x410840, 0x0) unshare(0x40600) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000080)) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) 3.347698179s ago: executing program 3 (id=680): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa081, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x77}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3f, 0xff, 0x81}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x3f, 0x20, 0xff, 0x8, 0x1}, 0x49, &(0x7f0000000100)={0x5, 0xf, 0x49, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x3f, 0x1, 0x200, 0xf0f, 0xfff8, [0xc0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x2, 0x70, 0xd27, 0x3f}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x1, 0xfff}, @ss_container_id={0x14, 0x10, 0x4, 0x9e, "0044f06009ed56fc475921060dacdfbb"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x2, 0xffe1}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0xd, 0x4, 0x3}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x44, &(0x7f0000000200)=@string={0x44, 0x3, "bb4ef00534bc0543b6e3de1f5c78bb91a2e2cab7ca736e72dc5aabaca0096839f99ead03b654c4368be3a830e1109243d4bb0dfd3474014563685a3a541a9c8f60bd"}}, {0x31, &(0x7f0000000280)=@string={0x31, 0x3, "b688915a6c7196df7c9ca082ab2cf946ac0e09833815f40839e42cd995a6c4ac94b7708f4d8d2ce80d95d48647ed22"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x9c, &(0x7f0000000300)=@string={0x9c, 0x3, "ea124f24c0b331ae6c7acb8ef7906d584f794c633fbb7e6e1b93f3387aa5178661b0f5c16b6a16f8881e6de8bee20ffa843814652be5bcf260d0bef2ecc8c6ab0b41d9478570b431d7b59aaa6c7167253555de7451ea6b111062d5a74cb26995795f58388cd03f9c497ec8f97abca7706501f4aad85599826331fba78d18c74b8faf28764355ee658ce3def1b983c65f6b2cfced0a5a2234bd7b"}}, {0x98, &(0x7f00000003c0)=@string={0x98, 0x3, "18e7e707071470fadce09a4c38033d8c61044569ac01f11aea2995d445a54d9adbbd2670c8ef3cb60946c2cc89fd1c6d2861c5f306377b295a04276e7a0fb4683144755c9d81c315a806b0823946e66732439da73739ee4a0f90a1ecbd88b8aef67859e1a28ac0c7ce822c90fd63f7a456de5d4849de5ba972798ff5e2bb8d8969f7983caf7e3572999bfabf4de18835c559dd59632f"}}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) keyctl$invalidate(0x15, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, &(0x7f0000000500)={0x40, 0x2, 0x32, {0x32, 0x2, "5b2a165645b22eb78ba12dd600947aa4713796b73460293c126c84869cc53be72558cc7575e2548c182836dab067f62a"}}, &(0x7f0000000540)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "a8dc1fdbcedfc3a4f5965dac9ac654910595e4150ea4b0b535232310cca41fef7615fba8c6b917a1dea30b47a450fbe7beb6f0770495f534f046334b7eb7ea73c02a53a548754eed8048d654937365156565634a48d2434ef06822608d334a5e8f8951f463958141f63db0e55f47dd52592e10e1ecd6183e68388d8816798cdde5f386719b7c9645e53da59ed4c72dd066b99abf89bb2d9caf87f43bcfc890f9589e4bbff26ebd06e5839993280120504f2c2468e69438be5aab2fb945a9044385f67c3efe3d0a33f8d6a13f43e9acebc43e6d5da9ff"}}, &(0x7f0000000640)={0x0, 0x22, 0x4, {[@global=@item_012={0x2, 0x1, 0x5, "eb39"}, @global=@item_012={0x0, 0x1, 0x8}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff, 0x9, 0x1, {0x22, 0x433}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x20, 0x0, 0x52, "0c22f7db2b5ec88aeb196006f428d0da53500c6b85477ece5b9020507df73ba5d854e8823ec95be77c20de1c978cf2c80e1d580725a334702085f063ed2dc0c086d095fd80e4ed7cd1c40a496af9c6d6e158"}, &(0x7f0000000780)={0x0, 0xa, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x11}, &(0x7f0000000800)={0x20, 0x1, 0x4d, "3b181250b15f90926f4c5160e4a2db5f05f9d047f7c8f3dd2dae62156e2363b2901a72548bb704289837ff27cf34a90cd21d009457e5f9831dd966913bfe9b518d15c5c7ac85e674f5810edd9d"}, &(0x7f0000000880)={0x20, 0x3, 0x1}}) 2.793884301s ago: executing program 4 (id=673): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b708000008", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000013c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r8}}]}, {0x4, 0x6, "b1a0a8c29f95e001860674a8c31f811e72577da3db00e8460eedd9985038c13872388f2253dc40a273cd15e2c982b8551fe7cf67818c6c3e4d07a16a7ee2ecd9a6284f2451154f4b897afab3b2fd3b9a14dd6d8e8994048728dff4189640af3f2f8e63dc22591532"}, {0xc}, {0x2a}}}]}, {0x0, 0x1, [@m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @link_local}]}, {0x0, 0x6, "c17a9b161aa1ed359f8ca84a68b7fe7b96e7051b71ab820cd0dfd3c7ec3c0cd52a0f261f6eeb5c8e16517ae2b2d7ebee61fc09d2318aaa2744c2f1ec3d4ada09b9e0e10a09033a0f67d4e9bdfbb8e06b22bb777c3c86c97cba364bc1d6534d4af847aa94c37cfcc11f39abb2038c67b49ee558c9178643aacdac547419795884fe87c2853b84764bc83c1c94089ab9b8e9171095b01800b90bd1fecd5fe9f81b984e1823193247"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_bpf={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS, @TCA_ACT_BPF_OPS_LEN, @TCA_ACT_BPF_OPS={0x0, 0x4, [{}, {}, {}, {}, {}, {}]}]}, {0x0, 0x6, "d4a1b0177987526d421555722f2b33a00cf4e440b78d80a2b6dc9fc0ee8f7eab3a8f64d631d09ee020f4d5a5f6c958e6d0577dfe59bd8edf2b30ae8c373897e42d8b5ce0ad0bf9d4"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x1}}}}, @m_connmark={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS, @TCA_CONNMARK_PARMS]}, {0x0, 0x6, "357e55c8d11fc37316b5c890f2c5260971cd48bd4572494b551cb5a84d522c3a7cff2143d2bc99dbb83a300fc9f05f8c"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_mirred={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS]}, {0x0, 0x6, "e429537536772ddb55fc856055fe83d0b4b9c7038ce61e970ce9bc626896f6597b1f0d95a49b"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @broadcast}, @TCA_IFE_DMAC={0x0, 0x3, @random="e42f4a24bfd8"}]}, {0x0, 0x6, "3f96d8e0e4e426165d2d2bdad144e735babe6c27b77b211a0e5d3e145c75bdc82df3bef1308a9c2f1df4d9ff4bd68af3989432a38049d0b2a6cc43d78cd088b796ffa7e07b8c270ab4404f6679050ac700d0220f492ad182359d77514e8333b76c867045a8775ccf00563c8838881dcac0580d8891ea864db4cda38cd674d28813"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}]}, {0x0, 0x1, [@m_tunnel_key={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS, @TCA_TUNNEL_KEY_ENC_DST_PORT, @TCA_TUNNEL_KEY_ENC_KEY_ID, @TCA_TUNNEL_KEY_ENC_DST_PORT]}, {0x0, 0x6, "7c9682c1a82229bbdbef684ab89cee6544447f12aca99ca80e6edd710effdaa5a9db63a0fe63fdf0ab19cb1a410b2fab05d0298a5a97f7eb71c2e7e37d9579c4ccf529cde7b0a48591862bac68201493466b3f145454f9f6dc211b1bd2bd82d200d78ef8b03c121f30334d5dfb185f08275a0c2602a8455d72e156c5f9e5272eb3165d88b466"}, {}, {0x0, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING, @TCA_SKBEDIT_PRIORITY, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "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"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x35}, @TCA_SKBEDIT_MARK, @TCA_SKBEDIT_PARMS, @TCA_SKBEDIT_PRIORITY, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "abc14bfebf112ecea3ac15c5012181eeb7a0b6bd15d03b707ced5f8ba073c8f6a9a479311f95c654326031b3cc982385fa58ba389376d90717a824b4a91fff3e662e59b01f1cc7241dc9629cc4dcc05e8bb6a2f75d1a7abd1b5d81de96735c88727665098ef8b387ac3c4f545a449f77d754cdd77f645543516966034536c6a1318e86655af02c8bd792618f46a80e11e631b7751dbfc00d3ce26cf7f9f31148eb7d45610557de5cd40e851a93d3df720762f458de15062301df79ba7ff93ac0edcde3e41d6f840bfacbba953abf54fcfe0f4f1d"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x3, 0x3}}}}]}]}, 0x68}}, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000480)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f0000000600)=""/99}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 2.760283582s ago: executing program 2 (id=684): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611200"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x70) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00000008c0)=""/189, 0xbd}], 0x1, 0x20000000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000002c0)) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in, @in6=@remote, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa0, 0x90, 0x2f}, {0x0, 0x0, 0x1, 0x0, 0x81, 0x7a7, 0x0, 0x8}, {0x3, 0x0, 0x1}, 0x97, 0x6e6bba, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x4d5, 0x3c}, 0x0, @in6=@remote, 0x0, 0x0, 0x1, 0x40}}, 0xe8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/4096, 0x1000, 0x10020, 0x0, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)="03", 0x1}], 0x1) (async) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)="03", 0x1}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x2, [@union={0x7, 0x3, 0x0, 0x5, 0x0, 0x6, [{0x6, 0x4}, {0x7, 0x1, 0x1}, {0x4, 0x5, 0x7000}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x3f}}]}}, &(0x7f00000014c0)=""/4088, 0x7a, 0xff8, 0x1}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x2, [@union={0x7, 0x3, 0x0, 0x5, 0x0, 0x6, [{0x6, 0x4}, {0x7, 0x1, 0x1}, {0x4, 0x5, 0x7000}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x3f}}]}}, &(0x7f00000014c0)=""/4088, 0x7a, 0xff8, 0x1}, 0x20) ioctl$TCFLSH(r1, 0x540b, 0x2) (async) ioctl$TCFLSH(r1, 0x540b, 0x2) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000a60a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f9ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x36) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) 2.743773713s ago: executing program 2 (id=685): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000000500)="f4970e2c0873301b0f5d46eec8427fabe7ea068c0face18b6d966eed077db6af4d14ff9cf780147ce1313cb9674a364a5c247b04a8e21dce3550dd959e7dcd0759ce15a61dd85d12ebc2d3ee0b60ebec8828045c122a5d3095bd1a09ff31c753c3ff6e67eb7ee8b612"}, 0x20) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) socket(0x0, 0x0, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8}]}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x60, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2008048}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x461c0}, 0x20004854) r4 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fcc0ffff00000000000000ff0bc0fe000010000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x1808497, &(0x7f0000000540), 0x0, 0x51a, &(0x7f0000000580)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) 2.553076641s ago: executing program 4 (id=686): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x1) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) 2.509462532s ago: executing program 4 (id=687): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400c810}, 0x6008894) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x1c, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x2}, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001140)={@flat, @flat, @flat=@handle={0x73682a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = dup2(r7, r8) sendmmsg$inet(r9, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee5", 0xbe}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba0", 0x6d}], 0x4}}], 0x1, 0x0) sendmsg$TIPC_NL_SOCK_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2b8}}, 0x0) sendto$inet(r7, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x16c6, 0x11, 0x0, 0x27) prctl$PR_CAPBSET_DROP(0x18, 0x27) 2.387575417s ago: executing program 1 (id=688): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b708000008", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup(r5) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000013c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4, 0x6, "b1a0a8c29f95e001860674a8c31f811e72577da3db00e8460eedd9985038c13872388f2253dc40a273cd15e2c982b8551fe7cf67818c6c3e4d07a16a7ee2ecd9a6284f2451154f4b897afab3b2fd3b9a14dd6d8e8994048728dff4189640af3f2f8e63dc22591532"}, {0xc}, {0x2a}}}]}, {0x0, 0x1, [@m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @link_local}]}, {0x0, 0x6, "c17a9b161aa1ed359f8ca84a68b7fe7b96e7051b71ab820cd0dfd3c7ec3c0cd52a0f261f6eeb5c8e16517ae2b2d7ebee61fc09d2318aaa2744c2f1ec3d4ada09b9e0e10a09033a0f67d4e9bdfbb8e06b22bb777c3c86c97cba364bc1d6534d4af847aa94c37cfcc11f39abb2038c67b49ee558c9178643aacdac547419795884fe87c2853b84764bc83c1c94089ab9b8e9171095b01800b90bd1fecd5fe9f81b984e1823193247"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_bpf={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS, @TCA_ACT_BPF_OPS_LEN, @TCA_ACT_BPF_OPS={0x0, 0x4, [{}, {}, {}, {}, {}, {}]}]}, {0x0, 0x6, "d4a1b0177987526d421555722f2b33a00cf4e440b78d80a2b6dc9fc0ee8f7eab3a8f64d631d09ee020f4d5a5f6c958e6d0577dfe59bd8edf2b30ae8c373897e42d8b5ce0ad0bf9d4"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x1}}}}, @m_connmark={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS, @TCA_CONNMARK_PARMS]}, {0x0, 0x6, "357e55c8d11fc37316b5c890f2c5260971cd48bd4572494b551cb5a84d522c3a7cff2143d2bc99dbb83a300fc9f05f8c"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_mirred={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS]}, {0x0, 0x6, "e429537536772ddb55fc856055fe83d0b4b9c7038ce61e970ce9bc626896f6597b1f0d95a49b"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @broadcast}, @TCA_IFE_DMAC={0x0, 0x3, @random="e42f4a24bfd8"}]}, {0x0, 0x6, "3f96d8e0e4e426165d2d2bdad144e735babe6c27b77b211a0e5d3e145c75bdc82df3bef1308a9c2f1df4d9ff4bd68af3989432a38049d0b2a6cc43d78cd088b796ffa7e07b8c270ab4404f6679050ac700d0220f492ad182359d77514e8333b76c867045a8775ccf00563c8838881dcac0580d8891ea864db4cda38cd674d28813"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}]}, {0x0, 0x1, [@m_tunnel_key={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS, @TCA_TUNNEL_KEY_ENC_DST_PORT, @TCA_TUNNEL_KEY_ENC_KEY_ID, @TCA_TUNNEL_KEY_ENC_DST_PORT]}, {0x0, 0x6, "7c9682c1a82229bbdbef684ab89cee6544447f12aca99ca80e6edd710effdaa5a9db63a0fe63fdf0ab19cb1a410b2fab05d0298a5a97f7eb71c2e7e37d9579c4ccf529cde7b0a48591862bac68201493466b3f145454f9f6dc211b1bd2bd82d200d78ef8b03c121f30334d5dfb185f08275a0c2602a8455d72e156c5f9e5272eb3165d88b466"}, {}, {0x0, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING, @TCA_SKBEDIT_PRIORITY, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "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"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x35}, @TCA_SKBEDIT_MARK, @TCA_SKBEDIT_PARMS, @TCA_SKBEDIT_PRIORITY, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "abc14bfebf112ecea3ac15c5012181eeb7a0b6bd15d03b707ced5f8ba073c8f6a9a479311f95c654326031b3cc982385fa58ba389376d90717a824b4a91fff3e662e59b01f1cc7241dc9629cc4dcc05e8bb6a2f75d1a7abd1b5d81de96735c88727665098ef8b387ac3c4f545a449f77d754cdd77f645543516966034536c6a1318e86655af02c8bd792618f46a80e11e631b7751dbfc00d3ce26cf7f9f31148eb7d45610557de5cd40e851a93d3df720762f458de15062301df79ba7ff93ac0edcde3e41d6f840bfacbba953abf54fcfe0f4f1d"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x3, 0x3}}}}]}]}, 0x68}}, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000480)={0x1, r3}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f0000000600)=""/99}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 2.348615178s ago: executing program 1 (id=690): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040ef0ed300000000010902240001000000cb090400000003ff03000921000001220000090599fba0ca6c2bddc06fd5b2058c81030000000059da0000ffff0000003ab0d2d500"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_free_percpu\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='xprtrdma_marshal\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x0, 0x21, 0x1a, {0x1a, 0x1c, "d2cc2317e09d2f6a1c1231483de5c563286025d73964e4e1"}}, &(0x7f00000000c0)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "d131c0f96899f3bbe4f51850c06a15edaf1ebcacbfdad72d1211fa1b32340c1d5af9c37a840a17e30b045b69c972262b28c74ab9ef454b6eb2706bebd49ac06e6eb98b28de26871358e862d9d557d9957685b0b94bc641430877a7bb"}}, &(0x7f0000000140)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x6, 'fa'}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe35, 0x68, 0x1, {0x22, 0x2fa}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x0, 0x10, 0x4a, "59ae4dfbc48b151d1794473cf08f29017c3a0769d65ad1fc1a5ce2e9fe8fc27d56dffa94bcbdd96cbd893aa56c3152fcf17faabb5292851c5181ea7f173ee73e18cbf8981cd260b01ba3"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x1, 0xe7, "c66579d4c80c337dc0d6668d1d6332b81f45ae968eb7603f225a7d68099e405945fdfaf0e6a21ae899feca3604c526d2755a48fbf897c67e2c4d175319ae5ab9d0da3d23e8336bb53088fa4af1bac456ae3cc84c3fc5318655a014b70420a67af0215625a3c5976de7929dfa9276113d3cee641b545da5bd45a97f449a1545bd7e1221c0f7b9156d0c6399b81183b48eddceecfd4a08d8364d01cbc7399edbb2666da6191526fd2124f6f9acf2c95e5ca961a5130d47ac2540ce25d24e542905bd02a69e83b653a6c96d14a14505243e3c515629164684cb2d7899e027952b7883892ce801c2bc"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x3}}) 1.568457119s ago: executing program 4 (id=692): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x2, 0x2, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x1, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000480), &(0x7f0000000500)}, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x5, {0x5, 0x0, "22138a"}}, 0x0}, 0x0) 860.389526ms ago: executing program 0 (id=697): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b708000008", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000013c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r8}}]}, {0x4, 0x6, "b1a0a8c29f95e001860674a8c31f811e72577da3db00e8460eedd9985038c13872388f2253dc40a273cd15e2c982b8551fe7cf67818c6c3e4d07a16a7ee2ecd9a6284f2451154f4b897afab3b2fd3b9a14dd6d8e8994048728dff4189640af3f2f8e63dc22591532"}, {0xc}, {0x2a}}}]}, {0x0, 0x1, [@m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @link_local}]}, {0x0, 0x6, "c17a9b161aa1ed359f8ca84a68b7fe7b96e7051b71ab820cd0dfd3c7ec3c0cd52a0f261f6eeb5c8e16517ae2b2d7ebee61fc09d2318aaa2744c2f1ec3d4ada09b9e0e10a09033a0f67d4e9bdfbb8e06b22bb777c3c86c97cba364bc1d6534d4af847aa94c37cfcc11f39abb2038c67b49ee558c9178643aacdac547419795884fe87c2853b84764bc83c1c94089ab9b8e9171095b01800b90bd1fecd5fe9f81b984e1823193247"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_bpf={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS, @TCA_ACT_BPF_OPS_LEN, @TCA_ACT_BPF_OPS={0x0, 0x4, [{}, {}, {}, {}, {}, {}]}]}, {0x0, 0x6, "d4a1b0177987526d421555722f2b33a00cf4e440b78d80a2b6dc9fc0ee8f7eab3a8f64d631d09ee020f4d5a5f6c958e6d0577dfe59bd8edf2b30ae8c373897e42d8b5ce0ad0bf9d4"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x1}}}}, @m_connmark={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS, @TCA_CONNMARK_PARMS]}, {0x0, 0x6, "357e55c8d11fc37316b5c890f2c5260971cd48bd4572494b551cb5a84d522c3a7cff2143d2bc99dbb83a300fc9f05f8c"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_mirred={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS]}, {0x0, 0x6, "e429537536772ddb55fc856055fe83d0b4b9c7038ce61e970ce9bc626896f6597b1f0d95a49b"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @broadcast}, @TCA_IFE_DMAC={0x0, 0x3, @random="e42f4a24bfd8"}]}, {0x0, 0x6, "3f96d8e0e4e426165d2d2bdad144e735babe6c27b77b211a0e5d3e145c75bdc82df3bef1308a9c2f1df4d9ff4bd68af3989432a38049d0b2a6cc43d78cd088b796ffa7e07b8c270ab4404f6679050ac700d0220f492ad182359d77514e8333b76c867045a8775ccf00563c8838881dcac0580d8891ea864db4cda38cd674d28813"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}]}, {0x0, 0x1, [@m_tunnel_key={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS, @TCA_TUNNEL_KEY_ENC_DST_PORT, @TCA_TUNNEL_KEY_ENC_KEY_ID, @TCA_TUNNEL_KEY_ENC_DST_PORT]}, {0x0, 0x6, "7c9682c1a82229bbdbef684ab89cee6544447f12aca99ca80e6edd710effdaa5a9db63a0fe63fdf0ab19cb1a410b2fab05d0298a5a97f7eb71c2e7e37d9579c4ccf529cde7b0a48591862bac68201493466b3f145454f9f6dc211b1bd2bd82d200d78ef8b03c121f30334d5dfb185f08275a0c2602a8455d72e156c5f9e5272eb3165d88b466"}, {}, {0x0, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING, @TCA_SKBEDIT_PRIORITY, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "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"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x35}, @TCA_SKBEDIT_MARK, @TCA_SKBEDIT_PARMS, @TCA_SKBEDIT_PRIORITY, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "abc14bfebf112ecea3ac15c5012181eeb7a0b6bd15d03b707ced5f8ba073c8f6a9a479311f95c654326031b3cc982385fa58ba389376d90717a824b4a91fff3e662e59b01f1cc7241dc9629cc4dcc05e8bb6a2f75d1a7abd1b5d81de96735c88727665098ef8b387ac3c4f545a449f77d754cdd77f645543516966034536c6a1318e86655af02c8bd792618f46a80e11e631b7751dbfc00d3ce26cf7f9f31148eb7d45610557de5cd40e851a93d3df720762f458de15062301df79ba7ff93ac0edcde3e41d6f840bfacbba953abf54fcfe0f4f1d"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x3, 0x3}}}}]}]}, 0x68}}, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000480)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f0000000600)=""/99}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 811.839719ms ago: executing program 0 (id=698): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x1) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) 781.24337ms ago: executing program 0 (id=699): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000000000000000000000000000061106500000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffcc0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRESDEC=r2, @ANYRESOCT=0x0], 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) 706.243743ms ago: executing program 0 (id=700): mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8100, 0x10) mknodat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x8000, 0x2) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, &(0x7f0000000280)=ANY=[@ANYBLOB]) 705.876533ms ago: executing program 0 (id=701): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b708000008", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup(r5) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000013c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4, 0x6, "b1a0a8c29f95e001860674a8c31f811e72577da3db00e8460eedd9985038c13872388f2253dc40a273cd15e2c982b8551fe7cf67818c6c3e4d07a16a7ee2ecd9a6284f2451154f4b897afab3b2fd3b9a14dd6d8e8994048728dff4189640af3f2f8e63dc22591532"}, {0xc}, {0x2a}}}]}, {0x0, 0x1, [@m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @link_local}]}, {0x0, 0x6, "c17a9b161aa1ed359f8ca84a68b7fe7b96e7051b71ab820cd0dfd3c7ec3c0cd52a0f261f6eeb5c8e16517ae2b2d7ebee61fc09d2318aaa2744c2f1ec3d4ada09b9e0e10a09033a0f67d4e9bdfbb8e06b22bb777c3c86c97cba364bc1d6534d4af847aa94c37cfcc11f39abb2038c67b49ee558c9178643aacdac547419795884fe87c2853b84764bc83c1c94089ab9b8e9171095b01800b90bd1fecd5fe9f81b984e1823193247"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_bpf={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS, @TCA_ACT_BPF_OPS_LEN, @TCA_ACT_BPF_OPS={0x0, 0x4, [{}, {}, {}, {}, {}, {}]}]}, {0x0, 0x6, "d4a1b0177987526d421555722f2b33a00cf4e440b78d80a2b6dc9fc0ee8f7eab3a8f64d631d09ee020f4d5a5f6c958e6d0577dfe59bd8edf2b30ae8c373897e42d8b5ce0ad0bf9d4"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x1}}}}, @m_connmark={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS, @TCA_CONNMARK_PARMS]}, {0x0, 0x6, "357e55c8d11fc37316b5c890f2c5260971cd48bd4572494b551cb5a84d522c3a7cff2143d2bc99dbb83a300fc9f05f8c"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_mirred={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS, @TCA_MIRRED_PARMS]}, {0x0, 0x6, "e429537536772ddb55fc856055fe83d0b4b9c7038ce61e970ce9bc626896f6597b1f0d95a49b"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_ife={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @broadcast}, @TCA_IFE_DMAC={0x0, 0x3, @random="e42f4a24bfd8"}]}, {0x0, 0x6, "3f96d8e0e4e426165d2d2bdad144e735babe6c27b77b211a0e5d3e145c75bdc82df3bef1308a9c2f1df4d9ff4bd68af3989432a38049d0b2a6cc43d78cd088b796ffa7e07b8c270ab4404f6679050ac700d0220f492ad182359d77514e8333b76c867045a8775ccf00563c8838881dcac0580d8891ea864db4cda38cd674d28813"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}]}, {0x0, 0x1, [@m_tunnel_key={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS, @TCA_TUNNEL_KEY_ENC_DST_PORT, @TCA_TUNNEL_KEY_ENC_KEY_ID, @TCA_TUNNEL_KEY_ENC_DST_PORT]}, {0x0, 0x6, "7c9682c1a82229bbdbef684ab89cee6544447f12aca99ca80e6edd710effdaa5a9db63a0fe63fdf0ab19cb1a410b2fab05d0298a5a97f7eb71c2e7e37d9579c4ccf529cde7b0a48591862bac68201493466b3f145454f9f6dc211b1bd2bd82d200d78ef8b03c121f30334d5dfb185f08275a0c2602a8455d72e156c5f9e5272eb3165d88b466"}, {}, {0x0, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING, @TCA_SKBEDIT_PRIORITY, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "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"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x35}, @TCA_SKBEDIT_MARK, @TCA_SKBEDIT_PARMS, @TCA_SKBEDIT_PRIORITY, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "abc14bfebf112ecea3ac15c5012181eeb7a0b6bd15d03b707ced5f8ba073c8f6a9a479311f95c654326031b3cc982385fa58ba389376d90717a824b4a91fff3e662e59b01f1cc7241dc9629cc4dcc05e8bb6a2f75d1a7abd1b5d81de96735c88727665098ef8b387ac3c4f545a449f77d754cdd77f645543516966034536c6a1318e86655af02c8bd792618f46a80e11e631b7751dbfc00d3ce26cf7f9f31148eb7d45610557de5cd40e851a93d3df720762f458de15062301df79ba7ff93ac0edcde3e41d6f840bfacbba953abf54fcfe0f4f1d"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x3, 0x3}}}}]}]}, 0x68}}, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000480)={0x1, r3}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f0000000600)=""/99}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 643.667525ms ago: executing program 0 (id=702): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400c810}, 0x6008894) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x1c, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x2}, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001140)={@flat, @flat, @flat=@handle={0x73682a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = dup2(r7, r8) sendmmsg$inet(r9, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee5", 0xbe}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba0", 0x6d}], 0x4}}], 0x1, 0x0) sendmsg$TIPC_NL_SOCK_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2b8}}, 0x0) sendto$inet(r7, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x16c6, 0x11, 0x0, 0x27) prctl$PR_CAPBSET_DROP(0x18, 0x27) 616.893216ms ago: executing program 2 (id=703): syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) chdir(&(0x7f0000000000)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x300000000000000) 543.780029ms ago: executing program 2 (id=704): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@default_permissions}], [], 0x2c}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x141000, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x2823002, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1005848, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004400)={0x2020}, 0x2020) 249.34271ms ago: executing program 3 (id=705): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="ab9bcfbd850ccbb3aad7ffc90f0aeb0af5dbce120d555f32fc1d1d16df579c8b7c20aeda96fbd665", 0x28, 0x6000000000000000, 0x0, 0x0) 130.631545ms ago: executing program 2 (id=706): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500004000000b0a71114200000000008510000002000000850000000500000095000000000000009500a50101000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 130.353505ms ago: executing program 3 (id=707): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@usrquota}, {@nobarrier}, {@noauto_da_alloc}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0xbfeb202885420d37) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000200), 0x1, 0x545, &(0x7f0000000bc0)="$eJzs3c9rHOUbAPBnNkl/pd8mXxT8cQootFC7aZqqFQTr3WJBPddlsw0lm0zJbkoTCrUHz3qoJ0+exZNnQfwfPCh48iK1RYpQvUVmM5tuk910m26y1fl8YLbvO+9s33l25nl5Z2eWBFBYU9lLKeKliPg8iZjoaBuNvHFqY7sH929U/7p/o5rE+voHfySR5Ova2yf5v+N55cWI+OHTiJOl7f02VtcWKvV6bTmvTzcXr043VtdOXVmszNfma0uz52ZfPzszc+bsuYHFWr5ZOXT3i/fv3l7+9dRHnz04nsT5OJq3dcYxKFMxlX8mY3F+S9vMoDsbsmTYO8CujOR5PhbZGDARI3nWA/99NyNiHSioRP5DQbXnAdn1b3sZ7oxkf917d+MCaHv8oxvfjcTEenZtdOTP5JEro+x6d3IA/Wd9nD958fdsiT36HgKgm09uRcTp0dHt41+Sj3+7d7qPbbb2YfyD/fN9Nv95rdv8p5Tn5qHW69b5z3iX3N2Nx+d/6c4Auukpm/+93XX+u3nTanIkr/2vNecbSy5fqdeyse1YRJyIsYNZfaf7OT8dfmuiV1vn/C9bsv7bc8F8P+6MHnz0PXOVZuVpYu5071bEy13nv8nm8U+6HP/s87jYZx/Hnnvj515tj49/b61/FXG86/F/eEcr2fn+5HTrfJhunxXbzY6svdCr/2HHnx3/IzvHP5l03q9tPHkfr34z/mOvtt2e/weSD1vlA/m665Vmc3km4kDy3vb1Zx6+t11vb5/Ff+KVnce/buf/4Yj4uM/4v5v9+pfdx7+3svjnnuj4P3nhy/Tbd3r139/xP9sqncjX9DP+9buDT/PZAQAAAAAAwLOmFBFHIymVN8ulUrm88XzH83GkVE8bzZOX05WluWj9VnYyxkrtO90THc9DzOTPw7brZ7bUZyPi/xFxe+Rwq16upvW5YQcPAAAAAAAAAAAAAAAAAAAAz4jxHr//z/w2Muy9A/acP/kNxSX/objkPxSX/Ifikv9QXPIfikv+Q3HJfygu+Q/FJf8BAAAAAAAAAAAAAAAAAAAAAAAAAABgoC5euJAt63/fv1HN6nPXVlcW0mun5mqNhfLiSrVcTZevlufTdL5eK1fTxcf9f/U0vfpmLK1cn27WGs3pxurapcV0Zal56cpiZb52qTa2L1EBAAAAAAAAAAAAAAAAAADAv0tjdW2hUq/XlhUUFBQ2C8MemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgoX8CAAD//z8IGNY=") creat(&(0x7f0000000080)='./file1\x00', 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) listxattr(&(0x7f00000002c0)='./file1\x00', 0x0, 0x51) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRESHEX], 0x1, 0x36a, &(0x7f0000000840)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000000080)={@id={0x2, 0x0, @auto="72138694b76c4a34f52ef388a85d8f6e"}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000130029"], 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="70021000130029"], 0x270}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd"], 0xfdef) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xfd14) fallocate(r4, 0x100000010, 0x2, 0x1000) 0s ago: executing program 2 (id=708): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/protocols\x00') read$FUSE(r0, &(0x7f0000001940)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0x10d}], 0x1, 0x0, 0x0) read$FUSE(r0, 0x0, 0xb00000000000000) kernel console output (not intermixed with test programs): endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 46.556929][ T18] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 46.570144][ T18] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 46.578978][ T18] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.600109][ T1323] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 46.659954][ T611] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 46.668120][ T611] usb 4-1: config 179 has no interface number 0 [ 46.674323][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 46.679280][ T604] usb 2-1: Using ep0 maxpacket: 32 [ 46.684616][ T611] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 46.695532][ T611] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 46.707174][ T611] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 46.718555][ T611] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 46.728532][ T611] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 46.741862][ T611] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 46.750757][ T611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.769974][ T1337] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 46.791063][ T611] xpad: probe of 4-1:179.65 failed with error -5 [ 46.800077][ T604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.810909][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.821615][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.831813][ T604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.841785][ T604] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 46.851104][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 46.862180][ T604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.870831][ T604] usb 2-1: config 0 descriptor?? [ 46.910424][ T604] hub 2-1:0.0: USB hub found [ 46.919951][ T369] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 46.992417][ T611] usb 4-1: USB disconnect, device number 2 [ 47.030368][ T5] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 47.034776][ T18] usb 3-1: USB disconnect, device number 2 [ 47.039915][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.044969][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 47.052971][ T5] usb 5-1: Product: 亻װ밴䌅῞硜醻럊珊牮嫜겫ঠ㥨黹έ咶㛄エს䎒믔ﴍ琴䔁档㩚ᩔ辜뵠 [ 47.060760][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 47.073569][ T5] usb 5-1: Manufacturer: ␁ [ 47.086625][ T5] usb 5-1: SerialNumber: 袶媑煬鱼芠ⲫ䛹ຬ茉ᔸࣴꚕ계랔轰赍锍蛔 [ 47.130050][ T604] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 47.159924][ T369] usb 1-1: Using ep0 maxpacket: 16 [ 47.280042][ T369] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.290919][ T369] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.300518][ T369] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 47.461810][ T1366] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 47.476788][ T1366] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 47.491555][ T369] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 47.494406][ T1366] xt_TCPMSS: Only works on TCP SYN packets [ 47.500479][ T369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.500492][ T369] usb 1-1: Product: 亻װ밴䌅῞硜醻럊珊牮嫜겫ঠ㥨黹έ咶㛄エს䎒믔ﴍ琴䔁档㩚ᩔ辜뵠 [ 47.500500][ T369] usb 1-1: Manufacturer: ␁ [ 47.500509][ T369] usb 1-1: SerialNumber: 袶媑煬鱼芠ⲫ䛹ຬ茉ᔸࣴꚕ계랔轰赍锍蛔 [ 47.550074][ T5] usbhid 5-1:1.0: can't add hid device: -22 [ 47.555851][ T5] usbhid: probe of 5-1:1.0 failed with error -22 [ 47.624748][ T1375] debugfs: Directory 'vcpu2' with parent '1375-4' already present! [ 47.681956][ T1382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.365'. [ 47.839439][ T1388] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 47.891056][ T1388] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 47.908495][ T1388] xt_TCPMSS: Only works on TCP SYN packets [ 47.920050][ T369] usbhid 1-1:1.0: can't add hid device: -22 [ 47.925819][ T369] usbhid: probe of 1-1:1.0 failed with error -22 [ 48.179882][ T5] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 48.539917][ T5] usb 3-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 48.550274][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 48.567575][ T5] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 48.577805][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.599090][ T5] usb 3-1: config 0 descriptor?? [ 48.706183][ T1394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.367'. [ 49.019890][ T18] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 49.050688][ T340] usb 5-1: USB disconnect, device number 2 [ 49.150958][ T1400] FAULT_INJECTION: forcing a failure. [ 49.150958][ T1400] name failslab, interval 1, probability 0, space 0, times 1 [ 49.164368][ T1400] CPU: 1 PID: 1400 Comm: syz.1.370 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 49.173878][ T1400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 49.183771][ T1400] Call Trace: [ 49.186915][ T1400] dump_stack+0x1d8/0x241 [ 49.189953][ T604] usbhid 2-1:0.0: can't add hid device: -71 [ 49.191066][ T1400] ? panic+0x89d/0x89d [ 49.191082][ T1400] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 49.196861][ T604] usbhid: probe of 2-1:0.0 failed with error -71 [ 49.200708][ T1400] ? up_read+0x6f/0x1b0 [ 49.200716][ T1400] ? populate_vma_page_range+0xf0/0xf0 [ 49.200732][ T1400] should_fail+0x71f/0x880 [ 49.200742][ T1400] ? setup_fault_attr+0x3d0/0x3d0 [ 49.200755][ T1400] ? get_user_pages_unlocked+0x55f/0x780 [ 49.200774][ T1400] ? common_interrupt+0xa/0xf [ 49.230462][ T604] usb 2-1: USB disconnect, device number 2 [ 49.230947][ T1400] ? jbd2__journal_start+0x10c/0x6c0 [ 49.230962][ T1400] should_failslab+0x5/0x20 [ 49.255989][ T1400] kmem_cache_alloc+0x28/0x250 [ 49.260600][ T1400] jbd2__journal_start+0x10c/0x6c0 [ 49.265540][ T1400] ext4_get_block_trans+0x3f3/0x5b0 [ 49.270572][ T1400] ? ext4_dio_get_block+0xb0/0xb0 [ 49.275425][ T1400] ? _copy_from_iter_full+0xa80/0xa80 [ 49.280642][ T1400] ext4_dio_get_block_unwritten_async+0x68/0x280 [ 49.286885][ T1400] ? ext4_dio_get_block_unwritten_sync+0x100/0x100 [ 49.293217][ T1400] __blockdev_direct_IO+0x16b1/0x49b0 [ 49.298436][ T1400] ? sb_init_dio_done_wq+0x80/0x80 [ 49.303373][ T1400] ? ext4_dio_get_block_unwritten_sync+0x100/0x100 [ 49.309714][ T1400] ? jbd2_journal_start_reserved+0x540/0x540 [ 49.315698][ T1400] ? down_write+0xd7/0x150 [ 49.320046][ T1400] ? up_read+0x1b0/0x1b0 [ 49.324115][ T1400] ? kmem_cache_alloc+0xd9/0x250 [ 49.328900][ T1400] ? ext4_dio_get_block_unwritten_sync+0x100/0x100 [ 49.335313][ T1400] ext4_direct_IO+0xc36/0x19a0 [ 49.339920][ T1400] ? ext4_releasepage+0x2b0/0x2b0 [ 49.344770][ T1400] ? memset+0x1f/0x40 [ 49.348599][ T1400] ? invalidate_inode_pages2_range+0xe6f/0xf30 [ 49.354617][ T1400] ? invalidate_mapping_pages+0xa50/0xa50 [ 49.360132][ T1400] ? kmem_cache_free+0x10b/0x2c0 [ 49.365347][ T1400] ? jbd2_journal_stop+0xb92/0x11d0 [ 49.370385][ T1400] ? ext4_blocks_for_truncate+0x210/0x210 [ 49.375943][ T1400] ? filemap_check_errors+0xda/0x130 [ 49.381056][ T1400] generic_file_direct_write+0x509/0x740 [ 49.386695][ T1400] ? preempt_count_add+0x8f/0x180 [ 49.391812][ T1400] ? pagecache_write_end+0xa0/0xa0 [ 49.396931][ T1400] ? file_update_time+0x400/0x470 [ 49.401791][ T1400] ? file_remove_privs+0x640/0x640 [ 49.406739][ T1400] ? arch_stack_walk+0xf5/0x140 [ 49.411427][ T1400] ? iov_iter_discard+0xa0/0xa0 [ 49.416112][ T1400] ? down_write_trylock+0xd7/0x130 [ 49.421063][ T1400] __generic_file_write_iter+0x27d/0x530 [ 49.426533][ T1400] ext4_file_write_iter+0x8f8/0x10e0 [ 49.431653][ T1400] ? ext4_file_read_iter+0x140/0x140 [ 49.437300][ T1400] aio_write+0x47e/0x610 [ 49.441376][ T1400] ? aio_read+0x500/0x500 [ 49.445541][ T1400] ? fget_many+0x20/0x20 [ 49.449626][ T1400] ? io_submit_one+0x157/0x1d80 [ 49.454328][ T1400] io_submit_one+0x7e6/0x1d80 [ 49.458825][ T1400] ? page_fault+0x2f/0x40 [ 49.462988][ T1400] ? lookup_ioctx+0x470/0x470 [ 49.467494][ T1400] ? lookup_ioctx+0x281/0x470 [ 49.472020][ T1400] ? __sb_end_write+0xc4/0x120 [ 49.476695][ T1400] ? vfs_write+0x41a/0x4e0 [ 49.480948][ T1400] __se_sys_io_submit+0x16f/0x3c0 [ 49.485807][ T1400] ? __x64_sys_io_submit+0x80/0x80 [ 49.490753][ T1400] ? __ia32_sys_read+0x80/0x80 [ 49.495354][ T1400] ? do_syscall_64+0x7f/0x1c0 [ 49.499867][ T1400] do_syscall_64+0xca/0x1c0 [ 49.504208][ T1400] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 49.509952][ T1400] RIP: 0033:0x7f97de3ccb99 [ 49.514194][ T1400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.533635][ T1400] RSP: 002b:00007f97dd64e048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 49.541872][ T1400] RAX: ffffffffffffffda RBX: 00007f97de55afa0 RCX: 00007f97de3ccb99 [ 49.549769][ T1400] RDX: 0000000020000540 RSI: 000000000000003b RDI: 00007f97de52e000 [ 49.557752][ T1400] RBP: 00007f97dd64e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 49.565596][ T1400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.573472][ T1400] R13: 000000000000000b R14: 00007f97de55afa0 R15: 00007fffcf6425e8 [ 49.695779][ T18] usb 4-1: Using ep0 maxpacket: 16 [ 49.703043][ T369] usb 1-1: USB disconnect, device number 2 [ 49.929956][ T18] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.947262][ T18] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.964548][ T18] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 50.043244][ T1421] debugfs: Directory 'vcpu2' with parent '1421-4' already present! [ 50.117497][ T1426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.377'. [ 50.140055][ T18] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 50.150453][ T18] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.158397][ T18] usb 4-1: Product: 亻װ밴䌅῞硜醻럊珊牮嫜겫ঠ㥨黹έ咶㛄エს䎒믔ﴍ琴䔁档㩚ᩔ辜뵠 [ 50.172160][ T18] usb 4-1: Manufacturer: ␁ [ 50.176654][ T18] usb 4-1: SerialNumber: 袶媑煬鱼芠ⲫ䛹ຬ茉ᔸࣴꚕ계랔轰赍锍蛔 [ 50.241072][ T1433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.379'. [ 50.548986][ T1437] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 50.550068][ T538] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 50.583089][ T1437] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 50.604301][ T1437] xt_TCPMSS: Only works on TCP SYN packets [ 50.620254][ T18] usbhid 4-1:1.0: can't add hid device: -22 [ 50.626283][ T18] usbhid: probe of 4-1:1.0 failed with error -22 [ 50.659935][ T5] usb 3-1: string descriptor 0 read error: -71 [ 50.671478][ T5] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 50.695642][ T5] usb 3-1: USB disconnect, device number 3 [ 50.711662][ T23] kauditd_printk_skb: 16 callbacks suppressed [ 50.711669][ T23] audit: type=1400 audit(1719834732.230:207): avc: denied { unmount } for pid=350 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 50.751745][ T23] audit: type=1400 audit(1719834732.270:208): avc: denied { ioctl } for pid=1441 comm="syz.2.381" path="socket:[17759]" dev="sockfs" ino=17759 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.785564][ T23] audit: type=1400 audit(1719834732.300:209): avc: denied { accept } for pid=1441 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.840358][ T538] usb 1-1: Using ep0 maxpacket: 16 [ 50.871185][ T23] audit: type=1400 audit(1719834732.390:210): avc: denied { write } for pid=1445 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.890965][ T23] audit: type=1400 audit(1719834732.410:211): avc: denied { read } for pid=1445 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.010703][ T538] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.029969][ T538] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.039690][ T538] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 51.212668][ T1458] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 51.226314][ T538] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 51.227525][ T1458] ext4 filesystem being mounted at /root/syzkaller.MaVPQh/57/bus supports timestamps until 2038 (0x7fffffff) [ 51.235465][ T538] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.246634][ T5] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 51.254781][ T538] usb 1-1: Product: 亻װ밴䌅῞硜醻럊珊牮嫜겫ঠ㥨黹έ咶㛄エს䎒믔ﴍ琴䔁档㩚ᩔ辜뵠 [ 51.274093][ T538] usb 1-1: Manufacturer: ␁ [ 51.278510][ T538] usb 1-1: SerialNumber: 袶媑煬鱼芠ⲫ䛹ຬ茉ᔸࣴꚕ계랔轰赍锍蛔 [ 51.292106][ T23] audit: type=1400 audit(1719834732.810:212): avc: denied { setattr } for pid=1457 comm="syz.1.388" path="/root/syzkaller.MaVPQh/57/bus" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.459905][ T18] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.518588][ T1465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.389'. [ 51.519893][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 51.556626][ T1468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.390'. [ 51.628631][ T1470] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 51.646180][ T1470] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 51.661787][ T1470] xt_TCPMSS: Only works on TCP SYN packets [ 51.669963][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.680086][ T538] usbhid 1-1:1.0: can't add hid device: -22 [ 51.680752][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.686407][ T538] usbhid: probe of 1-1:1.0 failed with error -22 [ 51.696337][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 51.830611][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.842219][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.852171][ T18] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 51.858594][ T369] usb 4-1: USB disconnect, device number 3 [ 51.862705][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.879937][ T5] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 51.889567][ T18] usb 5-1: config 0 descriptor?? [ 51.889618][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.903074][ T5] usb 3-1: Product: 亻װ밴䌅῞硜醻럊珊牮嫜겫ঠ㥨黹έ咶㛄エს䎒믔ﴍ琴䔁档㩚ᩔ辜뵠 [ 51.918427][ T5] usb 3-1: Manufacturer: ␁ [ 51.923592][ T5] usb 3-1: SerialNumber: 袶媑煬鱼芠ⲫ䛹ຬ茉ᔸࣴꚕ계랔轰赍锍蛔 [ 52.189881][ T370] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 52.257527][ T1485] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 52.294786][ T1485] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 52.323709][ T1485] xt_TCPMSS: Only works on TCP SYN packets [ 52.340017][ T5] usbhid 3-1:1.0: can't add hid device: -22 [ 52.345967][ T5] usbhid: probe of 3-1:1.0 failed with error -22 [ 52.381740][ T18] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 52.397515][ T18] holtek 0003:1241:5015.0001: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0 [ 52.409550][ T18] holtek 0003:1241:5015.0001: no inputs found [ 52.559926][ T370] usb 2-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 52.573233][ T370] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.588246][ T370] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 52.597510][ T370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.611381][ T370] usb 2-1: config 0 descriptor?? [ 52.927885][ T23] audit: type=1400 audit(1719834734.440:213): avc: denied { remove_name } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=9310 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.952738][ T23] audit: type=1400 audit(1719834734.440:214): avc: denied { rename } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=9310 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.975828][ T23] audit: type=1400 audit(1719834734.440:215): avc: denied { create } for pid=144 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.300024][ T414] usb 1-1: USB disconnect, device number 3 [ 53.387666][ T23] audit: type=1400 audit(1719834734.900:216): avc: denied { append } for pid=1498 comm="syz.0.397" name="001" dev="devtmpfs" ino=1856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.736420][ T1501] F2FS-fs (loop0): invalid crc value [ 53.751935][ T1501] F2FS-fs (loop0): Found nat_bits in checkpoint [ 53.796900][ T1501] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 53.803650][ T1501] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 53.851136][ T5] usb 3-1: USB disconnect, device number 4 [ 53.970697][ T1513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.400'. [ 54.021970][ T1518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.401'. [ 54.128674][ T18] usb 5-1: USB disconnect, device number 3 [ 54.401531][ T711] attempt to access beyond end of device [ 54.401531][ T711] loop0: rw=2049, want=45104, limit=40427 [ 54.629898][ T18] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 54.689947][ T370] usb 2-1: string descriptor 0 read error: -71 [ 54.696303][ T370] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 54.720727][ T370] usb 2-1: USB disconnect, device number 3 [ 54.850971][ T1541] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 54.872785][ T18] usb 5-1: Using ep0 maxpacket: 16 [ 54.999944][ T18] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.010831][ T18] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.020708][ T18] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 55.039026][ T1554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 55.151531][ T1557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.414'. [ 55.159900][ T370] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 55.185581][ T1560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.415'. [ 55.194435][ T18] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 55.203488][ T18] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.218015][ T18] usb 5-1: Product: 亻װ밴䌅῞硜醻럊珊牮嫜겫ঠ㥨黹έ咶㛄エს䎒믔ﴍ琴䔁档㩚ᩔ辜뵠 [ 55.230502][ T18] usb 5-1: Manufacturer: ␁ [ 55.235019][ T18] usb 5-1: SerialNumber: 袶媑煬鱼芠ⲫ䛹ຬ茉ᔸࣴꚕ계랔轰赍锍蛔 [ 55.399929][ T370] usb 2-1: Using ep0 maxpacket: 16 [ 55.520241][ T370] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.531037][ T370] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.540624][ T414] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 55.548977][ T370] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 55.571182][ T1567] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 55.590063][ T538] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 55.605872][ T1567] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 55.622278][ T1567] xt_TCPMSS: Only works on TCP SYN packets [ 55.640272][ T18] usbhid 5-1:1.0: can't add hid device: -22 [ 55.646876][ T18] usbhid: probe of 5-1:1.0 failed with error -22 [ 55.720158][ T370] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 55.729368][ T370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.737248][ T370] usb 2-1: Product: 亻װ밴䌅῞硜醻럊珊牮嫜겫ঠ㥨黹έ咶㛄エს䎒믔ﴍ琴䔁档㩚ᩔ辜뵠 [ 55.749388][ T370] usb 2-1: Manufacturer: ␁ [ 55.753784][ T370] usb 2-1: SerialNumber: 袶媑煬鱼芠ⲫ䛹ຬ茉ᔸࣴꚕ계랔轰赍锍蛔 [ 55.830252][ T414] usb 3-1: device descriptor read/64, error 18 [ 55.960121][ T538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.971033][ T538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.980955][ T538] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 55.989809][ T538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.005210][ T538] usb 4-1: config 0 descriptor?? [ 56.126577][ T1577] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 56.143845][ T1577] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 56.160351][ T1577] xt_TCPMSS: Only works on TCP SYN packets [ 56.170306][ T370] usbhid 2-1:1.0: can't add hid device: -22 [ 56.176298][ T370] usbhid: probe of 2-1:1.0 failed with error -22 [ 56.219895][ T414] usb 3-1: device descriptor read/64, error 18 [ 56.491645][ T538] holtek 0003:1241:5015.0002: unknown main item tag 0x0 [ 56.500555][ T414] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 56.509706][ T538] holtek 0003:1241:5015.0002: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 56.520788][ T538] holtek 0003:1241:5015.0002: no inputs found [ 56.779748][ T23] kauditd_printk_skb: 6 callbacks suppressed [ 56.779759][ T23] audit: type=1400 audit(1719834738.290:223): avc: denied { create } for pid=1586 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.805874][ T414] usb 3-1: device descriptor read/64, error 18 [ 56.812078][ T23] audit: type=1400 audit(1719834738.300:224): avc: denied { write } for pid=1586 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.832609][ T23] audit: type=1400 audit(1719834738.300:225): avc: denied { read } for pid=1586 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.852941][ T23] audit: type=1400 audit(1719834738.350:226): avc: denied { write } for pid=1586 comm="syz.0.421" name="attr" dev="proc" ino=18030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 56.874726][ T23] audit: type=1400 audit(1719834738.350:227): avc: denied { add_name } for pid=1586 comm="syz.0.421" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 56.896648][ T23] audit: type=1400 audit(1719834738.350:228): avc: denied { create } for pid=1586 comm="syz.0.421" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 56.918419][ T23] audit: type=1400 audit(1719834738.350:229): avc: denied { associate } for pid=1586 comm="syz.0.421" name="blkio.bfq.avg_queue_size" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.940984][ T23] audit: type=1400 audit(1719834738.390:230): avc: denied { write } for pid=1586 comm="syz.0.421" name="vga_arbiter" dev="devtmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 56.966626][ T23] audit: type=1400 audit(1719834738.390:231): avc: denied { open } for pid=1586 comm="syz.0.421" path="/dev/vga_arbiter" dev="devtmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 57.219893][ T414] usb 3-1: device descriptor read/64, error 18 [ 57.237937][ T369] usb 5-1: USB disconnect, device number 4 [ 57.330580][ T1600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.424'. [ 57.340149][ T414] usb usb3-port1: attempt power cycle [ 57.370951][ T1603] netlink: 24 bytes leftover after parsing attributes in process `syz.4.425'. [ 57.442720][ T1608] Zero length message leads to an empty skb [ 57.448928][ T1608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1608 comm=syz.0.427 [ 57.508441][ T1611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.428'. [ 57.749900][ T414] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 57.754312][ T369] usb 2-1: USB disconnect, device number 4 [ 57.919982][ T414] usb 3-1: device descriptor read/8, error -61 [ 58.189934][ T414] usb 3-1: device descriptor read/8, error -61 [ 58.233530][ T613] usb 4-1: USB disconnect, device number 4 [ 58.328710][ T1631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 58.339806][ T1634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.435'. [ 58.419949][ T369] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 58.474299][ T1645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.440'. [ 58.659873][ T369] usb 2-1: Using ep0 maxpacket: 16 [ 58.719936][ T604] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 58.760768][ T1663] overlayfs: './file0' not a directory [ 58.779937][ T369] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.790702][ T369] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.800196][ T369] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 58.831175][ T23] audit: type=1400 audit(1719834740.350:232): avc: denied { mounton } for pid=1655 comm="syz.2.444" path="/root/syzkaller.LJZNxx/111/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 58.959975][ T604] usb 4-1: Using ep0 maxpacket: 16 [ 58.969968][ T369] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 58.978899][ T369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.986710][ T369] usb 2-1: Product: 亻װ밴䌅῞硜醻럊珊牮嫜겫ঠ㥨黹έ咶㛄エს䎒믔ﴍ琴䔁档㩚ᩔ辜뵠 [ 58.998985][ T369] usb 2-1: Manufacturer: ␁ [ 59.003601][ T369] usb 2-1: SerialNumber: 袶媑煬鱼芠ⲫ䛹ຬ茉ᔸࣴꚕ계랔轰赍锍蛔 [ 59.080041][ T604] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.090922][ T604] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.100547][ T604] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 59.270046][ T604] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 59.280114][ T604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.294623][ T604] usb 4-1: Product: 亻װ밴䌅῞硜醻럊珊牮嫜겫ঠ㥨黹έ咶㛄エს䎒믔ﴍ琴䔁档㩚ᩔ辜뵠 [ 59.308971][ T604] usb 4-1: Manufacturer: ␁ [ 59.322629][ T604] usb 4-1: SerialNumber: 袶媑煬鱼芠ⲫ䛹ຬ茉ᔸࣴꚕ계랔轰赍锍蛔 [ 59.342756][ T1673] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 59.394014][ T1673] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 59.411508][ T1673] xt_TCPMSS: Only works on TCP SYN packets [ 59.430070][ T369] usbhid 2-1:1.0: can't add hid device: -22 [ 59.435959][ T369] usbhid: probe of 2-1:1.0 failed with error -22 [ 59.438612][ T1684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.450'. [ 59.467491][ T1687] 9pnet: Insufficient options for proto=fd [ 59.528445][ T1689] kvm: emulating exchange as write [ 59.640609][ T414] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 59.786360][ T1706] raw_sendmsg: syz.0.455 forgot to set AF_INET. Fix it! [ 59.895911][ T1703] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 59.916449][ T1703] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 59.933433][ T1703] xt_TCPMSS: Only works on TCP SYN packets [ 59.960018][ T604] usbhid 4-1:1.0: can't add hid device: -22 [ 59.965801][ T604] usbhid: probe of 4-1:1.0 failed with error -22 [ 60.120001][ T414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.130945][ T414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.140553][ T414] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 60.149626][ T414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.163066][ T414] usb 5-1: config 0 descriptor?? [ 60.641535][ T414] holtek 0003:1241:5015.0003: unknown main item tag 0x0 [ 60.661847][ T414] holtek 0003:1241:5015.0003: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0 [ 60.687141][ T1723] overlayfs: './file0' not a directory [ 60.689642][ T414] holtek 0003:1241:5015.0003: no inputs found [ 61.179072][ T538] usb 2-1: USB disconnect, device number 5 [ 61.251695][ T1735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.463'. [ 61.359739][ T1740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.465'. [ 61.465148][ T613] usb 4-1: USB disconnect, device number 5 [ 61.513410][ T1742] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.520396][ T1742] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.527721][ T1742] device bridge_slave_0 entered promiscuous mode [ 61.534590][ T1742] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.542550][ T1742] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.550416][ T1742] device bridge_slave_1 entered promiscuous mode [ 61.634817][ T1742] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.641683][ T1742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.648975][ T1742] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.655751][ T1742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.688617][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.697292][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.704611][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.723172][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.731356][ T538] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.738282][ T538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.745773][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.753987][ T538] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.760857][ T538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.766063][ T1747] F2FS-fs (loop3): invalid crc value [ 61.777608][ T1747] F2FS-fs (loop3): Found nat_bits in checkpoint [ 61.778318][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.793173][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.801357][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.809411][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.816549][ T1747] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 61.834018][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.842557][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.860833][ T23] kauditd_printk_skb: 13 callbacks suppressed [ 61.860843][ T23] audit: type=1400 audit(1719834743.380:246): avc: denied { setattr } for pid=1746 comm="syz.3.469" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.889245][ T446] attempt to access beyond end of device [ 61.889245][ T446] loop3: rw=2049, want=45104, limit=40427 [ 61.909970][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.928193][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.948389][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.968651][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.977118][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.987762][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.990354][ T1753] fuse: Unknown parameter '000000000000000000040xffffffffffffffff0000000000000000000418446744073709551615000000000000000000001844674407370955161518446744073709551615' [ 61.997177][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.022904][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.063665][ T23] audit: type=1400 audit(1719834743.580:247): avc: denied { create } for pid=1755 comm="syz.1.468" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 62.160097][ T9] device bridge_slave_1 left promiscuous mode [ 62.166460][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.174158][ T9] device bridge_slave_0 left promiscuous mode [ 62.180946][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.296689][ T5] usb 5-1: USB disconnect, device number 5 [ 62.339955][ T370] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 62.405064][ T1764] F2FS-fs (loop2): invalid crc value [ 62.412376][ T1764] F2FS-fs (loop2): Found nat_bits in checkpoint [ 62.429927][ T604] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 62.440462][ T1764] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 62.659898][ T5] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 62.699357][ T1772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.475'. [ 62.699967][ T370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.719788][ T370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.729606][ T370] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 62.738564][ T370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.747320][ T370] usb 2-1: config 0 descriptor?? [ 62.800047][ T604] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 62.808883][ T604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.817929][ T604] usb 4-1: config 0 descriptor?? [ 62.899927][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 62.972936][ T1779] overlayfs: './file0' not a directory [ 63.020282][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.031740][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.041547][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 63.210031][ T5] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 63.210392][ T1756] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 63.219051][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.234316][ T5] usb 5-1: Product: 亻װ밴䌅῞硜醻럊珊牮嫜겫ঠ㥨黹έ咶㛄エს䎒믔ﴍ琴䔁档㩚ᩔ辜뵠 [ 63.248180][ T5] usb 5-1: Manufacturer: ␁ [ 63.252691][ T5] usb 5-1: SerialNumber: 袶媑煬鱼芠ⲫ䛹ຬ茉ᔸࣴꚕ계랔轰赍锍蛔 [ 63.262472][ T23] audit: type=1400 audit(1719834744.770:248): avc: denied { name_bind } for pid=1755 comm="syz.1.468" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 63.284341][ T23] audit: type=1400 audit(1719834744.770:249): avc: denied { create } for pid=1755 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.351929][ T370] usbhid 2-1:0.0: can't add hid device: -71 [ 63.357773][ T370] usbhid: probe of 2-1:0.0 failed with error -71 [ 63.365268][ T370] usb 2-1: USB disconnect, device number 6 [ 63.661942][ T1782] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 63.681810][ T1782] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 63.701426][ T1782] xt_TCPMSS: Only works on TCP SYN packets [ 63.740117][ T5] usbhid 5-1:1.0: can't add hid device: -22 [ 63.745912][ T5] usbhid: probe of 5-1:1.0 failed with error -22 [ 63.909937][ T5] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 63.952083][ T1795] FAT-fs (loop1): Directory bread(block 64) failed [ 63.958579][ T1795] FAT-fs (loop1): Directory bread(block 65) failed [ 63.965553][ T1795] FAT-fs (loop1): Directory bread(block 66) failed [ 63.971965][ T1795] FAT-fs (loop1): Directory bread(block 67) failed [ 63.978523][ T1795] FAT-fs (loop1): Directory bread(block 68) failed [ 63.985177][ T1795] FAT-fs (loop1): Directory bread(block 69) failed [ 63.994554][ T1795] FAT-fs (loop1): Directory bread(block 70) failed [ 64.001171][ T1795] FAT-fs (loop1): Directory bread(block 71) failed [ 64.007836][ T1795] FAT-fs (loop1): Directory bread(block 72) failed [ 64.014372][ T1795] FAT-fs (loop1): Directory bread(block 73) failed [ 64.026757][ T23] audit: type=1400 audit(1719834745.540:250): avc: denied { remount } for pid=1761 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.026824][ T1798] cgroup2: Unknown parameter 'journal_path' [ 64.159878][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 64.239816][ T1804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.482'. [ 64.273779][ T1807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.483'. [ 64.279995][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.293300][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.303282][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 64.469946][ T5] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 64.478765][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.486743][ T5] usb 3-1: Product: 亻װ밴䌅῞硜醻럊珊牮嫜겫ঠ㥨黹έ咶㛄エს䎒믔ﴍ琴䔁档㩚ᩔ辜뵠 [ 64.499262][ T5] usb 3-1: Manufacturer: ␁ [ 64.504406][ T5] usb 3-1: SerialNumber: 袶媑煬鱼芠ⲫ䛹ຬ茉ᔸࣴꚕ계랔轰赍锍蛔 [ 64.872767][ T1813] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 64.885292][ T1813] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 64.889959][ T613] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 64.910020][ T5] usbhid 3-1:1.0: can't add hid device: -22 [ 64.915759][ T5] usbhid: probe of 3-1:1.0 failed with error -22 [ 65.114416][ T1819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.486'. [ 65.250015][ T604] usb 4-1: Cannot read MAC address [ 65.255155][ T604] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 65.326297][ T613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.354244][ T604] usb 4-1: USB disconnect, device number 6 [ 65.360788][ T613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.375592][ T613] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 65.385696][ T613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.433364][ T13] usb 5-1: USB disconnect, device number 6 [ 65.532754][ T613] usb 1-1: config 0 descriptor?? [ 65.556610][ T23] audit: type=1400 audit(1719834747.070:251): avc: denied { nlmsg_write } for pid=1829 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 65.658437][ T23] audit: type=1400 audit(1719834747.170:252): avc: denied { write } for pid=1835 comm="syz.4.493" path="socket:[20929]" dev="sockfs" ino=20929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 65.703796][ T1838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.494'. [ 65.777836][ T1841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.495'. [ 65.824357][ T23] audit: type=1400 audit(1719834747.340:253): avc: denied { connect } for pid=1842 comm="syz.4.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.843665][ T369] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 65.880308][ T23] audit: type=1400 audit(1719834747.350:254): avc: denied { write } for pid=1842 comm="syz.4.496" path="socket:[20955]" dev="sockfs" ino=20955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.909769][ T1846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.497'. [ 65.984053][ T1849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.498'. [ 66.021520][ T613] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 66.032681][ T613] holtek 0003:1241:5015.0004: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 66.043851][ T613] holtek 0003:1241:5015.0004: no inputs found [ 66.079886][ T369] usb 2-1: Using ep0 maxpacket: 32 [ 66.279970][ T369] usb 2-1: config 4 has an invalid interface number: 72 but max is 0 [ 66.288063][ T369] usb 2-1: config 4 has no interface number 0 [ 66.295384][ T369] usb 2-1: config 4 interface 72 altsetting 5 endpoint 0x9 has an invalid bInterval 249, changing to 11 [ 66.309178][ T369] usb 2-1: config 4 interface 72 altsetting 5 endpoint 0xF has invalid maxpacket 7104, setting to 64 [ 66.321292][ T369] usb 2-1: config 4 interface 72 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 66.332309][ T369] usb 2-1: config 4 interface 72 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 66.344349][ T369] usb 2-1: config 4 interface 72 has no altsetting 0 [ 66.509959][ T369] usb 2-1: New USB device found, idVendor=19d2, idProduct=0395, bcdDevice=a8.03 [ 66.519917][ T369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.528328][ T369] usb 2-1: Product: 〉 [ 66.536446][ T369] usb 2-1: Manufacturer: ( [ 66.542585][ T369] usb 2-1: SerialNumber: 倊 [ 66.550377][ T24] cfg80211: failed to load regulatory.db [ 66.666878][ T613] usb 3-1: USB disconnect, device number 9 [ 66.815053][ T23] audit: type=1400 audit(1719834748.330:255): avc: denied { ioctl } for pid=1860 comm="syz.2.500" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.840911][ T1863] binder: 1860:1863 ioctl c018620c 20000000 returned -1 [ 66.880301][ T369] usb 2-1: USB disconnect, device number 7 [ 66.884553][ T23] audit: type=1400 audit(1719834748.400:256): avc: denied { bind } for pid=1866 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.962233][ T1875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.506'. [ 67.005454][ T1873] EXT4-fs error (device loop4): ext4_orphan_get:1260: comm syz.4.505: bad orphan inode 8192 [ 67.022631][ T1880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 67.031911][ T1873] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 67.056872][ T23] audit: type=1400 audit(1719834748.570:257): avc: denied { mounton } for pid=1872 comm="syz.4.505" path="/root/syzkaller.VXrVb5/42/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.084674][ T23] audit: type=1400 audit(1719834748.600:258): avc: denied { mounton } for pid=1872 comm="syz.4.505" path="/root/syzkaller.VXrVb5/42/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.331764][ T23] audit: type=1400 audit(1719834748.850:259): avc: denied { ioctl } for pid=1894 comm="syz.2.509" path="socket:[21660]" dev="sockfs" ino=21660 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.360896][ T1895] netlink: 'syz.2.509': attribute type 4 has an invalid length. [ 67.371868][ T1123] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2221: inode #15: comm syz-executor: corrupted in-inode xattr [ 67.384356][ T1123] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2221: inode #15: comm syz-executor: corrupted in-inode xattr [ 67.401763][ T23] audit: type=1400 audit(1719834748.880:260): avc: denied { bind } for pid=1894 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.422844][ T1895] syz.2.509 (1895) used greatest stack depth: 19384 bytes left [ 67.433500][ T23] audit: type=1400 audit(1719834748.880:261): avc: denied { remove_name } for pid=1123 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.462629][ T23] audit: type=1400 audit(1719834748.880:262): avc: denied { rmdir } for pid=1123 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.485916][ T23] audit: type=1400 audit(1719834748.890:263): avc: denied { unlink } for pid=1123 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.508723][ T23] audit: type=1400 audit(1719834748.890:264): avc: denied { unlink } for pid=1123 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 67.566483][ T1892] usb 1-1: USB disconnect, device number 4 [ 67.635698][ T369] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 67.649515][ T1902] cgroup: syz.0.515 (1902) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 67.680464][ T1902] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 67.752705][ T1908] __nla_validate_parse: 2 callbacks suppressed [ 67.752711][ T1908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.517'. [ 67.781333][ T1904] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.788271][ T1904] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.803147][ T1904] device bridge_slave_0 entered promiscuous mode [ 67.818621][ T1904] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.826056][ T1904] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.837213][ T1904] device bridge_slave_1 entered promiscuous mode [ 67.879964][ T369] usb 2-1: Using ep0 maxpacket: 16 [ 67.959345][ T1904] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.966316][ T1904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.004977][ T1889] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.013806][ T1889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.020024][ T369] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.021861][ T1889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.039064][ T369] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.052088][ T369] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 68.063426][ T1892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.072332][ T1892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.081146][ T1892] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.088008][ T1892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.095557][ T1892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.104431][ T1892] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.111300][ T1892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.130596][ T1889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.138854][ T1889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.150639][ T9] device bridge_slave_1 left promiscuous mode [ 68.156645][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.165397][ T9] device bridge_slave_0 left promiscuous mode [ 68.171441][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.230012][ T369] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 68.242098][ T369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.250218][ T369] usb 2-1: Product: 亻װ밴䌅῞硜醻럊珊牮嫜겫ঠ㥨黹έ咶㛄エს䎒믔ﴍ琴䔁档㩚ᩔ辜뵠 [ 68.253312][ T1892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.262621][ T369] usb 2-1: Manufacturer: ␁ [ 68.275062][ T369] usb 2-1: SerialNumber: 袶媑煬鱼芠ⲫ䛹ຬ茉ᔸࣴꚕ계랔轰赍锍蛔 [ 68.295995][ T1892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.321938][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.330316][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.338994][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.348138][ T1921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.520'. [ 68.755135][ T1940] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 68.822222][ T1956] EXT4-fs (loop2): Ignoring removed orlov option [ 68.830800][ T1956] EXT4-fs (loop2): can't mount with dioread_nolock if block size != PAGE_SIZE [ 68.839786][ T1940] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 68.890101][ T369] usbhid 2-1:1.0: can't add hid device: -22 [ 68.895972][ T369] usbhid: probe of 2-1:1.0 failed with error -22 [ 68.966891][ T23] audit: type=1400 audit(1719834750.480:265): avc: denied { mounton } for pid=1994 comm="syz.2.528" path="/root/syzkaller.LJZNxx/137/file0" dev="sda1" ino=1994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 68.967301][ T1996] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.033845][ T1996] FAT-fs (loop5): unable to read boot sector [ 69.043204][ T1993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.527'. [ 69.143346][ T2005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.530'. [ 69.171618][ T2001] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 69.210330][ T2001] ext4 filesystem being mounted at /root/syzkaller.LJZNxx/138/file0 supports timestamps until 2038 (0x7fffffff) [ 69.215022][ T2007] 9pnet: Insufficient options for proto=fd [ 69.258854][ T2011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.531'. [ 69.519902][ T1988] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 69.676031][ T2018] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 69.689933][ T2018] EXT4-fs (loop4): Mount option "noload" incompatible with ext2 [ 69.759958][ T1988] usb 3-1: Using ep0 maxpacket: 32 [ 69.879978][ T1988] usb 3-1: config 152 has an invalid descriptor of length 185, skipping remainder of the config [ 69.899891][ T1988] usb 3-1: config 152 has 0 interfaces, different from the descriptor's value: 1 [ 69.918975][ T1988] usb 3-1: New USB device found, idVendor=13b1, idProduct=0026, bcdDevice=16.0c [ 69.939141][ T1988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.201820][ T2001] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 70.213257][ T2001] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 70.256070][ T2034] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 70.297006][ T2018] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.366992][ T2041] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 70.376520][ T369] usb 2-1: USB disconnect, device number 8 [ 70.378449][ T2018] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.536928][ T2046] attempt to access beyond end of device [ 70.536928][ T2046] loop4: rw=524288, want=45072, limit=40427 [ 70.549431][ T2046] attempt to access beyond end of device [ 70.549431][ T2046] loop4: rw=0, want=45072, limit=40427 [ 70.610161][ T2050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.540'. [ 70.704843][ T1904] attempt to access beyond end of device [ 70.704843][ T1904] loop4: rw=0, want=45072, limit=40427 [ 70.724393][ T2054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.542'. [ 70.804854][ T9] attempt to access beyond end of device [ 70.804854][ T9] loop4: rw=2049, want=40984, limit=40427 [ 70.840026][ T1988] usb 3-1: string descriptor 0 read error: -71 [ 70.851148][ T1988] usb 3-1: USB disconnect, device number 10 [ 70.951431][ T2071] FAT-fs (loop2): Directory bread(block 64) failed [ 70.968098][ T2071] FAT-fs (loop2): Directory bread(block 65) failed [ 70.975571][ T2071] FAT-fs (loop2): Directory bread(block 66) failed [ 70.979902][ T369] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 70.982109][ T2071] FAT-fs (loop2): Directory bread(block 67) failed [ 70.996869][ T2071] FAT-fs (loop2): Directory bread(block 68) failed [ 71.003464][ T2071] FAT-fs (loop2): Directory bread(block 69) failed [ 71.010105][ T2071] FAT-fs (loop2): Directory bread(block 70) failed [ 71.016787][ T2071] FAT-fs (loop2): Directory bread(block 71) failed [ 71.023633][ T2071] FAT-fs (loop2): Directory bread(block 72) failed [ 71.030361][ T2071] FAT-fs (loop2): Directory bread(block 73) failed [ 71.249403][ T2081] 9pnet: Insufficient options for proto=fd [ 71.261160][ T2082] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 71.281643][ T369] usb 1-1: device descriptor read/64, error 18 [ 71.364475][ T2083] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.371633][ T2083] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.379068][ T2083] device bridge_slave_0 entered promiscuous mode [ 71.386418][ T2083] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.393595][ T2083] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.401211][ T2083] device bridge_slave_1 entered promiscuous mode [ 71.460129][ T9] device bridge_slave_1 left promiscuous mode [ 71.466360][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.474096][ T9] device bridge_slave_0 left promiscuous mode [ 71.480176][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.548392][ T2083] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.555271][ T2083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.562495][ T2083] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.569317][ T2083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.604494][ T1988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.620138][ T1988] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.627556][ T1988] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.642818][ T1938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.651327][ T1938] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.658163][ T1938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.666804][ T1938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.675083][ T1938] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.682044][ T1938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.689965][ T369] usb 1-1: device descriptor read/64, error 18 [ 71.697324][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.705614][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.726039][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.744663][ T1988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.774939][ T1988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.797955][ T1933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.811406][ T1933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.959872][ T369] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 72.046038][ T23] kauditd_printk_skb: 13 callbacks suppressed [ 72.046047][ T23] audit: type=1400 audit(1719834753.560:279): avc: denied { read } for pid=2091 comm="syz.1.551" name="vga_arbiter" dev="devtmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 72.171647][ T2088] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.212447][ T2099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.552'. [ 72.224950][ T2088] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 72.249893][ T369] usb 1-1: device descriptor read/64, error 18 [ 72.252362][ T2103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.554'. [ 72.299942][ T613] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 72.318806][ T2108] netlink: 'syz.1.556': attribute type 5 has an invalid length. [ 72.326597][ T2108] netlink: 7 bytes leftover after parsing attributes in process `syz.1.556'. [ 72.513194][ T23] audit: type=1400 audit(1719834754.030:280): avc: denied { set_context_mgr } for pid=2114 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 72.549877][ T613] usb 3-1: Using ep0 maxpacket: 16 [ 72.659881][ T369] usb 1-1: device descriptor read/64, error 18 [ 72.670088][ T613] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.687986][ T613] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.707912][ T613] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 72.780071][ T369] usb usb1-port1: attempt power cycle [ 72.876141][ T2130] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,,errors=continue [ 72.887852][ T613] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 72.897348][ T613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.918760][ T613] usb 3-1: Product: 亻װ밴䌅῞硜醻럊珊牮嫜겫ঠ㥨黹έ咶㛄エს䎒믔ﴍ琴䔁档㩚ᩔ辜뵠 [ 72.933951][ T1742] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /root/syzkaller.wyx0pr/22/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 72.957448][ T613] usb 3-1: Manufacturer: ␁ [ 72.962132][ T613] usb 3-1: SerialNumber: 袶媑煬鱼芠ⲫ䛹ຬ茉ᔸࣴꚕ계랔轰赍锍蛔 [ 72.972632][ T1742] EXT4-fs error (device loop1): ext4_empty_dir:3002: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 72.997236][ T1742] EXT4-fs warning (device loop1): ext4_empty_dir:3004: inode #11: comm syz-executor: directory missing '.' [ 73.009553][ T23] audit: type=1400 audit(1719834754.530:281): avc: denied { rmdir } for pid=1742 comm="syz-executor" name=".index" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 73.189906][ T369] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 73.241889][ T23] audit: type=1400 audit(1719834754.760:282): avc: denied { mounton } for pid=2139 comm="syz.1.562" path="/root/syzkaller.wyx0pr/24/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 73.274682][ T2140] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 73.369941][ T369] usb 1-1: device descriptor read/8, error -61 [ 73.387962][ T2141] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 73.426015][ T2141] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 73.460039][ T613] usbhid 3-1:1.0: can't add hid device: -22 [ 73.467964][ T613] usbhid: probe of 3-1:1.0 failed with error -22 [ 73.558570][ T2151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.565'. [ 73.569213][ T2149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.564'. [ 73.642077][ T369] usb 1-1: device descriptor read/8, error -71 [ 73.870101][ T23] audit: type=1400 audit(1719834755.350:283): avc: denied { ioctl } for pid=2165 comm="syz.4.570" path="socket:[23607]" dev="sockfs" ino=23607 ioctlcmd=0x52d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.938965][ T2178] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 74.030986][ T23] audit: type=1400 audit(1719834755.520:284): avc: denied { nlmsg_read } for pid=2184 comm="syz.1.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 74.095528][ T2189] FAT-fs (loop1): Directory bread(block 64) failed [ 74.105439][ T2189] FAT-fs (loop1): Directory bread(block 65) failed [ 74.119332][ T2189] FAT-fs (loop1): Directory bread(block 66) failed [ 74.127495][ T2189] FAT-fs (loop1): Directory bread(block 67) failed [ 74.140296][ T2189] FAT-fs (loop1): Directory bread(block 68) failed [ 74.140458][ T2193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.578'. [ 74.147182][ T2189] FAT-fs (loop1): Directory bread(block 69) failed [ 74.175397][ T2189] FAT-fs (loop1): Directory bread(block 70) failed [ 74.187404][ T2189] FAT-fs (loop1): Directory bread(block 71) failed [ 74.199983][ T2189] FAT-fs (loop1): Directory bread(block 72) failed [ 74.214329][ T2189] FAT-fs (loop1): Directory bread(block 73) failed [ 74.354510][ T2203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.581'. [ 75.048471][ T613] usb 3-1: USB disconnect, device number 11 [ 76.980295][ T9] device bridge_slave_1 left promiscuous mode [ 76.986439][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.993654][ T9] device bridge_slave_0 left promiscuous mode [ 76.999647][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.231219][ T2219] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.249907][ T2219] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 80.279786][ T2223] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.287118][ T2223] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.294468][ T2223] device bridge_slave_0 entered promiscuous mode [ 80.301178][ T2223] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.308081][ T2223] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.315445][ T2223] device bridge_slave_1 entered promiscuous mode [ 80.349261][ T2230] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 80.360515][ T2220] erofs: (device loop4): vle_extent_lookback: bogus lookback distance @ nid 36 [ 80.369946][ T2220] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress, in[61, 4035] out[1851] [ 80.380176][ T2220] ------------[ cut here ]------------ [ 80.385530][ T2220] WARNING: CPU: 1 PID: 2220 at fs/erofs/decompressor.c:170 z_erofs_lz4_decompress+0x910/0xc70 [ 80.395966][ T2220] Modules linked in: [ 80.399716][ T2220] CPU: 1 PID: 2220 Comm: syz.4.586 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 80.409323][ T2220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 80.413267][ T2223] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.419662][ T2220] RIP: 0010:z_erofs_lz4_decompress+0x910/0xc70 [ 80.419683][ T2220] Code: b6 04 03 84 c0 0f 85 da 02 00 00 45 8b 0f 48 89 ef 48 c7 c6 72 fd 5a 85 48 c7 c2 a0 c3 f7 84 44 89 e9 45 89 f0 e8 80 ec fe ff <0f> 0b 44 89 e8 48 c7 c7 00 c4 f7 84 48 c7 c6 20 c4 f7 84 ba 02 00 [ 80.419696][ T2220] RSP: 0018:ffff8881ebbc6cd8 EFLAGS: 00010246 [ 80.426473][ T2223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.432560][ T2220] RAX: 32d0438e1f488100 RBX: 1ffff1103d778e58 RCX: 32d0438e1f488100 [ 80.432566][ T2220] RDX: ffffc9000214e000 RSI: 0000000000000f15 RDI: 0000000000000f16 [ 80.432572][ T2220] RBP: ffff8881eb312000 R08: ffffffff814d59b2 R09: ffffed103edea9b8 [ 80.432578][ T2220] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881df473fc3 [ 80.432583][ T2220] R13: 000000000000003d R14: 0000000000000fc3 R15: ffff8881ebbc72c0 [ 80.432597][ T2220] FS: 00007f5b9cbed6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 80.452113][ T2223] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.457896][ T2220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.465073][ T2223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.472864][ T2220] CR2: 00007f2f4207a000 CR3: 00000001db84a000 CR4: 00000000003406a0 [ 80.472872][ T2220] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.472876][ T2220] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.472879][ T2220] Call Trace: [ 80.472896][ T2220] ? __warn+0x162/0x250 [ 80.472906][ T2220] ? report_bug+0x3a1/0x4e0 [ 80.472924][ T2220] ? z_erofs_lz4_decompress+0x910/0xc70 [ 80.573898][ T2220] ? z_erofs_lz4_decompress+0x910/0xc70 [ 80.579358][ T2220] ? do_invalid_op+0x6e/0x110 [ 80.583964][ T2220] ? invalid_op+0x1e/0x30 [ 80.588321][ T2220] ? wake_up_klogd+0xb2/0xf0 [ 80.593242][ T2220] ? z_erofs_lz4_decompress+0x910/0xc70 [ 80.598721][ T2220] ? z_erofs_lz4_decompress+0x910/0xc70 [ 80.604103][ T2220] ? z_erofs_lz4_prepare_destpages+0x690/0x690 [ 80.610081][ T2220] z_erofs_decompress+0xba6/0xfc0 [ 80.614938][ T2220] z_erofs_vle_unzip_all+0x1147/0x1bf0 [ 80.620230][ T2220] ? blk_mq_request_issue_directly+0x1d0/0x1d0 [ 80.626233][ T2220] ? z_erofs_onlinepage_endio+0x140/0x140 [ 80.631802][ T2220] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 80.637083][ T2220] ? _raw_spin_lock+0x1b0/0x1b0 [ 80.641765][ T2220] ? prepare_to_wait_event+0x3c1/0x420 [ 80.647257][ T2220] ? autoremove_wake_function+0xf0/0xf0 [ 80.652653][ T2220] ? finish_wait+0xa5/0x1a0 [ 80.657048][ T2220] z_erofs_submit_and_unzip+0x12d2/0x13d0 [ 80.662689][ T2220] ? z_erofs_attach_page+0x4fa/0x710 [ 80.667841][ T2220] ? z_erofs_do_read_page+0x2580/0x2580 [ 80.673194][ T2220] ? init_wait_entry+0xd0/0xd0 [ 80.677802][ T2220] ? z_erofs_vle_normalaccess_readpages+0xc70/0xc70 [ 80.684309][ T2220] z_erofs_vle_normalaccess_readpage+0x30b/0x630 [ 80.690469][ T2220] ? z_erofs_rcu_callback+0x20/0x20 [ 80.695586][ T2220] ? __alloc_pages_nodemask+0x393/0x840 [ 80.701502][ T2220] ? add_to_page_cache_lru+0x221/0x2c0 [ 80.706783][ T2220] ? add_to_page_cache_locked+0x40/0x40 [ 80.712609][ T2220] ? z_erofs_rcu_callback+0x20/0x20 [ 80.717626][ T2220] do_read_cache_page+0x649/0xa10 [ 80.722490][ T2220] erofs_namei+0x160/0xf90 [ 80.726884][ T2220] erofs_lookup+0x145/0x450 [ 80.731216][ T2220] ? erofs_namei+0xf90/0xf90 [ 80.735638][ T2220] ? __init_rwsem+0x210/0x210 [ 80.740151][ T2220] ? path_init+0x8bd/0xee0 [ 80.744402][ T2220] ? erofs_namei+0xf90/0xf90 [ 80.748910][ T2220] path_openat+0x15c9/0x34b0 [ 80.753348][ T2220] ? do_filp_open+0x450/0x450 [ 80.757939][ T2220] ? do_sys_open+0x357/0x810 [ 80.762367][ T2220] ? do_syscall_64+0xca/0x1c0 [ 80.766885][ T2220] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 80.772799][ T2220] do_filp_open+0x20b/0x450 [ 80.777119][ T2220] ? vfs_tmpfile+0x2c0/0x2c0 [ 80.781766][ T2220] ? _raw_spin_unlock+0x49/0x60 [ 80.786422][ T2220] ? __alloc_fd+0x4c1/0x560 [ 80.790852][ T2220] do_sys_open+0x39c/0x810 [ 80.795098][ T2220] ? file_open_root+0x490/0x490 [ 80.799785][ T2220] ? switch_fpu_return+0x1d4/0x410 [ 80.804735][ T2220] do_syscall_64+0xca/0x1c0 [ 80.809067][ T2220] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 80.814793][ T2220] RIP: 0033:0x7f5b9d96bb99 [ 80.819042][ T2220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.838528][ T2220] RSP: 002b:00007f5b9cbed048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 80.846729][ T2220] RAX: ffffffffffffffda RBX: 00007f5b9daf9fa0 RCX: 00007f5b9d96bb99 [ 80.854544][ T2220] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 80.862529][ T2220] RBP: 00007f5b9d9ec77e R08: 0000000000000000 R09: 0000000000000000 [ 80.870687][ T2220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.878499][ T2220] R13: 000000000000000b R14: 00007f5b9daf9fa0 R15: 00007ffc57727688 [ 80.886322][ T2220] ---[ end trace 69f140156ef27c62 ]--- [ 80.892959][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.894719][ T1933] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 80.908340][ T2220] erofs: (device loop4): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 80.918430][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.930584][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.948614][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.063376][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.080146][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.087113][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.098407][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.107123][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.113992][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.122888][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.302257][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.316099][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.329666][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.338080][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.349972][ T1988] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 81.361588][ T1943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.369682][ T1943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.386618][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.395148][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.403588][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.412738][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.449928][ T1933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.460860][ T1933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 81.469607][ T1933] usb 1-1: config 1 has no interface number 0 [ 81.476203][ T1933] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.487108][ T1933] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 81.496451][ T1933] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 81.513158][ T2240] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 81.527063][ T2240] ext4 filesystem being mounted at /root/syzkaller.iyL4Rv/0/bus supports timestamps until 2038 (0x7fffffff) [ 81.630026][ T1988] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 81.659987][ T1933] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.669062][ T1933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.677429][ T1933] usb 1-1: Product: syz [ 81.681900][ T1933] usb 1-1: Manufacturer: syz [ 81.686309][ T1933] usb 1-1: SerialNumber: syz [ 81.731167][ T1933] usb 1-1: selecting invalid altsetting 1 [ 81.749967][ T1988] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 81.763180][ T1988] usb 5-1: can't read configurations, error -61 [ 81.776310][ T2247] F2FS-fs (loop2): Found nat_bits in checkpoint [ 81.780762][ T2252] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 81.815873][ T2247] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 81.830115][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 81.831993][ T2247] attempt to access beyond end of device [ 81.831993][ T2247] loop2: rw=10241, want=45104, limit=40427 [ 81.837448][ T23] audit: type=1400 audit(1719834763.350:285): avc: denied { ioctl } for pid=2246 comm="syz.2.590" path="/root/syzkaller.LJZNxx/145/file2/file0" dev="loop2" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.877523][ T2247] attempt to access beyond end of device [ 81.877523][ T2247] loop2: rw=0, want=45104, limit=40427 [ 81.893593][ T350] attempt to access beyond end of device [ 81.893593][ T350] loop2: rw=524288, want=45072, limit=40427 [ 81.905289][ T350] attempt to access beyond end of device [ 81.905289][ T350] loop2: rw=0, want=45072, limit=40427 [ 81.922782][ T1314] attempt to access beyond end of device [ 81.922782][ T1314] loop2: rw=2049, want=45112, limit=40427 [ 81.938066][ T2257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.592'. [ 81.940219][ T1988] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 82.180082][ T1933] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 82.186067][ T1933] cdc_ncm 1-1:1.1: bind() failure [ 82.194496][ T1933] usb 1-1: USB disconnect, device number 9 [ 82.212833][ T13] usb 4-1: config 0 has no interfaces? [ 82.218112][ T13] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 82.227049][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.240076][ T1988] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 82.243951][ T13] usb 4-1: config 0 descriptor?? [ 82.247871][ T1942] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 82.295332][ T2262] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.302945][ T2262] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.310762][ T2262] device bridge_slave_0 entered promiscuous mode [ 82.320876][ T2262] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.327779][ T2262] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.335125][ T2262] device bridge_slave_1 entered promiscuous mode [ 82.390130][ T1988] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 82.397668][ T1988] usb 5-1: can't read configurations, error -61 [ 82.403972][ T1988] usb usb5-port1: attempt power cycle [ 82.404205][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.416788][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.440751][ T1933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.448844][ T1933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.457080][ T1933] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.463915][ T1933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.471310][ T1933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.479521][ T1933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.487565][ T1933] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.494409][ T1933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.502473][ T1933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.510250][ T1933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.518105][ T1946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.529881][ T1942] usb 2-1: Using ep0 maxpacket: 16 [ 82.535873][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.554122][ T1933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.561978][ T1933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.579456][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.587861][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.649996][ T1942] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.664118][ T1942] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.674103][ T1942] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 82.685377][ T2270] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 82.703486][ T2240] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.718124][ T1933] usb 4-1: USB disconnect, device number 7 [ 82.727113][ T2270] EXT4-fs error (device loop2): ext4_quota_enable:6052: comm syz.2.597: Bad quota inum: 4278190083, type: 0 [ 82.739185][ T480] device bridge_slave_1 left promiscuous mode [ 82.739249][ T2270] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=4278190083). Please run e2fsck to fix. [ 82.745899][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.761445][ T2270] EXT4-fs (loop2): mount failed [ 82.772552][ T480] device bridge_slave_0 left promiscuous mode [ 82.778829][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.829899][ T1988] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 82.840172][ T1942] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 82.852517][ T1942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.860707][ T1942] usb 2-1: Product: 亻װ밴䌅῞硜醻럊珊牮嫜겫ঠ㥨黹έ咶㛄エს䎒믔ﴍ琴䔁档㩚ᩔ辜뵠 [ 82.873394][ T1942] usb 2-1: Manufacturer: ␁ [ 82.877851][ T1942] usb 2-1: SerialNumber: 袶媑煬鱼芠ⲫ䛹ຬ茉ᔸࣴꚕ계랔轰赍锍蛔 [ 82.960151][ T1988] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 82.992333][ T2278] 9pnet: Insufficient options for proto=fd [ 83.079986][ T1988] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 83.087414][ T1988] usb 5-1: can't read configurations, error -61 [ 83.201834][ T2279] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 83.240581][ T1988] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 83.248406][ T1942] usbhid 2-1:1.0: can't add hid device: -22 [ 83.254985][ T1942] usbhid: probe of 2-1:1.0 failed with error -22 [ 83.331615][ T2287] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 83.347970][ T2287] ext4 filesystem being mounted at /root/syzkaller.iyL4Rv/2/bus supports timestamps until 2038 (0x7fffffff) [ 83.366658][ T23] audit: type=1400 audit(1719834764.880:286): avc: denied { read write } for pid=2286 comm="syz.3.600" name="uhid" dev="devtmpfs" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.390684][ T23] audit: type=1400 audit(1719834764.880:287): avc: denied { open } for pid=2286 comm="syz.3.600" path="/dev/uhid" dev="devtmpfs" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.391037][ T1942] hid (null): unknown global tag 0xe [ 83.419111][ T1988] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 83.430926][ T1942] hid-generic 0000:0000:0000.0005: unknown main item tag 0xd [ 83.438427][ T23] audit: type=1400 audit(1719834764.930:288): avc: denied { bind } for pid=2286 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.457905][ T1942] hid-generic 0000:0000:0000.0005: unknown main item tag 0xd [ 83.479571][ T1942] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 83.490331][ T1942] hid-generic 0000:0000:0000.0005: unknown main item tag 0x7 [ 83.498154][ T1942] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 83.506701][ T1942] hid-generic 0000:0000:0000.0005: unknown global tag 0xe [ 83.514539][ T1942] hid-generic 0000:0000:0000.0005: item 0 1 1 14 parsing failed [ 83.522721][ T1942] hid-generic: probe of 0000:0000:0000.0005 failed with error -22 [ 83.559992][ T1988] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 83.567479][ T1988] usb 5-1: can't read configurations, error -61 [ 83.579882][ T1988] usb usb5-port1: unable to enumerate USB device [ 83.603975][ T2294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.604'. [ 83.610139][ T2297] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 83.685594][ T2302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.605'. [ 84.535350][ T23] audit: type=1400 audit(1719834766.050:289): avc: denied { mounton } for pid=2320 comm="syz.0.610" path="/root/syzkaller.QSaFiZ/107/file0/file0" dev="loop0" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 84.632887][ T711] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 84.640807][ T711] FAT-fs (loop0): Filesystem has been set read-only [ 84.650973][ T711] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 84.673522][ T2329] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 84.687973][ T2329] ext4 filesystem being mounted at /root/syzkaller.iyL4Rv/8/bus supports timestamps until 2038 (0x7fffffff) [ 84.727497][ T604] hid (null): unknown global tag 0xe [ 84.735775][ T604] hid-generic 0000:0000:0000.0006: unknown main item tag 0xd [ 84.772694][ T604] hid-generic 0000:0000:0000.0006: unknown main item tag 0xd [ 84.789088][ T604] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 84.797444][ T604] hid-generic 0000:0000:0000.0006: unknown main item tag 0x7 [ 84.805986][ T604] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 84.813744][ T604] hid-generic 0000:0000:0000.0006: unknown global tag 0xe [ 84.821385][ T604] hid-generic 0000:0000:0000.0006: item 0 1 1 14 parsing failed [ 84.835504][ T604] hid-generic: probe of 0000:0000:0000.0006 failed with error -22 [ 84.964192][ T2339] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 84.978882][ T2339] ext4 filesystem being mounted at /root/syzkaller.YMmfJF/7/bus supports timestamps until 2038 (0x7fffffff) [ 84.988433][ T604] usb 2-1: USB disconnect, device number 9 [ 85.005947][ T9] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 85.020697][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 48 with error 28 [ 85.033080][ T2340] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.039199][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 85.039199][ T9] [ 85.046620][ T2340] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.051870][ T2348] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 85.057552][ T2340] device bridge_slave_0 entered promiscuous mode [ 85.070184][ T9] EXT4-fs (loop1): Total free blocks count 0 [ 85.076029][ T9] EXT4-fs (loop1): Free/Dirty block details [ 85.081761][ T9] EXT4-fs (loop1): free_blocks=68451041280 [ 85.087400][ T9] EXT4-fs (loop1): dirty_blocks=48 [ 85.092659][ T2340] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.097827][ T9] EXT4-fs (loop1): Block reservation details [ 85.101924][ T2340] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.105703][ T9] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 85.113854][ T2340] device bridge_slave_1 entered promiscuous mode [ 85.129278][ T2351] capability: warning: `syz.2.620' uses deprecated v2 capabilities in a way that may be insecure [ 85.140843][ T23] audit: type=1400 audit(1719834766.660:290): avc: denied { create } for pid=2350 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 85.197374][ T2340] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.204239][ T2340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.211368][ T2340] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.218094][ T2340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.242822][ T2351] EXT4-fs (loop2): Test dummy encryption mode enabled [ 85.249514][ T2351] EXT4-fs (loop2): Ignoring removed oldalloc option [ 85.256898][ T2355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.619'. [ 85.288233][ T2351] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,data_err=ignore,errors=remount-ro,test_dummy_encryption,nobarrier,noblock_validity,minixdf,oldalloc, [ 85.309506][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.317043][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.325146][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.335652][ T2348] erofs: (device loop3): erofs_parse_options: Unrecognized mount option "YkI 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.786894][ T2371] RSP: 002b:00007f16caf53048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.795135][ T2371] RAX: ffffffffffffffda RBX: 00007f16cbe5ffa0 RCX: 00007f16cbcd1b99 [ 85.802942][ T2371] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000012 [ 85.810840][ T2371] RBP: 00007f16caf530a0 R08: 0000000000000000 R09: 0000000000000000 [ 85.818667][ T2371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.826822][ T2371] R13: 000000000000000b R14: 00007f16cbe5ffa0 R15: 00007ffde390ddc8 [ 85.865038][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.904786][ T2380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.626'. [ 85.906558][ T2385] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 86.071964][ T2387] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 86.079186][ T2387] EXT4-fs (loop2): Unrecognized mount option "smackfshat=+-[" or missing value [ 86.099368][ T2396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.630'. [ 86.112728][ T2392] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 86.128026][ T2392] ext4 filesystem being mounted at /root/syzkaller.wyx0pr/42/bus supports timestamps until 2038 (0x7fffffff) [ 86.155590][ T13] hid (null): unknown global tag 0xe [ 86.162074][ T13] hid-generic 0000:0000:0000.0007: unknown main item tag 0xd [ 86.179149][ T13] hid-generic 0000:0000:0000.0007: unknown main item tag 0xd [ 86.196664][ T13] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 86.213230][ T13] hid-generic 0000:0000:0000.0007: unknown main item tag 0x7 [ 86.227704][ T13] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 86.240466][ T604] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 86.249284][ T13] hid-generic 0000:0000:0000.0007: unknown global tag 0xe [ 86.256485][ T13] hid-generic 0000:0000:0000.0007: item 0 1 1 14 parsing failed [ 86.265165][ T13] hid-generic: probe of 0000:0000:0000.0007 failed with error -22 [ 86.480001][ T604] usb 4-1: Using ep0 maxpacket: 16 [ 86.599939][ T604] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.612926][ T2403] F2FS-fs (loop0): Found nat_bits in checkpoint [ 86.622167][ T604] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.643779][ T604] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 86.674247][ T2403] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 86.689721][ T2403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2403 comm=syz.0.632 [ 86.702702][ T2403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=2403 comm=syz.0.632 [ 86.722512][ T2340] attempt to access beyond end of device [ 86.722512][ T2340] loop0: rw=2049, want=45104, limit=40427 [ 86.740059][ T13] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 86.819968][ T604] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 86.829105][ T604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.837137][ T604] usb 4-1: Product: 亻װ밴䌅῞硜醻럊珊牮嫜겫ঠ㥨黹έ咶㛄エს䎒믔ﴍ琴䔁档㩚ᩔ辜뵠 [ 86.849551][ T604] usb 4-1: Manufacturer: ␁ [ 86.854215][ T604] usb 4-1: SerialNumber: 袶媑煬鱼芠ⲫ䛹ຬ茉ᔸࣴꚕ계랔轰赍锍蛔 [ 87.028693][ T2426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.638'. [ 87.066740][ T23] audit: type=1400 audit(1719834768.580:291): avc: denied { lock } for pid=2428 comm="syz.2.639" path="socket:[24980]" dev="sockfs" ino=24980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.097968][ T2432] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 87.107366][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.119709][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.135603][ T13] usb 2-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 87.146986][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.161307][ T13] usb 2-1: config 0 descriptor?? [ 87.181133][ T2436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.642'. [ 87.241974][ T2435] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 87.280051][ T604] usbhid 4-1:1.0: can't add hid device: -22 [ 87.285848][ T604] usbhid: probe of 4-1:1.0 failed with error -22 [ 87.341747][ T2446] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 87.356660][ T2446] ext4 filesystem being mounted at /root/syzkaller.sVLLdC/8/bus supports timestamps until 2038 (0x7fffffff) [ 87.369941][ T1938] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 87.386654][ T1946] hid (null): unknown global tag 0xe [ 87.394640][ T1946] hid-generic 0000:0000:0000.0008: unknown main item tag 0xd [ 87.402260][ T1946] hid-generic 0000:0000:0000.0008: unknown main item tag 0xd [ 87.409519][ T1946] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 87.420442][ T1946] hid-generic 0000:0000:0000.0008: unknown main item tag 0x7 [ 87.427665][ T1946] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 87.436147][ T1946] hid-generic 0000:0000:0000.0008: unknown global tag 0xe [ 87.443361][ T1946] hid-generic 0000:0000:0000.0008: item 0 1 1 14 parsing failed [ 87.451632][ T1946] hid-generic: probe of 0000:0000:0000.0008 failed with error -22 [ 87.639900][ T1938] usb 3-1: device descriptor read/64, error 18 [ 87.651970][ T13] wacom 0003:056A:00B2.0009: unknown main item tag 0x2 [ 87.673569][ T13] wacom 0003:056A:00B2.0009: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 87.689508][ T13] wacom 0003:056A:00B2.0009: hidraw0: USB HID v0.00 Device [HID 056a:00b2] on usb-dummy_hcd.1-1/input0 [ 87.707576][ T13] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B2.0009/input/input6 [ 87.728978][ T23] audit: type=1400 audit(1719834769.240:292): avc: denied { read } for pid=147 comm="acpid" name="event3" dev="devtmpfs" ino=25036 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.760766][ T23] audit: type=1400 audit(1719834769.240:293): avc: denied { open } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=25036 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.801986][ T23] audit: type=1400 audit(1719834769.310:294): avc: denied { ioctl } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=25036 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.852783][ T604] usb 2-1: USB disconnect, device number 10 [ 87.933698][ T2452] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 87.941300][ T2452] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 87.951586][ T2452] F2FS-fs (loop0): invalid crc value [ 87.960131][ T2452] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.992626][ T2452] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 87.999577][ T2452] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.019540][ T2340] attempt to access beyond end of device [ 88.019540][ T2340] loop0: rw=2049, want=45104, limit=40427 [ 88.059868][ T1938] usb 3-1: device descriptor read/64, error 18 [ 88.329877][ T1938] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 88.466862][ T2473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.651'. [ 88.500109][ T2476] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 88.574247][ T2478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=2478 comm=syz.0.654 [ 88.596488][ T2480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.653'. [ 88.619902][ T1938] usb 3-1: device descriptor read/64, error 18 [ 88.627270][ T2482] EXT4-fs (loop0): Ignoring removed orlov option [ 88.638188][ T2482] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 88.652362][ T2482] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 88.737608][ T23] audit: type=1400 audit(1719834770.250:295): avc: denied { ioctl } for pid=2484 comm="syz.1.656" path="socket:[26145]" dev="sockfs" ino=26145 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.982495][ T604] usb 4-1: USB disconnect, device number 8 [ 88.999900][ T13] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 89.030002][ T1988] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 89.037431][ T1938] usb 3-1: device descriptor read/64, error 18 [ 89.043402][ T23] audit: type=1400 audit(1719834770.560:296): avc: denied { setopt } for pid=2494 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.154945][ T2505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.662'. [ 89.180643][ T1938] usb usb3-port1: attempt power cycle [ 89.189262][ T2508] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 89.239897][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 89.265251][ T2514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.666'. [ 89.284191][ T13] usb 2-1: too many configurations: 23, using maximum allowed: 8 [ 89.351202][ T2518] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,stripe=0x0000000000000002,noblock_validity,errors=remount-ro,noblock_validity,bsddf,sysvgroups,nojournal_checksum,nodelalloc, [ 89.369981][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 89.382054][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 89.392986][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.409267][ T2518] EXT4-fs error (device loop3) in ext4_setattr:5881: Corrupt filesystem [ 89.417778][ T2518] EXT4-fs (loop3): Remounting filesystem read-only [ 89.429998][ T1988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.441090][ T1988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.448907][ T2518] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #2: block 16: comm syz.3.668: lblock 0 mapped to illegal pblock 16 (length 1) [ 89.450919][ T1988] usb 1-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 89.474675][ T1988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.486348][ T1988] usb 1-1: config 0 descriptor?? [ 89.493004][ T2223] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 89.510169][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 89.521160][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 89.531427][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.590133][ T1938] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 89.625923][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 89.641275][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 89.651539][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.698889][ T2525] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.705916][ T2525] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.713560][ T2525] device bridge_slave_0 entered promiscuous mode [ 89.720520][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.727341][ T2525] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.734877][ T2525] device bridge_slave_1 entered promiscuous mode [ 89.741590][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 89.753643][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 89.765644][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.789963][ T1938] usb 3-1: device descriptor read/8, error -61 [ 89.804109][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.811096][ T2525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.818177][ T2525] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.825088][ T2525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.849383][ T604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.857216][ T604] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.865194][ T604] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.872608][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 89.884657][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 89.895137][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.911525][ T1946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.919790][ T1946] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.926852][ T1946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.940459][ T604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.949437][ T604] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.956513][ T604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.961663][ T1988] wacom 0003:056A:00B2.000A: unknown main item tag 0x2 [ 89.971428][ T604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.973885][ T1988] wacom 0003:056A:00B2.000A: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 89.988836][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 89.993164][ T1988] wacom 0003:056A:00B2.000A: hidraw0: USB HID v0.00 Device [HID 056a:00b2] on usb-dummy_hcd.0-1/input0 [ 90.009778][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 90.017948][ T1988] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B2.000A/input/input10 [ 90.020964][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.048157][ T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.056350][ T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.064271][ T611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.081675][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.089960][ T1938] usb 3-1: device descriptor read/8, error -61 [ 90.096278][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.105748][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.119993][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 90.132039][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 90.142676][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.187435][ T1942] usb 1-1: USB disconnect, device number 10 [ 90.230215][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 90.241462][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 90.252265][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.281547][ T2538] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 90.325547][ T2546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.677'. [ 90.338202][ T2547] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 90.388429][ T2552] input: syz1 as /devices/virtual/input/input13 [ 90.422178][ T13] usb 2-1: New USB device found, idVendor=8e6f, idProduct=5b63, bcdDevice=c4.67 [ 90.439326][ T2535] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.446396][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.454741][ T13] usb 2-1: Product: 《 [ 90.459051][ T2535] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.465917][ T13] usb 2-1: Manufacturer: о [ 90.470866][ T2535] device bridge_slave_0 entered promiscuous mode [ 90.477581][ T480] device bridge_slave_1 left promiscuous mode [ 90.483859][ T13] usb 2-1: SerialNumber: 䨻꘿㋌≏뽸欂ￅå잤慍횚悲㣩癷ꯞ뗿䳿颩꥜㝜䲱ޅ康ꑡ↳ㆱ퐥䎔콀ܝ樫჉∭㜋剡䓻叐쎕⺄Ɵ懏䟑讻⋳ꉼ횤繮꓾땿᫤즽쉊愬ﻐ㱥悯༐帙趯⠠턈鐒嵭ㅢከ橑鑕㙲ꦒ떗ꬋ踭⎿듏늁쇠迸⊙淒鷶앚涡৕ꀝ唶ცꖱ呦 [ 90.514128][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.521941][ T480] device bridge_slave_0 left promiscuous mode [ 90.527939][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.535118][ T13] usb 2-1: config 0 descriptor?? [ 90.605445][ T2535] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.612327][ T2535] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.619570][ T2535] device bridge_slave_1 entered promiscuous mode [ 90.643035][ T2550] F2FS-fs (loop2): Found nat_bits in checkpoint [ 90.699953][ T1946] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 90.714755][ T2550] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 90.722433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.737331][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.745581][ T2262] attempt to access beyond end of device [ 90.745581][ T2262] loop2: rw=2049, want=45104, limit=40427 [ 90.750181][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.765811][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.774238][ T1942] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.781092][ T1942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.798404][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.807554][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.815853][ T1942] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.822782][ T1942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.838653][ T5] usb 2-1: USB disconnect, device number 11 [ 90.842176][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.872036][ T1933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.879752][ T1933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.889588][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.904146][ T1933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.930474][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.940349][ T2564] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 90.957868][ T1946] usb 4-1: Using ep0 maxpacket: 16 [ 90.971355][ T1988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.985864][ T1947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.016145][ T23] audit: type=1400 audit(1719834772.530:297): avc: denied { bind } for pid=2568 comm="syz.0.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.060665][ T2573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.673'. [ 91.073481][ T23] audit: type=1400 audit(1719834772.560:298): avc: denied { write } for pid=2568 comm="syz.0.683" path="socket:[26740]" dev="sockfs" ino=26740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.079010][ T2586] tipc: Enabling of bearer rejected, failed to enable media [ 91.099904][ T1946] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.130477][ T1946] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.140523][ T1946] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 91.147217][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 91.173000][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.186755][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 91.195566][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.204186][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.212999][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.221445][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.229535][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.280644][ T2590] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 91.320112][ T1946] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 91.329493][ T1946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.337542][ T1946] usb 4-1: Product: 亻װ밴䌅῞硜醻럊珊牮嫜겫ঠ㥨黹έ咶㛄エს䎒믔ﴍ琴䔁档㩚ᩔ辜뵠 [ 91.349721][ T1946] usb 4-1: Manufacturer: ␁ [ 91.359317][ T1946] usb 4-1: SerialNumber: 袶媑煬鱼芠ⲫ䛹ຬ茉ᔸࣴꚕ계랔轰赍锍蛔 [ 91.437056][ T2596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.688'. [ 91.557568][ T23] audit: type=1400 audit(1719834773.050:299): avc: denied { map } for pid=2592 comm="syz.4.687" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.623491][ T2599] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 91.638060][ T2599] EXT4-fs (loop0): Remounting filesystem read-only [ 91.646101][ T2599] EXT4-fs error (device loop0): ext4_free_branches:1022: inode #11: comm syz.0.689: invalid indirect mapped block 4278190080 (level 0) [ 91.662780][ T2599] EXT4-fs error (device loop0): ext4_free_branches:1022: inode #11: comm syz.0.689: invalid indirect mapped block 1 (level 1) [ 91.677390][ T2599] EXT4-fs (loop0): 1 truncate cleaned up [ 91.682952][ T2599] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000001000000,errors=remount-ro,norecovery,jqfmt=vfsv0,nolazytime,noquota,auto_da_alloc=0x0000000000000006,usrquota,init_itable=0x0000000000000005, [ 91.710160][ T1938] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 91.730054][ T13] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 91.765106][ T2604] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 91.800103][ T1946] usbhid 4-1:1.0: can't add hid device: -22 [ 91.806269][ T1946] usbhid: probe of 4-1:1.0 failed with error -22 [ 91.821618][ T480] device bridge_slave_1 left promiscuous mode [ 91.827868][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.836077][ T480] device bridge_slave_0 left promiscuous mode [ 91.843319][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.948024][ T2609] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.955369][ T2609] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.963145][ T2609] device bridge_slave_0 entered promiscuous mode [ 91.975280][ T2609] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.982511][ T2609] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.990547][ T2609] device bridge_slave_1 entered promiscuous mode [ 92.080239][ T2609] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.087101][ T2609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.094250][ T2609] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.101234][ T2609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.108637][ T1938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 235, changing to 7 [ 92.119459][ T1938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49602, setting to 1024 [ 92.140667][ T1946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.148961][ T1946] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.157121][ T1946] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.170495][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.181285][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.188229][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.219830][ T13] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 92.227230][ T13] usb 2-1: can't read configurations, error -61 [ 92.239560][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.251179][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.257995][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.277775][ T1943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.287076][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.300151][ T1938] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 92.309662][ T1938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.319263][ T1938] usb 3-1: Product: syz [ 92.320167][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.324406][ T1938] usb 3-1: Manufacturer: syz [ 92.336110][ T1938] usb 3-1: SerialNumber: syz [ 92.341874][ T1938] usb 3-1: config 0 descriptor?? [ 92.349566][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.367349][ T1943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.380143][ T13] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 92.387985][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.397286][ T1942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.489895][ T1946] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 92.504019][ T2622] binder: 2620:2622 ioctl 8030ae7c 20000140 returned -22 [ 92.568641][ T23] audit: type=1400 audit(1719834774.080:300): avc: denied { append } for pid=2620 comm="syz.0.694" name="event2" dev="devtmpfs" ino=1968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.660108][ T1938] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 92.670043][ T1938] usb 3-1: USB disconnect, device number 16 [ 92.710502][ T480] device bridge_slave_1 left promiscuous mode [ 92.716580][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.724550][ T480] device bridge_slave_0 left promiscuous mode [ 92.730868][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.799958][ T13] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 92.811211][ T13] usb 2-1: can't read configurations, error -61 [ 92.824923][ T13] usb usb2-port1: attempt power cycle [ 92.860858][ T1946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.876134][ T1946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.897251][ T1946] usb 5-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 92.906167][ T1946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.922359][ T1946] usb 5-1: config 0 descriptor?? [ 92.974579][ T2630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.697'. [ 93.005438][ T2633] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 93.053670][ T23] audit: type=1400 audit(1719834774.570:301): avc: denied { mount } for pid=2636 comm="syz.0.700" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 93.075997][ T23] audit: type=1400 audit(1719834774.570:302): avc: denied { remount } for pid=2636 comm="syz.0.700" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 93.097493][ T23] audit: type=1400 audit(1719834774.580:303): avc: denied { unmount } for pid=2609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 93.142259][ T2640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.701'. [ 93.249884][ T13] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 93.538596][ T5] usb 4-1: USB disconnect, device number 9 [ 93.542096][ T1946] wacom 0003:056A:00B2.000B: unknown main item tag 0x2 [ 93.555158][ T1946] wacom 0003:056A:00B2.000B: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 93.566799][ T1946] wacom 0003:056A:00B2.000B: hidraw0: USB HID v0.00 Device [HID 056a:00b2] on usb-dummy_hcd.4-1/input0 [ 93.579557][ T1946] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B2.000B/input/input14 [ 93.590079][ T13] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 93.600955][ T23] audit: type=1400 audit(1719834775.120:304): avc: denied { mount } for pid=2648 comm="syz.2.704" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 93.601917][ T2649] overlayfs: workdir and upperdir must reside under the same mount [ 93.622844][ T13] usb 2-1: can't read configurations, error -61 [ 93.647170][ T23] audit: type=1400 audit(1719834775.120:305): avc: denied { mounton } for pid=2648 comm="syz.2.704" path="/root/syzkaller.YMmfJF/21/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 93.672782][ T23] audit: type=1400 audit(1719834775.160:306): avc: denied { unmount } for pid=2262 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 93.701811][ T2654] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nobarrier,noauto_da_alloc,,errors=continue [ 93.713898][ T2654] ext4 filesystem being mounted at /root/syzkaller.KrwgmT/6/bus supports timestamps until 2038 (0x7fffffff) [ 93.770990][ T2654] EXT4-fs error (device loop3): ext4_xattr_block_list:717: inode #15: comm syz.3.707: corrupted xattr block 33 [ 93.772765][ T23] audit: type=1400 audit(1719834775.290:307): avc: denied { execmem } for pid=2658 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 93.783547][ T1942] usb 5-1: USB disconnect, device number 11 [ 93.802418][ T13] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 93.848865][ T2654] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #18: comm syz.3.707: corrupted xattr block 20 [ 93.861160][ T2654] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 93.871236][ T2654] ------------[ cut here ]------------ [ 93.876502][ T2654] kernel BUG at fs/ext4/ext4.h:2984! [ 93.882031][ T2654] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 93.887919][ T2654] CPU: 0 PID: 2654 Comm: syz.3.707 Tainted: G W 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 93.892917][ T2660] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.898840][ T2654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 93.905942][ T2660] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.915774][ T2654] RIP: 0010:ext4_mb_find_by_goal+0xba1/0xbe0 [ 93.915784][ T2654] Code: fc ff ff 48 8b 4c 24 28 80 e1 07 80 c1 03 38 c1 0f 8c 22 fc ff ff 48 8b 7c 24 28 e8 89 74 c8 ff e9 13 fc ff ff e8 6f 8f 98 ff <0f> 0b e8 b8 44 6f ff e8 63 8f 98 ff 0f 0b e8 5c 8f 98 ff 0f 0b e8 [ 93.915789][ T2654] RSP: 0018:ffff8881de80e8e0 EFLAGS: 00010287 [ 93.915796][ T2654] RAX: ffffffff81cba991 RBX: 0000000000000001 RCX: 0000000000040000 [ 93.915801][ T2654] RDX: ffffc900007cd000 RSI: 0000000000000d13 RDI: 0000000000000d14 [ 93.915807][ T2654] RBP: ffff8881de80e9f0 R08: ffffffff81cb9f11 R09: ffffed10375540b0 [ 93.915812][ T2654] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 93.915818][ T2654] R13: ffff8881e64833f0 R14: 0000000000000001 R15: 1ffff1103cc9067e [ 93.915831][ T2654] FS: 00007f60eaa456c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 93.934993][ T2660] device bridge_slave_0 entered promiscuous mode [ 93.947959][ T2654] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.947965][ T2654] CR2: 00000000200029c0 CR3: 00000001e5ef9000 CR4: 00000000003406b0 [ 93.947972][ T2654] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.947977][ T2654] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.947980][ T2654] Call Trace: [ 93.947996][ T2654] ? __die+0xb4/0x100 [ 93.948004][ T2654] ? die+0x26/0x50 [ 93.948019][ T2654] ? do_trap+0x1e7/0x340 [ 93.955748][ T2660] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.961686][ T2654] ? ext4_mb_find_by_goal+0xba1/0xbe0 [ 93.961694][ T2654] ? ext4_mb_find_by_goal+0xba1/0xbe0 [ 93.961703][ T2654] ? do_invalid_op+0xfb/0x110 [ 93.961711][ T2654] ? ext4_mb_find_by_goal+0xba1/0xbe0 [ 93.961727][ T2654] ? invalid_op+0x1e/0x30 [ 93.969912][ T2660] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.977310][ T2654] ? ext4_mb_find_by_goal+0x121/0xbe0 [ 93.985931][ T2660] device bridge_slave_1 entered promiscuous mode [ 93.993127][ T2654] ? ext4_mb_find_by_goal+0xba1/0xbe0 [ 93.993137][ T2654] ? ext4_mb_find_by_goal+0xba1/0xbe0 [ 93.993148][ T2654] ? kmem_cache_alloc+0xd9/0x250 [ 93.993156][ T2654] ? ext4_mb_new_blocks+0x29f/0x2d10 [ 93.993164][ T2654] ? _ext4_get_block+0x21b/0x610 [ 93.993173][ T2654] ? ext4_mb_use_inode_pa+0x4b0/0x4b0 [ 93.993183][ T2654] ? ext4_file_write_iter+0x499/0x10e0 [ 93.993191][ T2654] ? __vfs_write+0x5d3/0x750 [ 93.993199][ T2654] ? vfs_write+0x206/0x4e0 [ 93.993208][ T2654] ? ksys_write+0x199/0x2c0 [ 93.993217][ T2654] ? do_syscall_64+0xca/0x1c0 [ 93.993226][ T2654] ext4_mb_regular_allocator+0x229/0x10d0 [ 93.993237][ T2654] ? ext4_mb_initialize_context+0x7bf/0xb80 [ 93.993246][ T2654] ? ext4_mb_normalize_request+0x27a/0x1250 [ 93.993255][ T2654] ? ext4_mb_normalize_request+0x1250/0x1250 [ 93.993266][ T2654] ext4_mb_new_blocks+0x59a/0x2d10 [ 93.993280][ T2654] ? memset+0x1f/0x40 [ 94.067925][ T2660] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.070664][ T2654] ? ext4_ext_check_overlap+0x180/0x5b0 [ 94.070674][ T2654] ? ext4_inode_to_goal_block+0x265/0x360 [ 94.070682][ T2654] ext4_ext_map_blocks+0x1e70/0x7450 [ 94.070699][ T2654] ? __unwind_start+0x708/0x890 [ 94.075188][ T2660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.080484][ T2654] ? ext4_ext_release+0x10/0x10 [ 94.080493][ T2654] ? is_bpf_text_address+0x24c/0x260 [ 94.080503][ T2654] ? check_preemption_disabled+0x9f/0x320 [ 94.080518][ T2654] ? unwind_get_return_address+0x49/0x80 [ 94.084844][ T2660] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.091598][ T2654] ? debug_smp_processor_id+0x20/0x20 [ 94.091606][ T2654] ? arch_stack_walk+0xf5/0x140 [ 94.091618][ T2654] ? _raw_read_unlock+0x21/0x40 [ 94.091627][ T2654] ? ext4_es_lookup_extent+0x559/0x9d0 [ 94.091642][ T2654] ext4_map_blocks+0xa2f/0x1ba0 [ 94.096807][ T2660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.102965][ T2654] ? ext4_issue_zeroout+0x150/0x150 [ 94.102973][ T2654] ? ext4_write_begin+0x419/0x1900 [ 94.102987][ T2654] ? vfs_write+0x206/0x4e0 [ 94.130008][ T1946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.133395][ T2654] ? ksys_write+0x199/0x2c0 [ 94.308971][ T2654] ? do_syscall_64+0xca/0x1c0 [ 94.313446][ T2654] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 94.319348][ T2654] _ext4_get_block+0x21b/0x610 [ 94.324139][ T2654] ? ext4_get_block+0x40/0x40 [ 94.328645][ T2654] ? check_preemption_disabled+0x9f/0x320 [ 94.334217][ T2654] ? debug_smp_processor_id+0x20/0x20 [ 94.339413][ T2654] ext4_block_write_begin+0x68a/0x1390 [ 94.344794][ T2654] ? _raw_spin_trylock_bh+0x190/0x190 [ 94.349995][ T2654] ? ext4_es_is_delayed+0x40/0x40 [ 94.354858][ T2654] ? trace_android_fs_datawrite_start+0x200/0x200 [ 94.361117][ T2654] ? ext4_should_dioread_nolock+0x94/0x500 [ 94.366755][ T2654] ext4_write_begin+0x5ba/0x1900 [ 94.371538][ T2654] ? ext4_readpages+0x110/0x110 [ 94.376351][ T2654] ? ext4_handle_error+0x213/0x3d0 [ 94.381541][ T2654] ? __ext4_error_inode+0x302/0x630 [ 94.386582][ T2654] ? ext4_handle_error+0x3d0/0x3d0 [ 94.391509][ T2654] ? ext4_xattr_ibody_get+0xf4/0x720 [ 94.396635][ T2654] ext4_da_write_begin+0x4a3/0xfe0 [ 94.401576][ T2654] ? down_write_trylock+0x130/0x130 [ 94.406610][ T2654] ? ext4_set_page_dirty+0x190/0x190 [ 94.411727][ T2654] ? ext4_initxattrs+0x110/0x110 [ 94.416499][ T2654] ? __vfs_getxattr+0x600/0x6d0 [ 94.421181][ T2654] ? iov_iter_fault_in_readable+0x313/0x4c0 [ 94.426910][ T2654] ? asan.module_dtor+0x20/0x20 [ 94.431597][ T2654] ? ktime_get_coarse_real_ts64+0xcc/0xe0 [ 94.437166][ T2654] generic_perform_write+0x2c7/0x560 [ 94.442399][ T2654] ? grab_cache_page_write_begin+0x90/0x90 [ 94.448030][ T2654] ? file_remove_privs+0x640/0x640 [ 94.452975][ T2654] ? down_write_trylock+0xd7/0x130 [ 94.457925][ T2654] __generic_file_write_iter+0x224/0x530 [ 94.463401][ T2654] ext4_file_write_iter+0x499/0x10e0 [ 94.468517][ T2654] ? ext4_file_read_iter+0x140/0x140 [ 94.473635][ T2654] ? iov_iter_init+0x82/0x160 [ 94.478246][ T2654] __vfs_write+0x5d3/0x750 [ 94.482485][ T2654] ? __kernel_write+0x350/0x350 [ 94.487169][ T2654] ? check_preemption_disabled+0x9f/0x320 [ 94.492726][ T2654] ? debug_smp_processor_id+0x20/0x20 [ 94.497931][ T2654] ? selinux_file_permission+0x2be/0x530 [ 94.503410][ T2654] vfs_write+0x206/0x4e0 [ 94.507482][ T2654] ksys_write+0x199/0x2c0 [ 94.511646][ T2654] ? __ia32_sys_read+0x80/0x80 [ 94.516249][ T2654] ? __fdget+0x189/0x200 [ 94.520332][ T2654] do_syscall_64+0xca/0x1c0 [ 94.524667][ T2654] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 94.530393][ T2654] RIP: 0033:0x7f60eb7c3b99 [ 94.534644][ T2654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.554088][ T2654] RSP: 002b:00007f60eaa45048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.562453][ T2654] RAX: ffffffffffffffda RBX: 00007f60eb951fa0 RCX: 00007f60eb7c3b99 [ 94.570264][ T2654] RDX: 000000000000fd14 RSI: 0000000020000300 RDI: 0000000000000004 [ 94.578211][ T2654] RBP: 00007f60eb84477e R08: 0000000000000000 R09: 0000000000000000 [ 94.586320][ T2654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to send rpc fd=3 want=228912 sent=208384 n=-1 (errno 32: Broken pipe) [ 94.594304][ T2654] R13: 000000000000000b R14: 00007f60eb951fa0 R15: 00007ffd77e26f98