last executing test programs: 30.801795969s ago: executing program 4 (id=1188): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfa, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x3}) dup2(r2, r0) 30.6734914s ago: executing program 4 (id=1189): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="66643d71cd8ca88827bc491e50a4d910635bbb21e163a07c76169ae0"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000340)=0x9) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0xed, 0x90, 0x0, 0x3, 0x2, 0x5, 0x7, 0x4, 0xf2, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0x2c, 0x3, 0x5, '\x00', 0x7, 0xffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.81691029s ago: executing program 4 (id=1196): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="66643d71cd8ca88827bc491e50"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0xed, 0x90, 0x0, 0x3, 0x2, 0x5, 0x7, 0x4, 0xf2, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0x2c, 0x3, 0x5, '\x00', 0x7, 0xffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.504417954s ago: executing program 4 (id=1202): syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x440c, &(0x7f0000000380)=ANY=[], 0x1, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x1, 0x8, 0x6, 0x8}, 0x20) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() socket$netlink(0x10, 0x3, 0x15) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r5 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 25.535521356s ago: executing program 4 (id=1212): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000002c0)={0x4, 0x5, 0x8001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 25.1381171s ago: executing program 4 (id=1216): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000004c0)={[{@nojournal_checksum}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe6}}, {@oldalloc}, {@nobarrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x41, 0x5b3, &(0x7f0000000780)="$eJzs3T9sG9UfAPDvne2mf/L7pUggAepQAVKRqjpJ/0BhaldEpUodkFggctyoihNXcQJNFKnpXiE68E9dygYDI4iBAbGwwcoCYkaqaARS04EaObaTNHWCE+q4xJ+PdPF7dxd/3zv7++x7upMD6FmHa3/SiGci4nwSMbBmWzYaGw/X91tanC/cW5wvJFGtXvg9iSQi7i7OF5r7J43HAxGxEBFPR8R3uYij6cpT7mkWKrNz4yOlUnGqUR+cnrg8WJmdO3ZpYmSsOFacPPHyK6dOnzw1fHx4bXPvVdfWclvr6/Vfbrx3/cfXbt34/ItDC4UPRpI4E/2NbWv78SjVj0kuzqxbf7ITwboo6XYD2JZMI89rqfRUDESmkfWtVNcODn070jygg6p9EVWgRyXyH3pU83tA7fy3uezk94/bZ+snILW4S4vzhavRjJ+tz03E3uVzk/1/JA+cmdTONw/uZEPZlRauRcRQNvvw+z9pvP/WzlptzdCjaiQd8+3Z+gv18Oufrow/0WL86W/Onf5LzfFvqTH+LbWIn9lg/DvfZoy/3vz1kw3jX+uLZ7MR9x+Kn6zET1rETyPi7Tbj33zj69Mbbat+GnEkWvV/dUYx2Xx+ePDipVJxqP63ZYxvjhx6deP+R+zfIH59znbv8sfM2v7vabQpbbP/X33/5XMLm8R/8fnNX/9Wx39fRLzfZvwn7n72+kbbbl9L7tS+BbTq/2bxk8jFrTbjv3Tm8M+NollDAAAAAAAAAAB4hNLla9mSNL9STtN8vn4P75OxPy2VK9NHL5ZnJkfr17wdjFzavNJqoF5PavXhxvW4zfrxdfUTmUbAzL7ler5QLo12ue8AAAAAAAAAAAAAAAAAAADwuDiw7v7/PzPL9/+v/7lqYLfa+Ce/gd1O/kPvejD/k661A9h5Pv+hZ1XlP/SuVvlvTIDeINehd8l/6F3yH3qX/IfeJf8BAAAAAAAAAAAAAAAAAAAAAAAAAKAjzp87V1uq9xbnC7X6aHZ2Zrz8zrHRYmU8PzFTyBfKU5fzY+XyWKmYL5Qn/un5knL58lBMzlwZnC5Wpgcrs3NvTZRnJpu/KVrMdbxHAAAAAAAAAAAAAAAAAAAA8N/Tv7wkaT4iV6+naT4f8b+IOJhEcvFSqTgUEf+PiJ8yub5afbjbjQYAAAAAAAAAAAAAAAAAAIBdpjI7Nz5SKhWnOlfINkJ1MET7hexWdo6IhTZ2vtp+M2rPuOU25xoHsMuHbvuFu9W6bjXjhw9X12Qej/fh41/o4qAEAAAAAAAAAAAAAAAAAAA9avWm33b/435nGwQAAAAAAAAAAAAAAAAAAAA9Kf0tiYjacmTghf71W/ckS5nlx4h49+aFj66MTE9PDdfW31lZP/1xY/3xbrQfaFczT9OIqOUxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKoyOzc+UioVp7ZZ6Gtjn273EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA7/g4AAP//5TrUlQ==") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getrlimit(0x7, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) epoll_create1(0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x4, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0xfffffe76) 25.030191741s ago: executing program 32 (id=1216): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000004c0)={[{@nojournal_checksum}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe6}}, {@oldalloc}, {@nobarrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x41, 0x5b3, &(0x7f0000000780)="$eJzs3T9sG9UfAPDvne2mf/L7pUggAepQAVKRqjpJ/0BhaldEpUodkFggctyoihNXcQJNFKnpXiE68E9dygYDI4iBAbGwwcoCYkaqaARS04EaObaTNHWCE+q4xJ+PdPF7dxd/3zv7++x7upMD6FmHa3/SiGci4nwSMbBmWzYaGw/X91tanC/cW5wvJFGtXvg9iSQi7i7OF5r7J43HAxGxEBFPR8R3uYij6cpT7mkWKrNz4yOlUnGqUR+cnrg8WJmdO3ZpYmSsOFacPPHyK6dOnzw1fHx4bXPvVdfWclvr6/Vfbrx3/cfXbt34/ItDC4UPRpI4E/2NbWv78SjVj0kuzqxbf7ITwboo6XYD2JZMI89rqfRUDESmkfWtVNcODn070jygg6p9EVWgRyXyH3pU83tA7fy3uezk94/bZ+snILW4S4vzhavRjJ+tz03E3uVzk/1/JA+cmdTONw/uZEPZlRauRcRQNvvw+z9pvP/WzlptzdCjaiQd8+3Z+gv18Oufrow/0WL86W/Onf5LzfFvqTH+LbWIn9lg/DvfZoy/3vz1kw3jX+uLZ7MR9x+Kn6zET1rETyPi7Tbj33zj69Mbbat+GnEkWvV/dUYx2Xx+ePDipVJxqP63ZYxvjhx6deP+R+zfIH59znbv8sfM2v7vabQpbbP/X33/5XMLm8R/8fnNX/9Wx39fRLzfZvwn7n72+kbbbl9L7tS+BbTq/2bxk8jFrTbjv3Tm8M+NollDAAAAAAAAAAB4hNLla9mSNL9STtN8vn4P75OxPy2VK9NHL5ZnJkfr17wdjFzavNJqoF5PavXhxvW4zfrxdfUTmUbAzL7ler5QLo12ue8AAAAAAAAAAAAAAAAAAADwuDiw7v7/PzPL9/+v/7lqYLfa+Ce/gd1O/kPvejD/k661A9h5Pv+hZ1XlP/SuVvlvTIDeINehd8l/6F3yH3qX/IfeJf8BAAAAAAAAAAAAAAAAAAAAAAAAAKAjzp87V1uq9xbnC7X6aHZ2Zrz8zrHRYmU8PzFTyBfKU5fzY+XyWKmYL5Qn/un5knL58lBMzlwZnC5Wpgcrs3NvTZRnJpu/KVrMdbxHAAAAAAAAAAAAAAAAAAAA8N/Tv7wkaT4iV6+naT4f8b+IOJhEcvFSqTgUEf+PiJ8yub5afbjbjQYAAAAAAAAAAAAAAAAAAIBdpjI7Nz5SKhWnOlfINkJ1MET7hexWdo6IhTZ2vtp+M2rPuOU25xoHsMuHbvuFu9W6bjXjhw9X12Qej/fh41/o4qAEAAAAAAAAAAAAAAAAAAA9avWm33b/435nGwQAAAAAAAAAAAAAAAAAAAA9Kf0tiYjacmTghf71W/ckS5nlx4h49+aFj66MTE9PDdfW31lZP/1xY/3xbrQfaFczT9OIqOUxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKoyOzc+UioVp7ZZ6Gtjn273EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA7/g4AAP//5TrUlQ==") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getrlimit(0x7, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) epoll_create1(0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x4, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0xfffffe76) 9.359568919s ago: executing program 2 (id=1375): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000340), &(0x7f00000002c0)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.359449219s ago: executing program 2 (id=1376): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) 9.35915977s ago: executing program 2 (id=1377): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 8.40793895s ago: executing program 2 (id=1383): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r1, &(0x7f0000000100)=""/134, 0x86) 7.800174967s ago: executing program 2 (id=1385): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="66643d71cd8ca88827bc491e50a4d910635bbb21e163a07c76169ae0b0064fdb8d"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0xed, 0x90, 0x0, 0x3, 0x2, 0x5, 0x7, 0x4, 0xf2, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0x2c, 0x3, 0x5, '\x00', 0x7, 0xffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.557514829s ago: executing program 2 (id=1387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000340), &(0x7f00000002c0)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.49114236s ago: executing program 33 (id=1387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000340), &(0x7f00000002c0)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.031069396s ago: executing program 6 (id=1388): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0xee, &(0x7f0000000300)={@empty, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x22, 0xe0, 0x67, 0x0, 0xdd, 0x67, 0x0, @local, @remote, {[@ssrr={0x89, 0x7, 0xc8, [@remote]}]}}, "87088fcce4176a0c03f28506e7e6c08ea3dfb9e93ca968477ba5f54cd734520277176cb9c0826030b587f4243ee98fa86f87b9df3a7c75d09cb22ae27049b747411a122d1ed892a886a186c388f5a7c2ac47b463b22c073c10e7311b5afdf2216a765b9cf65b05ffd770e8a6e0d3f7554fd28121520e031bfa5d253a9e592b2d2adfe9f7193e9488c88245a6686bb769931860ee505b3d9f6bf04ebd4fe01940683f72cc406ee6d92eb1f6d96f4059e709b98a86a88bcbd6939c0ad18dd79e9e98039137"}}}}, &(0x7f0000000200)={0x1, 0x1, [0x280, 0xeb2, 0xd5b, 0x215]}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24008000, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="b67cd9017609d6", 0x7, 0x2004082c, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r3) keyctl$search(0xa, r3, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 4.892606548s ago: executing program 6 (id=1407): r0 = syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x300, 0x0, @l2={'eth', 0x3a, 'gre0\x00'}}}}}, 0x34}}, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x31) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00810000000000000004"], 0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, r7, 0x301, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008890}, 0x10) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x102000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x103, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x7, 0x3, 0xfffffffffffffffd, 0x40000000001c, 0xfffffffffffff889, 0x0, 0xff], 0x0, 0x241901}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r8 = syz_usb_connect(0x2, 0x781, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x55, 0xe3, 0xe4, 0x40, 0x12d1, 0x3343, 0x1437, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76f, 0x4, 0x5, 0x9, 0xe0, 0x2, "", [{{0x9, 0x4, 0x62, 0x5, 0x2, 0xff, 0x1, 0x6b, 0x7, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "5fcaf8"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x3, 0x6}, {0x6, 0x24, 0x1a, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x80c9, 0x46bc}, @mbim_extended={0x8, 0x24, 0x1c, 0xb0, 0x80, 0x8}]}], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x0, 0x2, 0x64, [@generic={0xd5, 0xc, "a7766d50a43b2aff765f9dd1612e34ec9fa2ddad190a870e2450cd080be9143f71806e6d0262d567339e4c4ef7e890687f1ebc3706fc50fdf1022f29daf64fe89a40dd9118548d205ea17022c216e63d5f93b2c0ae64ce0b6ad88b84a4ab691a54df9a04e3020abf63ccf0c81ae8e6a667d03ec4026fdd536fa0dbe328ae9d8941cb7ea06ed3da28646b1e919befacdaad9835a2c5914aac6eb7efa1c0c33d868e9cc5f048b6412e72d6f8e6ec0650dc0dc01eccf700521578f4690d58495ca923c4edd917a25977f3badf0ed84a592f3b15da"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x400, 0xfe, 0x4, 0xe, [@generic={0x2b, 0x10, "a4a5eac03fc035b0804c466703f8928dd607d07223ae21e0ff45c025dc81dcfabb2922627447085c67"}]}}]}}, {{0x9, 0x4, 0xe, 0x8, 0x6, 0x20, 0xa4, 0x3c, 0x21, [@hid_hid={0x9, 0x21, 0xb9, 0xfa, 0x1, {0x22, 0x242}}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x4, 0xaf, 0x4, "2cee71"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x9, 0x4, 0xf5, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0xfff, 0x8}, @as_header={0x7, 0x24, 0x1, 0x9, 0x6, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8c, 0x1, 0x5, 0x81, 0x2}]}], [{{0x9, 0x5, 0x8, 0xc, 0x200, 0x0, 0x4a, 0x3, [@generic={0x2c, 0x4, "c3827dd11306d1de29ff9c12e92c074a3ee6ef5f71e7b50cb40478ef3102370299f3035d7829e4653144"}, @generic={0x64, 0x21, "744ea69acafc94f439967dbd9572bb956215cfc1a67f8ce0ca59ec1860eff4e095494692ed9567bebce50064f1c14400c7aeab419dd37dcc819be89c56ad512bb2d463a0dbb058b4fed9076720e4358ebead355cae4ed398af4a12b648a9513e3fb5"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x9, 0xc0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2a, 0x5}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xf5, 0x9, 0x8, [@generic={0xcf, 0x6, "467d6a45e621cca4264c3aa460f66e090bc5f734cfdff1601836a299cd696484f1e340e1d97b7a711e91d743586cc6c48c5ba06d36bc14ded54c78389119742344e731544d7b8d5d10b6c2858e88f5313fa687050eb584e68327f1f4fa38aacf93c691da18bb2cde70cc3f35f77b2c493d2c4f68c666490064e01569523ea89d852e05d0ae3fe8a6b26feb02d283fd19c802ec94e83a27328346874efd9057fabeffe4e9fddff0b8e00fa9a3b6aa3ac8d400aadc4c424b649255dfc017dd91682d10d2fb25f9da1adebc0c50d2"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0xd, 0x0, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x5, 0x93, 0x40, [@generic={0x96, 0x23, "6c57252aeaace574b0bc03bc4d729255b5a009626eed9afb8fa549d97e59ba2a5a9bef1eac7ae37f16beb2e9178d772818f34c55994e028b503d1f99701aacc04987c87e2bf29e9d9a39fdf2769e1d5ff6173e3269349aa6ac55a8724b95211d57b697ce8866086aa142461fdb54503317e98cfe7499ae5fefaf76d91d1083e3f1c9ee777c9456a592410687a2b6282f967594b4"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3, 0x80, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x89, 0x8}]}}]}}, {{0x9, 0x4, 0x3, 0x2, 0x1, 0x48, 0xf9, 0x6d, 0xc6, [@generic={0x10, 0x23, "8670c8559eea2d61ecdc6476cf06"}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "1454e8ccebab"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xc08, 0x7, 0x3, 0x72}, {0x6, 0x24, 0x1a, 0xcf4, 0x15}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @acm={0x4}, @mdlm_detail={0xcd, 0x24, 0x13, 0x7, "bbee6e9622ff124cce1ee27db155553b09e81625ce78acbf0ccb19180c578fc9b9f68a26bba39ad2d76b56ba8b2bf5ea83273b927afa7f00dcb384f8ff53fce160e2d828482933857aa764e4d6329eca120abc8ec15db40956ac12d171b1d2c7d8ada35be0b2c004542701192d3d75c08d95b2d07220a56e62b0d328cc74f8b1222c63cbb990b41537688fbadbd87c279fcb77e381984eb0430224270078c6cf46d98f3219ee7b518e04f8d45918c6a716b5c7bec91aed3671f40070db5b7820a4bb1401eb060573d2"}, @network_terminal={0x7, 0x24, 0xa, 0xf2, 0x8, 0x73, 0xde}, @acm={0x4, 0x24, 0x2, 0x9}, @dmm={0x7, 0x24, 0x14, 0x7fff, 0x5}]}], [{{0x9, 0x5, 0xe, 0xc, 0x8, 0x4, 0x5, 0x6, [@generic={0x4e, 0x1, "4ae612ab546d4af96259a4817bd61bc9a5025c0fab2a301d12876dd2fafb0464aa4ea5ae81d78298a7f9e35cca43aae86a8a5889fbcc759dc3818805f7a1036fa2b876d35443563f88a7a7f4"}]}}]}}, {{0x9, 0x4, 0x7b, 0x2, 0x7, 0xff, 0xff, 0xff, 0xa7, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x24}, [@mixer_unit={0x7, 0x24, 0x4, 0x3, 0xfc, 'MX'}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x4, "14e207e895"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x301, 0x6, 0x3, 0x6}]}], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x82, 0x99, 0xcf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}]}}, {{0x9, 0x5, 0x2d7e2e1f8353cd80, 0x1, 0x400, 0x2, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xfff}]}}, {{0x9, 0x5, 0x9, 0x10, 0x620, 0x2, 0xb8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x9}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0xf, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1ff}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x3, 0x4, 0x0, [@generic={0x87, 0x2, "7e9f87026b8f1aba0618004ff42a9cd250b687d22f04ed785e0edfc4ca9fcf10fe82dba00fa09fd8e636f2539dfe633e136d672ae0ed5620d38ce84db9144c56df498d68a130159892fe7cb2c2259f76da9d92cafa314ccbb569e5e5647ece78ccb22b0b9a379a0b00d712462c7e5250b2106d7111e62438822947c2872b8019934a2f5f8e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xd}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x4, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}, @generic={0x4a, 0x29, "58f6fa431b1f5ca416ee97281b496289f0129a8f7c71bd53c55bf1b9c32c062fbbb3f4bfff0be125e28a3f6f3bd3f525392ba7f32a3a0dc585ecc97e9e1488f5dcecab67be282ea9"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x3, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x10}, @generic={0xa6, 0x9, "707089c57cc51a19f9aa3995a43da9796fb659621d35b9a6ef01a40930aefe5e1bd74b525d05a252e5469fd92f03c7baf23876ded8a4a8439096fa8930574ba85d50ff73f9bbe97dc1b4a5335232343615d392d8f46713d64c6fc432b59d9b33bb8fc2f542dd5f91ee4bd2986efaccd016c1524f03fb9e13d002e84ef7913b8b697d055a5f53d9a7444f3b41076e224933373c777cf17498d5d487466a9fef9ede83b8ed"}]}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x200, 0x4, 0x1, 0x3, 0x8, 0x60}, 0x8, &(0x7f0000001080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x415}}, {0x5f, &(0x7f0000001140)=@string={0x5f, 0x3, "6181b0a613a1451fb29e366f2f71cf272208f2a915f2740720058c0e604c512db0dbc9ff8a44cb94c66a0d23460be65ac57ba873a3d2c12c157d718fd1b407b28a9f6ebc76233993f7f6f0e3aaddec9c6af19be08f96b1658cf5fda5e3"}}, {0x33, &(0x7f00000011c0)=@string={0x33, 0x3, "b4498d669806f8379b40e7541c0df0c5ff3046205e8e5e4cf83bcb3d3dff68c8a7cef32acef619f0a6bd6d9d234b7f673d"}}]}) syz_usb_control_io$uac1(r8, &(0x7f0000001400)={0x14, &(0x7f0000001280)={0x0, 0x22, 0x87, {0x87, 0x39, "afdc844d0475dda204f1e70d7518e4c6af49fc28396e6367b6c7ca26272daa70f6de3c5483e37306a01d77e280447312dde3346b29031707191f7d192987c762d38f039445534d2013ea3f1ba9275f9c89395899fbf3f9b85fd0b872f4a742a69230521181f2a8c3709ad664fa6130cd7896df71121ba9fa69fb0cb41056de8528d6f0cf35"}}, &(0x7f0000001340)={0x0, 0x3, 0x9c, @string={0x9c, 0x3, "9e784a2b42edd34be80dbfc3ff23e71c0a2d47dd71b74ab02c6b0b19364be3265b74b8101fde122624e738e802ee3978717a42d75525d252e25e20113046797cf859b66934b589a93e9347043cfadfd56decfec7e47e194587d3996bd5ed5d46cc271239597658dbbe2e7b70d3f79486b35a2deb1deb19beebc74bde8b32ade9458831096c757888d1eb61dac24c6736a684a8a9d37489a58bda"}}}, &(0x7f00000016c0)={0x44, &(0x7f0000001440)={0x20, 0x7, 0xb4, "46e138f296b376efee15081d0cadf01838438845d14766435a27eb3b73bafe9e4b0cf409de2921a75a55df0a4806e355776a9befded75befb7666621154c7fb51e41ba2bc9ec16b0cae449e00f2eddfd802b9f485cdcd37c3f09741fce137ff094fffab9cbf80f44c61e551b93ef2054b383af0048661ce79a10a68ec88e18cbebf64b1ea94fa67b54f58396c003c8f4059b2b083e75114e86c99f2a1ea054af171e77248b1f548d8563531f3212a8595c6a6aa8"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0xa2}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001580)={0x20, 0x81, 0x1, '['}, &(0x7f00000015c0)={0x20, 0x82, 0x1, 'i'}, &(0x7f0000001600)={0x20, 0x83, 0x2, "05ef"}, &(0x7f0000001640)={0x20, 0x84, 0x1, 'm'}, &(0x7f0000001680)={0x20, 0x85, 0x3, "2d3fe2"}}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x0, 0x30, 0x1, "dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000004c0)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e22, 0x8007, @empty, 0x7fff}, 0x1c) listen(0xffffffffffffffff, 0x80000003) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x1}}}}}}}, 0x0) 3.384474124s ago: executing program 5 (id=1411): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x3}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2.322391425s ago: executing program 5 (id=1414): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0xed, 0x90, 0x0, 0x3, 0x2, 0x5, 0x7, 0x4, 0xf2, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0x2c, 0x3, 0x5, '\x00', 0x7, 0xffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.166387717s ago: executing program 6 (id=1416): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000002c0)={0x4, 0x5, 0x8001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.971158279s ago: executing program 0 (id=1418): syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000feff"], &(0x7f0000000000)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41000}, 0x94) chdir(&(0x7f0000000040)='./file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth1_vlan\x00', &(0x7f0000000680)=@ethtool_rxnfc={0x2a, 0x11, 0x1, {0xd, @ether_spec={@random="b0c67c0938c6", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x91}, {0x0, @link_local, 0x5, 0x800, [0x5, 0x101]}, @ah_ip6_spec={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xdc}, {0x0, @empty, 0x200, 0x3, [0x80000000, 0xfffffffb]}, 0x2, 0xfffff001}, 0x4, [0x56e, 0x5, 0x5, 0x4]}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) io_setup(0xad, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000340)={0x0, 0xb0}, 0x1, 0x7}, 0x20000050) r7 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r4, r7, 0xb, 0x0, @void}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x2820c17, &(0x7f0000000080), 0xff, 0x547, &(0x7f0000000d40)="$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") r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r8, 0x2000, 0x0) 1.89470048s ago: executing program 5 (id=1419): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0xed, 0x90, 0x0, 0x3, 0x2, 0x5, 0x7, 0x4, 0xf2, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0x2c, 0x3, 0x5, '\x00', 0x7, 0xffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.759460811s ago: executing program 6 (id=1420): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40085) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) userfaultfd(0x80001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xed78, 0x28, @mcast1, @mcast2, 0x40, 0x10, 0xa, 0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="ceaa00000000000061102c000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.750335762s ago: executing program 0 (id=1421): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000002c0)={0x4, 0x5, 0x8001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.625367563s ago: executing program 5 (id=1422): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x1, 0xf}]) dup3(r2, r0, 0x80000) 1.560530874s ago: executing program 5 (id=1423): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0xed, 0x90, 0x0, 0x3, 0x2, 0x5, 0x7, 0x4, 0xf2, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0x2c, 0x3, 0x5, '\x00', 0x7, 0xffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.544940834s ago: executing program 0 (id=1424): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x3}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1.405135905s ago: executing program 5 (id=1426): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x8f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x10, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0xf}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8b}, {0x6, 0x24, 0x1a, 0x400, 0x9}, [@dmm={0x0, 0x24, 0x14, 0x5, 0x8}, @call_mgmt={0x0, 0x24, 0x1, 0x0, 0x6d}, @dmm={0x0, 0x24, 0x14, 0x7, 0x81}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f0414fffffffffffff8070000000000000000000000080007001d000000", 0x24) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.380348216s ago: executing program 3 (id=1427): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setgid(0xee01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80, 0x400}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x81) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x400}, 0x8) 1.065229009s ago: executing program 3 (id=1429): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000002c0)={0x4, 0x5, 0x8001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.01831213s ago: executing program 1 (id=1430): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000063110d000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 1.01747852s ago: executing program 1 (id=1431): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000002c0)={0x4, 0x5, 0x8001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 765.333472ms ago: executing program 1 (id=1432): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfa, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x3}) dup2(r2, r0) 760.891812ms ago: executing program 1 (id=1433): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x1, 0xf}]) dup3(r2, r0, 0x80000) 736.050923ms ago: executing program 3 (id=1434): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0xed, 0x90, 0x0, 0x3, 0x2, 0x5, 0x7, 0x4, 0xf2, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0x2c, 0x3, 0x5, '\x00', 0x7, 0xffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 643.566364ms ago: executing program 0 (id=1435): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8922, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2={0xff, 0x5}, 0x8, 0x8000, 0xe3e1, 0xd04}}) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) memfd_create(&(0x7f0000000000)='GPL\x00', 0x4) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x12, &(0x7f0000000280)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x3f}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @generic={0xe5, 0x3, 0xd, 0x400, 0x6}], &(0x7f0000000040)='GPL\x00', 0x7, 0x1026, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) 577.895745ms ago: executing program 1 (id=1436): r0 = syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') read$FUSE(r0, &(0x7f0000002500)={0x2020}, 0x2020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x8}, @IFLA_MACSEC_PROTECT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x6c000000) pipe2$9p(&(0x7f0000000000), 0x0) 533.826585ms ago: executing program 0 (id=1437): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 533.580265ms ago: executing program 1 (id=1438): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0xee, &(0x7f0000000300)={@empty, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x22, 0xe0, 0x67, 0x0, 0xdd, 0x67, 0x0, @local, @remote, {[@ssrr={0x89, 0x7, 0xc8, [@remote]}]}}, "87088fcce4176a0c03f28506e7e6c08ea3dfb9e93ca968477ba5f54cd734520277176cb9c0826030b587f4243ee98fa86f87b9df3a7c75d09cb22ae27049b747411a122d1ed892a886a186c388f5a7c2ac47b463b22c073c10e7311b5afdf2216a765b9cf65b05ffd770e8a6e0d3f7554fd28121520e031bfa5d253a9e592b2d2adfe9f7193e9488c88245a6686bb769931860ee505b3d9f6bf04ebd4fe01940683f72cc406ee6d92eb1f6d96f4059e709b98a86a88bcbd6939c0ad18dd79e9e98039137"}}}}, &(0x7f0000000200)={0x1, 0x1, [0x280, 0xeb2, 0xd5b, 0x215]}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24008000, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="b67cd9017609d6", 0x7, 0x2004082c, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r3) keyctl$search(0xa, r3, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 533.216885ms ago: executing program 0 (id=1439): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000002c0)={0x4, 0x5, 0x8001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 519.687905ms ago: executing program 3 (id=1440): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setgid(0xee01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80, 0x400}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sched_setscheduler(0x0, 0x6, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x400}, 0x8) 187.902158ms ago: executing program 3 (id=1441): r0 = inotify_init() io_setup(0x2, &(0x7f0000000100)) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x40000868) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = dup2(r1, r1) timer_delete(0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000c80)='map_files\x00') getdents(r3, &(0x7f00000000c0)=""/49, 0x31) r4 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00', 0x0) fcntl$addseals(r4, 0x409, 0x12) getdents64(r3, 0x0, 0x43) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffff) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4c4049131dc88679, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 115.534409ms ago: executing program 6 (id=1442): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/47, 0x2f}], 0x1, 0xfffffffa, 0x5) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010100000000406c256d0000000200000109022400010000000009041000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x935, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0xc, 0x1, {0x22, 0x25}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xe, 0xff}}}}}]}}]}}, 0x0) r3 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r3, &(0x7f0000000440)={0x14, &(0x7f0000000280)={0x20, 0x30, 0x86, {0x86, 0xc, "a42c5aadc92d69c0b24ba9917ae44f3244de0b867b305d66247c903540c331a0280fa6c0577f5238aa45e586d50c2bc6c175c58cf76076833f6f32588c89cf9be485eac5e93123c618f20f984c3a32950bc0bbf3cbe783df451dd37b9b486ecefd5c31f94dced46e6ac318368dc6607bcc7cdfdc8b346fecb629775a12927a80b471643b"}}, &(0x7f0000000380)={0x0, 0x3, 0x9c, @string={0x9c, 0x3, "7d40c0e4d2a621e91ad6f2f363e7f9e97941199082dd7bb11a0cd7d30bbb1c58660d280f185ac488c349a2672bf99feb0871a95a5cd3925a3a3d8bb7396e4dc4602755b23be58a056bde36e5d92d4add749a6e3eb4aca5f9ffc3a92ca2d3acd1677510c653e9cc3bb3f308e1d956970dc3cb8ace7c8487b279f43f4f847e93104b3d4209349a9db6d41d118f77f851ea16b6eb2234515e9559c7"}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000540)={0x0, 0x6, 0xe1, "bf730bedc40b23f36588fdd08d21dad9e1e4b6f2331949dddf8cc01a32d94c483fa7ca9b03a4144ec15ac795134b0f40d4426861e0482978974ceabe60e8ebcda53e2496c0a5a4f5efb8806d9565523ba35b05d4f112ee3baba16876b7af6054bcc3e4081b0f5d218b726947a326a06c580edf67481c2ef37c639bf029aec2fc63bc04b6f3ccb137129b1badfa4b93ab0cd5e4bb2f310ca9d611b644f49f2f8a590dbeed1316590c8546d367d73d04f6b99222dceb9e0f2effc71e525f3d7ba1d9b07e37f558ccb808bf0ae0539cbea9d48b8ad0d833f28d24ea4efbf4c044c4c5"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xb4}, &(0x7f00000006c0)={0xc0, 0x5, 0x6, "fd7d5021de71"}, &(0x7f0000000700)={0x40, 0x5, 0x4, "417aee18"}}) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="00020000", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250a00000020000780080001000800000008000200ff0700000c000300f80e0000000000001c0005800800010075647000080001006574680008000100756470000c0009800800020009000000"], 0x5c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40850) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r6) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x3e}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x804) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="207399e9", @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf250b0000000c0005800800010075647000"], 0x20}, 0x1, 0x0, 0x0, 0x24040084}, 0x84) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40141100}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1e8, r5, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3d0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x18}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x84}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64b}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "ac402001d3ac4d9d6fc4e53305e3eac8a1a2a50b94b60ef998646630ba1a"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x27, 0x3, "392ada7bc8b73a9129ed75c009e85b78c5d3c33073d401cd1f13896c7f0382188e9949"}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xecb}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x75, 0x3, "b97e9507cb013acca1a3b386ce1ab12f8367c618dd4b1f204453615d2bd007b287acabc09476ea9dc49007c9f6216cc13f557872ace353622fa386ad2a70586f13af4070a278eaa4a50497496122aa130f3a1b7e73241f15ed0cc6d8ffb01c7b4c17fcb5ffb7120bd437711a3b731824e8"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7c563a4e}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x80}, 0x800c) futex(&(0x7f0000004000)=0xfffff000, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xa3020000) syz_usb_control_io$hid(r1, &(0x7f0000000500)={0x24, &(0x7f0000000340)={0x0, 0x2, 0x5, {0x5, 0x9, "8142ee"}}, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=1443): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfa, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x3}) dup2(r2, r0) kernel console output (not intermixed with test programs): d capacity change from 0 to 16 [ 43.073899][ T704] erofs: (device loop4): mounted with root inode @ nid 36. [ 43.103291][ T28] audit: type=1400 audit(1777898088.440:165): avc: denied { mount } for pid=703 comm="syz.4.125" name="/" dev="loop4" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.129731][ T704] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 43.144215][ T704] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 43.160858][ T28] audit: type=1400 audit(1777898088.490:166): avc: denied { mounton } for pid=703 comm="syz.4.125" path="/23/file0/file0" dev="loop4" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 43.252776][ T704] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=86 [ 43.502008][ T708] kvm [707]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 43.544651][ T708] kvm [707]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xad62 [ 43.663848][ T709] kvm [706]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 43.670583][ T708] kvm [707]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 43.918199][ T708] kvm [707]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xff66 [ 43.926476][ T708] kvm [707]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 43.938719][ T708] kvm [707]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 43.939321][ T709] kvm [706]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xad62 [ 43.992449][ T708] kvm [707]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xc0000e6 [ 44.026355][ T28] audit: type=1400 audit(1777898089.360:167): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.053356][ T708] kvm [707]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 44.210675][ T728] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=728 comm=syz.1.132 [ 44.270034][ T736] loop4: detected capacity change from 0 to 512 [ 44.283799][ T725] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 44.341890][ T741] loop2: detected capacity change from 0 to 256 [ 46.265802][ T769] loop1: detected capacity change from 0 to 256 [ 46.402785][ T310] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 46.521238][ T743] kvm [742]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xe962 [ 46.584017][ T777] usb usb7: usbfs: process 777 (syz.1.144) did not claim interface 0 before use [ 46.995027][ T28] audit: type=1400 audit(1777898092.330:168): avc: denied { read write } for pid=781 comm="syz.2.148" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.040952][ T28] audit: type=1400 audit(1777898092.330:169): avc: denied { open } for pid=781 comm="syz.2.148" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.081582][ T28] audit: type=1400 audit(1777898092.330:170): avc: denied { ioctl } for pid=781 comm="syz.2.148" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.161812][ T28] audit: type=1400 audit(1777898092.330:171): avc: denied { create } for pid=781 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.181535][ T788] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=788 comm=syz.3.151 [ 47.218602][ T793] loop0: detected capacity change from 0 to 512 [ 47.232739][ T789] xt_l2tp: missing protocol rule (udp|l2tpip) [ 47.247070][ T788] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 49.198765][ T834] loop1: detected capacity change from 0 to 256 [ 49.469182][ T838] loop0: detected capacity change from 0 to 512 [ 49.589948][ T840] usb usb7: usbfs: process 840 (syz.1.162) did not claim interface 0 before use [ 51.492710][ T860] xt_l2tp: missing protocol rule (udp|l2tpip) [ 51.642248][ T869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 51.669592][ T869] loop2: detected capacity change from 0 to 512 [ 51.678507][ T869] EXT4-fs: Ignoring removed oldalloc option [ 51.685752][ T28] audit: type=1400 audit(1777898096.970:172): avc: denied { create } for pid=862 comm="syz.2.170" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.707274][ T869] EXT4-fs (loop2): Test dummy encryption mode enabled [ 51.844880][ T28] audit: type=1400 audit(1777898096.970:173): avc: denied { mounton } for pid=862 comm="syz.2.170" path="/27/file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.881425][ T28] audit: type=1400 audit(1777898097.010:174): avc: denied { mounton } for pid=862 comm="syz.2.170" path="/27/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 51.918972][ T869] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.928795][ T869] EXT4-fs (loop2): unmounting filesystem. [ 52.036609][ T882] device syzkaller0 entered promiscuous mode [ 52.051783][ T882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 52.332422][ T28] audit: type=1400 audit(1777898097.670:175): avc: denied { unlink } for pid=289 comm="syz-executor" name="file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.445382][ T890] device syzkaller0 entered promiscuous mode [ 52.466208][ T890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 53.346619][ T900] device syzkaller0 entered promiscuous mode [ 53.382368][ T900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 54.283751][ T923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 54.311857][ T923] loop3: detected capacity change from 0 to 512 [ 54.319476][ T923] EXT4-fs: Ignoring removed oldalloc option [ 54.327721][ T923] EXT4-fs (loop3): Test dummy encryption mode enabled [ 54.519660][ T923] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 54.530230][ T923] EXT4-fs (loop3): unmounting filesystem. [ 54.590930][ T929] xt_l2tp: missing protocol rule (udp|l2tpip) [ 54.652770][ T28] audit: type=1400 audit(1777898099.980:176): avc: denied { bind } for pid=935 comm="syz.2.192" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.686707][ T28] audit: type=1400 audit(1777898099.980:177): avc: denied { name_bind } for pid=935 comm="syz.2.192" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 54.709458][ T28] audit: type=1400 audit(1777898099.980:178): avc: denied { node_bind } for pid=935 comm="syz.2.192" saddr=172.20.20.67 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 54.853643][ T949] input: syz1 as /devices/virtual/input/input13 [ 55.156478][ T957] input: syz1 as /devices/virtual/input/input14 [ 56.430325][ T982] xt_l2tp: missing protocol rule (udp|l2tpip) [ 56.559171][ T28] audit: type=1400 audit(1777898101.890:179): avc: denied { mounton } for pid=989 comm="syz.0.210" path="/50/file0" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.812702][ T1000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.212'. [ 56.839388][ T1000] loop4: detected capacity change from 0 to 512 [ 56.846890][ T1000] EXT4-fs: Ignoring removed oldalloc option [ 56.893382][ T1000] EXT4-fs (loop4): Test dummy encryption mode enabled [ 57.007185][ T1005] fuse: Unknown parameter '0x0000000000000003' [ 57.056040][ T1006] input: syz1 as /devices/virtual/input/input16 [ 57.233655][ T1000] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 57.243651][ T1000] EXT4-fs (loop4): unmounting filesystem. [ 57.730078][ T1026] overlayfs: overlapping lowerdir path [ 57.741574][ T28] audit: type=1400 audit(1777898103.060:180): avc: denied { read write } for pid=1018 comm="syz.4.220" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.977172][ T1032] xt_l2tp: missing protocol rule (udp|l2tpip) [ 58.109511][ T28] audit: type=1400 audit(1777898103.060:181): avc: denied { open } for pid=1018 comm="syz.4.220" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.482553][ T28] audit: type=1400 audit(1777898103.060:182): avc: denied { write } for pid=1018 comm="syz.4.220" name="netlink" dev="proc" ino=4026532345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.835001][ T1051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 58.869060][ T1050] loop3: detected capacity change from 0 to 512 [ 59.024150][ T1059] input: syz1 as /devices/virtual/input/input17 [ 59.219940][ T1063] device syzkaller0 entered promiscuous mode [ 59.292075][ T1061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 59.717894][ T1075] device syzkaller0 entered promiscuous mode [ 59.726825][ T1075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 59.799333][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.806822][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 60.054667][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 60.082351][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.101242][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): : link becomes ready [ 60.109753][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.118540][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.126871][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.135246][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.143955][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.246207][ T1081] device syzkaller0 entered promiscuous mode [ 66.254175][ T1115] loop2: detected capacity change from 0 to 512 [ 66.514017][ T1128] overlayfs: overlapping lowerdir path [ 66.595001][ T1124] xt_l2tp: missing protocol rule (udp|l2tpip) [ 67.679323][ T1133] kvm [1132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xe962 [ 67.884545][ T1137] kvm [1136]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xcf72 [ 67.965252][ T1137] kvm [1136]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3543 [ 67.991869][ T1137] kvm [1136]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xf5c4 [ 68.036635][ T1137] kvm [1136]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xb5b8 [ 68.046372][ T1137] kvm [1136]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x25fb [ 68.080270][ T1137] kvm [1136]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3683 [ 68.098454][ T1137] kvm [1136]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x570d [ 68.111049][ T1137] kvm [1136]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x4d09 [ 68.141170][ T1137] kvm [1136]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x6f6b [ 68.144945][ T1157] kvm: pic: non byte write [ 71.192819][ T1184] loop3: detected capacity change from 0 to 512 [ 71.214496][ T1189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 71.299356][ T1181] xt_l2tp: missing protocol rule (udp|l2tpip) [ 71.845534][ T1220] loop3: detected capacity change from 0 to 512 [ 72.006589][ T1227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'. [ 72.033783][ T1227] loop0: detected capacity change from 0 to 512 [ 72.041502][ T1227] EXT4-fs: Ignoring removed oldalloc option [ 72.050981][ T1227] EXT4-fs (loop0): Test dummy encryption mode enabled [ 72.226625][ T1227] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.238218][ T1227] EXT4-fs (loop0): unmounting filesystem. [ 73.002965][ T1254] loop3: detected capacity change from 0 to 512 [ 73.046090][ T310] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.509123][ T1282] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=1282 comm=syz.1.300 [ 73.564775][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.679671][ T1292] loop3: detected capacity change from 0 to 512 [ 73.707885][ T310] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.861144][ T1321] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=1321 comm=syz.1.315 [ 74.905729][ T1332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 74.944299][ T1321] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 74.973791][ T1330] loop2: detected capacity change from 0 to 512 [ 75.039172][ T310] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.136843][ T1355] kvm: emulating exchange as write [ 76.091700][ T1367] overlayfs: overlapping lowerdir path [ 78.243903][ T1370] overlayfs: unrecognized mount option "/" or missing value [ 79.723080][ T1374] xt_l2tp: missing protocol rule (udp|l2tpip) [ 80.663394][ T1392] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=1392 comm=syz.0.332 [ 80.934919][ T1388] : renamed from bond_slave_1 [ 82.014487][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.068546][ T1404] loop3: detected capacity change from 0 to 256 [ 82.068580][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 82.088314][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.097549][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): : link becomes ready [ 82.099662][ T1402] loop2: detected capacity change from 0 to 512 [ 82.105389][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.120124][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.129031][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.137457][ T28] audit: type=1400 audit(1777898127.460:183): avc: denied { name_bind } for pid=1407 comm="syz.1.338" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 82.170120][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.209047][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.215393][ T1382] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.265843][ T28] audit: type=1400 audit(1777898127.460:184): avc: denied { node_bind } for pid=1407 comm="syz.1.338" saddr=fc00::fd src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 82.341911][ T1411] 8021q: VLANs not supported on tunl0 [ 85.414221][ T1467] loop2: detected capacity change from 0 to 512 [ 85.613059][ T1378] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 85.690649][ T1483] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=1483 comm=syz.1.358 [ 85.719027][ T1473] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 88.458354][ T1527] loop2: detected capacity change from 0 to 512 [ 88.502692][ T1378] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.585615][ T1530] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=1530 comm=syz.3.375 [ 90.358800][ T1558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.384'. [ 90.499598][ T1566] loop1: detected capacity change from 0 to 512 [ 90.582405][ T1378] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 90.725824][ T1576] mmap: syz.0.387 (1576) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.922284][ T1577] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=1577 comm=syz.3.388 [ 92.236228][ T28] audit: type=1400 audit(1777898137.570:185): avc: denied { read } for pid=1595 comm="syz.3.393" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 92.286725][ T28] audit: type=1400 audit(1777898137.620:186): avc: denied { open } for pid=1595 comm="syz.3.393" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.709374][ T1613] loop3: detected capacity change from 0 to 512 [ 94.220582][ T1632] loop3: detected capacity change from 0 to 512 [ 94.261754][ T1632] EXT4-fs: Ignoring removed nobh option [ 94.482624][ T1626] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=1626 comm=syz.2.401 [ 94.501564][ T1632] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 94.641442][ T1632] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.405: invalid indirect mapped block 256 (level 1) [ 94.657505][ T1632] EXT4-fs (loop3): Remounting filesystem read-only [ 94.665014][ T1632] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.405: invalid indirect mapped block 2683928664 (level 1) [ 94.683426][ T1632] EXT4-fs (loop3): Remounting filesystem read-only [ 94.690550][ T1632] EXT4-fs (loop3): 1 truncate cleaned up [ 94.700627][ T1632] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 94.736005][ T291] EXT4-fs (loop3): unmounting filesystem. [ 94.765131][ T1647] xt_l2tp: missing protocol rule (udp|l2tpip) [ 96.153609][ T1663] loop0: detected capacity change from 0 to 1024 [ 96.170968][ T1663] EXT4-fs: Ignoring removed oldalloc option [ 96.182984][ T1663] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 96.198146][ T1663] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.245269][ T1669] loop4: detected capacity change from 0 to 256 [ 96.297581][ T1672] device syzkaller0 entered promiscuous mode [ 96.311695][ T1378] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.537456][ T1678] usb usb7: usbfs: process 1678 (syz.4.415) did not claim interface 0 before use [ 96.805889][ T1679] loop3: detected capacity change from 0 to 512 [ 97.008657][ T287] EXT4-fs (loop0): unmounting filesystem. [ 97.070676][ T1689] xt_l2tp: missing protocol rule (udp|l2tpip) [ 97.200343][ T1687] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=1687 comm=syz.3.420 [ 97.287600][ T1702] overlayfs: unrecognized mount option "/" or missing value [ 97.341396][ T28] audit: type=1400 audit(1777898142.640:187): avc: denied { ioctl } for pid=1695 comm="syz.0.423" path="socket:[25584]" dev="sockfs" ino=25584 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.274700][ T1720] device syzkaller0 entered promiscuous mode [ 98.290430][ T1719] loop1: detected capacity change from 0 to 512 [ 98.294019][ T1726] loop0: detected capacity change from 0 to 1024 [ 98.305522][ T1726] EXT4-fs: Ignoring removed oldalloc option [ 98.345951][ T1730] loop1: detected capacity change from 0 to 256 [ 98.389646][ T1726] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 98.399087][ T1726] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.440861][ T1734] xt_l2tp: missing protocol rule (udp|l2tpip) [ 98.972509][ T1378] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.115008][ T1742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.433'. [ 99.232675][ T287] EXT4-fs (loop0): unmounting filesystem. [ 100.471511][ T1754] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=1754 comm=syz.3.438 [ 100.546680][ T1754] : renamed from bond_slave_1 [ 101.111322][ T1767] overlayfs: unrecognized mount option "/" or missing value [ 101.411916][ T1777] loop1: detected capacity change from 0 to 512 [ 101.424433][ T1784] device syzkaller0 entered promiscuous mode [ 101.496380][ T1378] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.440102][ T1809] loop3: detected capacity change from 0 to 256 [ 106.499762][ T1813] loop0: detected capacity change from 0 to 512 [ 106.551723][ T1813] EXT4-fs: Ignoring removed nobh option [ 106.558159][ T1378] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.657851][ T1813] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 106.675439][ T1813] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.455: invalid indirect mapped block 256 (level 1) [ 106.690147][ T1819] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=1819 comm=syz.4.456 [ 106.749172][ T1823] usb usb7: usbfs: process 1823 (syz.3.453) did not claim interface 0 before use [ 107.030399][ T1825] overlayfs: unrecognized mount option "/" or missing value [ 107.051640][ T1813] EXT4-fs (loop0): Remounting filesystem read-only [ 107.115814][ T1813] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.455: invalid indirect mapped block 2683928664 (level 1) [ 107.594635][ T1813] EXT4-fs (loop0): Remounting filesystem read-only [ 107.620291][ T1831] device syzkaller0 entered promiscuous mode [ 107.634997][ T1829] loop3: detected capacity change from 0 to 512 [ 107.648214][ T1813] EXT4-fs (loop0): 1 truncate cleaned up [ 107.685601][ T1813] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 107.766747][ T28] audit: type=1400 audit(1777898153.100:188): avc: denied { append } for pid=1812 comm="syz.0.455" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.854218][ T287] EXT4-fs (loop0): unmounting filesystem. [ 107.900227][ T28] audit: type=1400 audit(1777898153.130:189): avc: denied { map } for pid=1812 comm="syz.0.455" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.962230][ T1849] loop0: detected capacity change from 0 to 512 [ 107.990219][ T1849] EXT4-fs: Ignoring removed nobh option [ 109.169429][ T1849] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 109.178477][ T1849] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.464: invalid indirect mapped block 256 (level 1) [ 109.197622][ T1849] EXT4-fs (loop0): Remounting filesystem read-only [ 109.204488][ T1849] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.464: invalid indirect mapped block 2683928664 (level 1) [ 109.219499][ T1849] EXT4-fs (loop0): Remounting filesystem read-only [ 109.226819][ T1849] EXT4-fs (loop0): 1 truncate cleaned up [ 109.238982][ T1849] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.435311][ T287] EXT4-fs (loop0): unmounting filesystem. [ 110.451096][ T1865] loop0: detected capacity change from 0 to 256 [ 113.219364][ T1382] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.332097][ T1876] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=1876 comm=syz.2.473 [ 113.399039][ T1888] usb usb7: usbfs: process 1888 (syz.0.471) did not claim interface 0 before use [ 114.822637][ T1886] loop1: detected capacity change from 0 to 512 [ 115.459577][ T1903] overlayfs: overlapping lowerdir path [ 115.589855][ T1886] EXT4-fs: Ignoring removed oldalloc option [ 115.627646][ T1886] EXT4-fs (loop1): Test dummy encryption mode enabled [ 115.788400][ T1886] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 116.493411][ T1886] EXT4-fs (loop1): unmounting filesystem. [ 116.777628][ T1918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.482'. [ 119.652175][ T1930] overlayfs: unrecognized mount option "/" or missing value [ 121.265590][ T1945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.489'. [ 122.591660][ T1953] overlayfs: overlapping lowerdir path [ 124.089426][ T1958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.493'. [ 124.149944][ T1956] kvm: pic: non byte write [ 124.433353][ T1970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 125.462704][ T1976] loop2: detected capacity change from 0 to 512 [ 125.469543][ T1976] EXT4-fs: Ignoring removed oldalloc option [ 125.551535][ T1976] EXT4-fs (loop2): Test dummy encryption mode enabled [ 125.618330][ T1976] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 125.629953][ T1976] EXT4-fs (loop2): unmounting filesystem. [ 125.639152][ T1976] overlayfs: './file0' not a directory [ 126.597443][ T2019] kvm: pic: non byte write [ 129.188561][ T2048] kvm [2044]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xcdd4 [ 129.300308][ T28] audit: type=1400 audit(1777898174.630:190): avc: denied { write } for pid=2071 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.874670][ T28] audit: type=1400 audit(1777898176.010:191): avc: denied { write } for pid=2076 comm="syz.4.530" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 131.075867][ T28] audit: type=1400 audit(1777898176.010:192): avc: denied { map } for pid=2076 comm="syz.4.530" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 131.235921][ T28] audit: type=1400 audit(1777898176.030:193): avc: denied { call } for pid=2076 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 131.372556][ T28] audit: type=1400 audit(1777898176.030:194): avc: denied { transfer } for pid=2076 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.322159][ T2106] loop3: detected capacity change from 0 to 512 [ 132.549196][ T28] audit: type=1400 audit(1777898177.880:195): avc: denied { ioctl } for pid=2109 comm="syz.2.538" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26816 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.643853][ T2119] overlayfs: unrecognized mount option "/" or missing value [ 133.699345][ T2122] 8021q: VLANs not supported on tunl0 [ 134.443992][ T2129] overlayfs: overlapping lowerdir path [ 135.996935][ T2151] loop2: detected capacity change from 0 to 512 [ 139.268200][ T2184] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=2184 comm=syz.1.558 [ 140.769174][ T2207] loop1: detected capacity change from 0 to 512 [ 140.865367][ T2207] EXT4-fs: Ignoring removed oldalloc option [ 140.887458][ T2212] loop4: detected capacity change from 0 to 16 [ 140.903009][ T2207] EXT4-fs (loop1): Test dummy encryption mode enabled [ 140.915230][ T2212] erofs: Unknown parameter '' [ 140.968195][ T28] audit: type=1400 audit(1777898186.300:196): avc: denied { read } for pid=2211 comm="syz.4.567" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.995547][ T2207] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 141.067353][ T2207] EXT4-fs (loop1): unmounting filesystem. [ 141.131354][ T2207] overlayfs: './file0' not a directory [ 143.090299][ T2261] binder: BINDER_SET_CONTEXT_MGR already set [ 143.098271][ T2261] binder: 2260:2261 ioctl 4018620d 200000000040 returned -16 [ 143.113765][ T2265] binder: BINDER_SET_CONTEXT_MGR already set [ 143.119795][ T2265] binder: 2264:2265 ioctl 4018620d 200000000040 returned -16 [ 143.170323][ T2273] loop2: detected capacity change from 0 to 1024 [ 143.177960][ T2273] EXT4-fs: Ignoring removed oldalloc option [ 143.208429][ T2273] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 143.217244][ T2273] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.313441][ T2281] loop3: detected capacity change from 0 to 512 [ 143.381907][ T1932] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.578117][ T2288] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.590'. [ 144.428730][ T289] EXT4-fs (loop2): unmounting filesystem. [ 144.642622][ T2315] fuse: Bad value for 'fd' [ 144.657086][ T2318] loop3: detected capacity change from 0 to 512 [ 144.686523][ T2318] EXT4-fs: Ignoring removed oldalloc option [ 144.717658][ T2318] EXT4-fs (loop3): Test dummy encryption mode enabled [ 144.803009][ T2318] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 144.821471][ T2318] EXT4-fs (loop3): unmounting filesystem. [ 145.003633][ T2330] loop1: detected capacity change from 0 to 1024 [ 145.023927][ T2330] EXT4-fs: Ignoring removed oldalloc option [ 145.052867][ T2330] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.062510][ T2330] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.592193][ T2318] overlayfs: './file0' not a directory [ 145.805978][ T290] EXT4-fs (loop1): unmounting filesystem. [ 147.034334][ T2344] loop0: detected capacity change from 0 to 512 [ 147.349896][ T1932] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 147.510786][ T2367] fuse: Bad value for 'fd' [ 147.965970][ T2380] input: syz1 as /devices/virtual/input/input19 [ 148.159929][ T2386] loop2: detected capacity change from 0 to 1024 [ 148.187245][ T2386] EXT4-fs: Ignoring removed oldalloc option [ 148.310188][ T2386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 148.319521][ T2386] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.478473][ T2403] loop3: detected capacity change from 0 to 512 [ 149.598043][ T1932] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.737637][ T2413] fuse: Bad value for 'fd' [ 149.791872][ T2415] fuse: Bad value for 'fd' [ 150.972040][ T2441] device syzkaller0 entered promiscuous mode [ 151.054642][ T289] EXT4-fs (loop2): unmounting filesystem. [ 151.120732][ T2455] loop1: detected capacity change from 0 to 512 [ 151.143794][ T1932] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 151.163398][ T2453] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.632'. [ 152.606687][ T2489] device syzkaller0 entered promiscuous mode [ 152.837993][ T2496] loop0: detected capacity change from 0 to 1024 [ 152.846327][ T2496] EXT4-fs: Ignoring removed oldalloc option [ 152.862869][ T2496] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 152.871691][ T2496] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.965273][ T2504] loop4: detected capacity change from 0 to 512 [ 153.012171][ T1932] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.436198][ T2518] input: syz1 as /devices/virtual/input/input20 [ 154.801489][ T287] EXT4-fs (loop0): unmounting filesystem. [ 154.966048][ T2544] loop0: detected capacity change from 0 to 512 [ 154.991838][ T1932] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.537496][ T2564] loop3: detected capacity change from 0 to 1024 [ 155.616947][ T2564] EXT4-fs: Ignoring removed oldalloc option [ 155.858840][ T2564] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 156.171189][ T2564] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.933250][ T2576] overlayfs: unrecognized mount option "/" or missing value [ 157.133299][ T2573] loop0: detected capacity change from 0 to 1024 [ 157.401788][ T2573] EXT4-fs: Ignoring removed oldalloc option [ 157.663205][ T291] EXT4-fs (loop3): unmounting filesystem. [ 157.731810][ T2573] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 157.771185][ T2573] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.791039][ T2587] loop4: detected capacity change from 0 to 512 [ 158.106404][ T2607] overlayfs: unrecognized mount option "/" or missing value [ 162.861591][ T287] EXT4-fs (loop0): unmounting filesystem. [ 163.066498][ T2626] xt_l2tp: missing protocol rule (udp|l2tpip) [ 163.073816][ T2630] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=2630 comm=syz.3.682 [ 163.183446][ T2613] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 163.203577][ T2627] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=2627 comm=syz.1.684 [ 163.223275][ T2627] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 163.347450][ T2642] loop1: detected capacity change from 0 to 512 [ 163.381742][ T2618] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.447878][ T2644] overlayfs: unrecognized mount option "/" or missing value [ 163.675128][ T2646] loop1: detected capacity change from 0 to 1024 [ 163.699305][ T2646] EXT4-fs: Ignoring removed oldalloc option [ 163.969401][ T2648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.693'. [ 164.039722][ T2646] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 164.085438][ T2646] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.097881][ T2648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.693'. [ 164.206174][ T2653] loop2: detected capacity change from 0 to 256 [ 164.525352][ T2661] usb usb7: usbfs: process 2661 (syz.2.692) did not claim interface 0 before use [ 164.575778][ T2662] xt_l2tp: missing protocol rule (udp|l2tpip) [ 164.805885][ T2667] fuse: Bad value for 'fd' [ 166.880985][ T2679] overlayfs: unrecognized mount option "/" or missing value [ 167.861214][ T2682] loop4: detected capacity change from 0 to 512 [ 167.980490][ T2618] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 168.705837][ T290] EXT4-fs (loop1): unmounting filesystem. [ 168.869276][ T2695] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=2695 comm=syz.1.705 [ 168.983524][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.005095][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.152720][ T2711] fuse: Bad value for 'fd' [ 169.476412][ T2729] overlayfs: unrecognized mount option "/" or missing value [ 170.799975][ T2733] loop0: detected capacity change from 0 to 512 [ 170.955201][ T2726] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=2726 comm=syz.2.714 [ 171.028484][ T2726] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 171.134226][ T2746] fuse: Bad value for 'fd' [ 171.207639][ T2750] loop3: detected capacity change from 0 to 256 [ 171.313938][ T2618] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.427319][ T2752] xt_l2tp: missing protocol rule (udp|l2tpip) [ 171.453875][ T2761] loop2: detected capacity change from 0 to 256 [ 172.701109][ T2618] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 172.836531][ T2771] loop3: detected capacity change from 0 to 512 [ 172.920940][ T2776] usb usb7: usbfs: process 2776 (syz.2.728) did not claim interface 0 before use [ 173.389402][ T2790] fuse: Bad value for 'fd' [ 173.399307][ T2792] loop1: detected capacity change from 0 to 256 [ 174.768863][ T2618] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.830002][ T2816] usb usb7: usbfs: process 2816 (syz.1.740) did not claim interface 0 before use [ 176.062350][ T2821] loop4: detected capacity change from 0 to 512 [ 176.135285][ T2824] input: syz1 as /devices/virtual/input/input21 [ 176.140780][ T2825] loop1: detected capacity change from 0 to 256 [ 176.526121][ T2842] usb usb7: usbfs: process 2842 (syz.1.747) did not claim interface 0 before use [ 176.643829][ T2844] loop2: detected capacity change from 0 to 256 [ 176.961482][ T2851] usb usb7: usbfs: process 2851 (syz.2.753) did not claim interface 0 before use [ 177.540781][ T2861] input: syz1 as /devices/virtual/input/input22 [ 177.716480][ T2867] input: syz1 as /devices/virtual/input/input23 [ 177.879838][ T2871] loop3: detected capacity change from 0 to 512 [ 178.574646][ T2855] kvm [2854]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000011d8 [ 178.651996][ T2855] kvm [2854]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x58b9 [ 178.707020][ T2855] kvm [2854]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x513f [ 179.421853][ T2907] loop2: detected capacity change from 0 to 512 [ 179.497307][ T2618] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.887186][ T2940] loop2: detected capacity change from 0 to 512 [ 181.023733][ T2618] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 181.328678][ T2974] loop4: detected capacity change from 0 to 1024 [ 181.335599][ T2974] EXT4-fs: Ignoring removed oldalloc option [ 181.385518][ T2974] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 181.397478][ T2974] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.036931][ T3001] overlayfs: unrecognized mount option "/" or missing value [ 183.168024][ T3003] overlayfs: overlapping lowerdir path [ 183.393699][ T288] EXT4-fs (loop4): unmounting filesystem. [ 183.716288][ T3010] loop1: detected capacity change from 0 to 512 [ 186.274072][ T3052] loop3: detected capacity change from 0 to 256 [ 187.689667][ T3060] loop2: detected capacity change from 0 to 512 [ 187.757642][ T3060] EXT4-fs: Ignoring removed oldalloc option [ 187.831783][ T3060] EXT4-fs (loop2): Test dummy encryption mode enabled [ 187.840538][ T3073] loop1: detected capacity change from 0 to 512 [ 187.949430][ T3076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.824'. [ 188.174410][ T3060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 188.973652][ T3060] EXT4-fs (loop2): unmounting filesystem. [ 189.033046][ T3079] xt_l2tp: missing protocol rule (udp|l2tpip) [ 189.828822][ T3100] kvm: pic: non byte write [ 190.507654][ T3115] loop1: detected capacity change from 0 to 512 [ 192.886704][ T3143] loop2: detected capacity change from 0 to 512 [ 193.050612][ T3143] EXT4-fs: Ignoring removed oldalloc option [ 193.460789][ T3143] EXT4-fs (loop2): Test dummy encryption mode enabled [ 193.547167][ T3148] input: syz1 as /devices/virtual/input/input24 [ 193.586032][ T3143] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.598811][ T3143] EXT4-fs (loop2): unmounting filesystem. [ 193.681861][ T3143] overlayfs: './file0' not a directory [ 194.671212][ T3176] loop4: detected capacity change from 0 to 512 [ 194.752009][ T2618] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 195.253898][ T3190] input: syz1 as /devices/virtual/input/input25 [ 196.831429][ T3228] loop0: detected capacity change from 0 to 512 [ 197.123389][ T3241] overlayfs: unrecognized mount option "/" or missing value [ 197.556971][ T3247] fuse: Bad value for 'group_id' [ 197.688335][ T3245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.877'. [ 197.724767][ T3243] loop3: detected capacity change from 0 to 512 [ 197.868029][ T3252] input: syz1 as /devices/virtual/input/input26 [ 198.165118][ T3243] EXT4-fs: Ignoring removed oldalloc option [ 198.239408][ T3260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.882'. [ 198.259017][ T3243] EXT4-fs (loop3): Test dummy encryption mode enabled [ 198.760518][ T3243] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 199.164090][ T3243] EXT4-fs (loop3): unmounting filesystem. [ 199.189097][ T3275] loop4: detected capacity change from 0 to 512 [ 199.493836][ T2618] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.833159][ T3242] overlayfs: './file0' not a directory [ 200.125926][ T3296] fuse: Bad value for 'group_id' [ 200.532411][ T3305] input: syz1 as /devices/virtual/input/input27 [ 200.980500][ T3314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.897'. [ 202.385201][ T3328] loop3: detected capacity change from 0 to 1024 [ 202.407644][ T3328] EXT4-fs: Ignoring removed oldalloc option [ 202.472651][ T3328] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 202.489083][ T3328] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.792660][ T291] EXT4-fs (loop3): unmounting filesystem. [ 202.922602][ T3360] input: syz1 as /devices/virtual/input/input28 [ 203.308892][ T3372] overlayfs: unrecognized mount option "/" or missing value [ 204.745635][ T3390] loop0: detected capacity change from 0 to 1024 [ 204.760910][ T3390] EXT4-fs: Ignoring removed oldalloc option [ 204.814665][ T3390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 204.832049][ T3390] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.996920][ T3396] tipc: Started in network mode [ 205.002365][ T3396] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 205.012058][ T3396] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 205.021162][ T3396] tipc: Enabled bearer , priority 10 [ 205.173179][ T287] EXT4-fs (loop0): unmounting filesystem. [ 206.207664][ T6] tipc: Node number set to 1 [ 206.997451][ T3428] loop2: detected capacity change from 0 to 1024 [ 207.018958][ T3428] EXT4-fs: Ignoring removed oldalloc option [ 207.265723][ T3428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 207.281239][ T3428] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.909141][ T3453] tipc: Started in network mode [ 207.914357][ T3453] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 207.923633][ T3453] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 207.932514][ T3453] tipc: Enabled bearer , priority 10 [ 208.943017][ T19] tipc: Node number set to 1 [ 208.959719][ T289] EXT4-fs (loop2): unmounting filesystem. [ 209.056319][ T3459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.940'. [ 209.497239][ T3481] loop0: detected capacity change from 0 to 1024 [ 209.512019][ T3481] EXT4-fs: Ignoring removed oldalloc option [ 209.524302][ T3483] loop1: detected capacity change from 0 to 512 [ 209.533912][ T3481] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 209.542832][ T3481] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.624649][ T2618] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 210.640471][ T3517] tipc: Enabling of bearer rejected, already enabled [ 212.976903][ T287] EXT4-fs (loop0): unmounting filesystem. [ 213.050073][ T3521] loop4: detected capacity change from 0 to 512 [ 213.858465][ T3550] input: syz1 as /devices/virtual/input/input29 [ 214.204722][ T3557] loop3: detected capacity change from 0 to 1024 [ 214.219512][ T3557] EXT4-fs: Ignoring removed oldalloc option [ 214.234497][ T3557] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 214.243991][ T3557] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.156291][ T291] EXT4-fs (loop3): unmounting filesystem. [ 217.537752][ T3583] input: syz1 as /devices/virtual/input/input30 [ 217.608270][ T3582] loop4: detected capacity change from 0 to 512 [ 217.661086][ T2618] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.074593][ T3599] input: syz1 as /devices/virtual/input/input31 [ 219.964430][ T3614] loop2: detected capacity change from 0 to 1024 [ 220.002860][ T3614] EXT4-fs: Ignoring removed oldalloc option [ 220.033034][ T3614] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 220.042780][ T3614] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.212502][ T3627] input: syz1 as /devices/virtual/input/input32 [ 220.428571][ T3632] loop4: detected capacity change from 0 to 512 [ 220.472997][ T2621] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 220.572929][ T3635] loop3: detected capacity change from 0 to 512 [ 220.818994][ T289] EXT4-fs (loop2): unmounting filesystem. [ 220.830639][ T3649] loop4: detected capacity change from 0 to 512 [ 220.853452][ T3649] EXT4-fs: Ignoring removed oldalloc option [ 220.929517][ T3649] EXT4-fs (loop4): Test dummy encryption mode enabled [ 220.981455][ T3657] overlayfs: unrecognized mount option "/" or missing value [ 222.801790][ T3658] overlayfs: unrecognized mount option "/" or missing value [ 226.744392][ T3649] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 226.816607][ T3667] input: syz1 as /devices/virtual/input/input33 [ 227.121028][ T3675] loop0: detected capacity change from 0 to 512 [ 227.230663][ T3682] binder: BINDER_SET_CONTEXT_MGR already set [ 227.240808][ T3682] binder: 3681:3682 ioctl 4018620d 200000000040 returned -16 [ 227.289032][ T2618] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 227.339276][ T3688] input: syz1 as /devices/virtual/input/input34 [ 227.510746][ T3690] loop0: detected capacity change from 0 to 1024 [ 227.519913][ T3690] EXT4-fs: Ignoring removed oldalloc option [ 227.563655][ T3690] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 227.590682][ T3690] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.797906][ T3704] input: syz1 as /devices/virtual/input/input35 [ 228.185583][ T3711] overlayfs: unrecognized mount option "/" or missing value [ 228.338589][ T287] EXT4-fs (loop0): unmounting filesystem. [ 229.500989][ T3729] loop1: detected capacity change from 0 to 512 [ 229.592631][ T2618] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 230.543281][ T3777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1031'. [ 230.580325][ T3777] loop3: detected capacity change from 0 to 512 [ 230.590613][ T3777] EXT4-fs: Ignoring removed oldalloc option [ 230.632101][ T3777] EXT4-fs (loop3): Test dummy encryption mode enabled [ 230.639943][ T3785] kvm: pic: non byte write [ 230.664562][ T3777] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 230.674535][ T3777] EXT4-fs (loop3): unmounting filesystem. [ 230.744358][ T3777] overlayfs: './file0' not a directory [ 231.647362][ T3822] loop0: detected capacity change from 0 to 1024 [ 231.660582][ T3822] EXT4-fs: Ignoring removed oldalloc option [ 231.686796][ T3822] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 231.695493][ T3822] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.483841][ T287] EXT4-fs (loop0): unmounting filesystem. [ 232.533364][ T3857] fuse: Unknown parameter 'group_id00000000000000000000' [ 232.603169][ T3849] kvm [3848]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x20 [ 232.703996][ T3862] input: syz1 as /devices/virtual/input/input36 [ 233.165730][ T3877] loop1: detected capacity change from 0 to 512 [ 233.203434][ T2618] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 233.314312][ T3887] fuse: Unknown parameter 'group_id00000000000000000000' [ 233.355859][ T3886] loop1: detected capacity change from 0 to 1024 [ 233.373457][ T3886] EXT4-fs: Ignoring removed oldalloc option [ 233.392947][ T3886] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 233.401600][ T3886] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.488290][ T28] audit: type=1400 audit(1777898278.820:197): avc: denied { mount } for pid=3900 comm="syz.2.1072" name="/" dev="configfs" ino=10035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 233.488750][ T3901] 9pnet: Could not find request transport: fä [ 233.720694][ T3913] xt_l2tp: missing protocol rule (udp|l2tpip) [ 233.989411][ T3916] kvm [3915]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x20 [ 234.176508][ T290] EXT4-fs (loop1): unmounting filesystem. [ 234.204845][ T3926] fuse: Unknown parameter 'group_id00000000000000000000' [ 234.287406][ T3927] overlayfs: unrecognized mount option "/" or missing value [ 236.037944][ T3956] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=3956 comm=syz.1.1088 [ 236.054988][ T3956] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 236.108548][ T3958] loop1: detected capacity change from 0 to 1024 [ 236.124748][ T3958] EXT4-fs: Ignoring removed oldalloc option [ 236.158535][ T3958] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 236.167336][ T3958] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.970893][ T290] EXT4-fs (loop1): unmounting filesystem. [ 237.169209][ T3982] kvm [3981]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x20 [ 237.485598][ T3993] fuse: Bad value for 'user_id' [ 237.704435][ T4004] loop3: detected capacity change from 0 to 1024 [ 237.711579][ T4004] EXT4-fs: Ignoring removed oldalloc option [ 237.883756][ T4004] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 237.892608][ T4004] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.566101][ T291] EXT4-fs (loop3): unmounting filesystem. [ 238.649846][ T4031] fuse: Bad value for 'user_id' [ 238.982969][ T4044] kvm: pic: non byte write [ 240.100668][ T4059] loop1: detected capacity change from 0 to 1024 [ 240.606009][ T4059] EXT4-fs: Ignoring removed oldalloc option [ 240.640026][ T4059] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 240.667733][ T4059] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.858552][ T4071] fuse: Bad value for 'fd' [ 242.555179][ T4097] input: syz1 as /devices/virtual/input/input37 [ 242.703664][ T4101] loop0: detected capacity change from 0 to 256 [ 242.743290][ T4101] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9218ae8, utbl_chksum : 0xe619d30d) [ 242.774264][ T28] audit: type=1400 audit(1777898288.110:198): avc: denied { write } for pid=4100 comm="syz.0.1132" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 242.801658][ T4101] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 242.827918][ T4101] exFAT-fs (loop0): Filesystem has been set read-only [ 242.841118][ T28] audit: type=1400 audit(1777898288.130:199): avc: denied { write } for pid=4100 comm="syz.0.1132" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.863765][ T290] EXT4-fs (loop1): unmounting filesystem. [ 242.864650][ T4101] exFAT-fs (loop0): error, failed to bmap (inode : ffff888132ff3250 iblock : 8, err : -5) [ 242.894975][ T4101] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 242.904546][ T28] audit: type=1400 audit(1777898288.130:200): avc: denied { add_name } for pid=4100 comm="syz.0.1132" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.951747][ T4101] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 242.970845][ T4101] exFAT-fs (loop0): error, failed to bmap (inode : ffff888132ff3250 iblock : 8, err : -5) [ 242.990160][ T28] audit: type=1400 audit(1777898288.130:201): avc: denied { associate } for pid=4100 comm="syz.0.1132" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 243.010467][ T4101] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 243.033294][ T28] audit: type=1400 audit(1777898288.130:202): avc: denied { read write } for pid=4100 comm="syz.0.1132" name="file1" dev="loop0" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 243.192790][ T28] audit: type=1400 audit(1777898288.130:203): avc: denied { open } for pid=4100 comm="syz.0.1132" path="/241/file2/file1" dev="loop0" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 243.742100][ T28] audit: type=1400 audit(1777898288.470:204): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 245.189490][ T4119] fuse: Bad value for 'fd' [ 245.414211][ T4125] input: syz1 as /devices/virtual/input/input38 [ 245.567069][ T4131] input: syz1 as /devices/virtual/input/input39 [ 245.813654][ T4136] fuse: Unknown parameter 'group_i00000000000000000000' [ 245.874163][ T4130] kvm [4129]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x20 [ 245.887116][ T4141] loop2: detected capacity change from 0 to 1024 [ 245.917394][ T4141] EXT4-fs: Ignoring removed oldalloc option [ 245.929122][ T4138] kvm: pic: non byte write [ 245.991789][ T4141] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 246.000494][ T4141] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.540359][ T28] audit: type=1400 audit(1777898291.870:205): avc: denied { create } for pid=4161 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.569712][ T28] audit: type=1400 audit(1777898291.870:206): avc: denied { bind } for pid=4161 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.589988][ T28] audit: type=1400 audit(1777898291.870:207): avc: denied { write } for pid=4161 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.746768][ T289] EXT4-fs (loop2): unmounting filesystem. [ 246.753968][ T4167] overlayfs: unrecognized mount option "/" or missing value [ 246.792377][ T4171] fuse: Bad value for 'fd' [ 246.841310][ T475] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 246.874272][ T4169] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=4169 comm=syz.1.1152 [ 246.893685][ T4169] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 246.959296][ T4173] kvm: pic: non byte write [ 247.052403][ T475] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c9.98 [ 247.065304][ T475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.079290][ T475] usb 1-1: config 0 descriptor?? [ 247.086128][ T475] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 247.094234][ T475] ftdi_sio ttyUSB0: unknown device type: 0xc998 [ 247.293992][ T678] usb 1-1: USB disconnect, device number 2 [ 247.300301][ T678] ftdi_sio 1-1:0.0: device disconnected [ 248.285163][ T4206] overlayfs: overlapping lowerdir path [ 248.307785][ T4208] loop2: detected capacity change from 0 to 1024 [ 248.344174][ T4208] EXT4-fs: Ignoring removed oldalloc option [ 248.351661][ T4210] fuse: Bad value for 'fd' [ 248.392378][ T4208] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 248.421364][ T4208] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.446561][ T4216] loop0: detected capacity change from 0 to 128 [ 248.472201][ T4216] EXT4-fs (loop0): Test dummy encryption mode enabled [ 248.577731][ T4216] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 248.593600][ T4216] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.785889][ T4216] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 248.794442][ T28] audit: type=1400 audit(1777898294.130:208): avc: denied { read } for pid=4213 comm="syz.0.1165" path="/246/file1/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 248.828545][ T287] EXT4-fs (loop0): unmounting filesystem. [ 248.882492][ T28] audit: type=1400 audit(1777898294.220:209): avc: denied { create } for pid=4225 comm="syz.0.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.040677][ T4232] overlayfs: unrecognized mount option "/" or missing value [ 249.135809][ T4236] input: syz1 as /devices/virtual/input/input40 [ 249.210158][ T289] EXT4-fs (loop2): unmounting filesystem. [ 249.882094][ T4247] input: syz1 as /devices/virtual/input/input41 [ 250.284300][ T4254] fuse: Bad value for 'fd' [ 250.556936][ T4269] loop1: detected capacity change from 0 to 1024 [ 250.604112][ T4269] EXT4-fs: Ignoring removed oldalloc option [ 250.661898][ T4273] kvm: pic: non byte write [ 250.696406][ T4269] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 250.713492][ T4269] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.157699][ T4288] overlayfs: unrecognized mount option "/" or missing value [ 251.214356][ T4295] fuse: Bad value for 'fd' [ 251.276782][ T4296] input: syz1 as /devices/virtual/input/input42 [ 251.458813][ T290] EXT4-fs (loop1): unmounting filesystem. [ 251.503921][ T4299] fuse: Bad value for 'user_id' [ 251.667854][ T4301] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=4301 comm=syz.1.1187 [ 251.738600][ T28] audit: type=1400 audit(1777898297.070:210): avc: denied { name_bind } for pid=4306 comm="syz.3.1190" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 251.821744][ T4301] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 251.931661][ T4314] input: syz1 as /devices/virtual/input/input43 [ 252.234080][ T4321] loop1: detected capacity change from 0 to 256 [ 252.566662][ T4326] usb usb7: usbfs: process 4326 (syz.1.1195) did not claim interface 0 before use [ 253.417998][ T4332] loop2: detected capacity change from 0 to 1024 [ 253.432083][ T4335] fuse: Invalid rootmode [ 253.432631][ T4332] EXT4-fs: Ignoring removed oldalloc option [ 253.501778][ T4339] fuse: Bad value for 'user_id' [ 253.513281][ T4332] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 253.531023][ T4332] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.668411][ T28] audit: type=1400 audit(1777898299.000:211): avc: denied { setopt } for pid=4345 comm="syz.1.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 254.070978][ T4358] overlayfs: unrecognized mount option "/" or missing value [ 254.098406][ T4357] loop0: detected capacity change from 0 to 256 [ 254.789352][ T289] EXT4-fs (loop2): unmounting filesystem. [ 255.220874][ T4360] usb usb7: usbfs: process 4360 (syz.0.1204) did not claim interface 0 before use [ 255.539028][ T28] audit: type=1400 audit(1777898300.870:212): avc: denied { listen } for pid=4370 comm="syz.0.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 255.573846][ T28] audit: type=1400 audit(1777898300.910:213): avc: denied { ioctl } for pid=4370 comm="syz.0.1208" path="socket:[40467]" dev="sockfs" ino=40467 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 255.628674][ T4351] loop4: detected capacity change from 0 to 40427 [ 255.716944][ T4351] F2FS-fs (loop4): invalid crc value [ 255.774798][ T4351] F2FS-fs (loop4): Found nat_bits in checkpoint [ 255.876549][ T4351] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 256.014658][ T28] audit: type=1400 audit(1777898301.350:214): avc: denied { create } for pid=4350 comm="syz.4.1202" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 256.089478][ T28] audit: type=1400 audit(1777898301.370:215): avc: denied { setattr } for pid=4350 comm="syz.4.1202" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.198350][ T28] audit: type=1400 audit(1777898301.370:216): avc: denied { create } for pid=4350 comm="syz.4.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 256.400016][ T4384] fuse: Bad value for 'fd' [ 256.534422][ T4386] incfs: ino conflict with backing FS 3 [ 256.540901][ T4386] syz.4.1202: attempt to access beyond end of device [ 256.540901][ T4386] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 256.554949][ T4386] syz.4.1202: attempt to access beyond end of device [ 256.554949][ T4386] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 256.568831][ T4386] incfs: iterate_incfs_dir / -5 [ 256.619312][ T28] audit: type=1400 audit(1777898301.870:217): avc: denied { mounton } for pid=4350 comm="syz.4.1202" path="/230/bus/bus" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 256.722419][ T288] syz-executor: attempt to access beyond end of device [ 256.722419][ T288] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 256.763014][ T28] audit: type=1400 audit(1777898302.100:218): avc: denied { remove_name } for pid=288 comm="syz-executor" name=".index" dev="loop4" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.801287][ T288] syz-executor: attempt to access beyond end of device [ 256.801287][ T288] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 256.816140][ T43] tipc: Disabling bearer [ 256.816960][ T28] audit: type=1400 audit(1777898302.130:219): avc: denied { rmdir } for pid=288 comm="syz-executor" name=".index" dev="loop4" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 256.832867][ T43] tipc: Left network mode [ 256.892973][ T4391] kvm: pic: non byte write [ 257.172934][ T4402] input: syz1 as /devices/virtual/input/input44 [ 257.468286][ T28] audit: type=1400 audit(1777898302.800:220): avc: denied { mounton } for pid=4405 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 257.493014][ T43] device bridge_slave_1 left promiscuous mode [ 257.499747][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.510592][ T43] device bridge_slave_0 left promiscuous mode [ 257.517586][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.528579][ T43] device veth1_macvtap left promiscuous mode [ 257.535244][ T43] device veth0_vlan left promiscuous mode [ 257.893857][ T4409] netlink: 400 bytes leftover after parsing attributes in process `syz.3.1218'. [ 257.935547][ T28] audit: type=1400 audit(1777898303.260:221): avc: denied { create } for pid=4406 comm="syz.3.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.249629][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.257736][ T4405] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.265949][ T4405] device bridge_slave_0 entered promiscuous mode [ 258.273543][ T4405] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.280810][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.288628][ T4405] device bridge_slave_1 entered promiscuous mode [ 258.304353][ T4419] input: syz1 as /devices/virtual/input/input45 [ 258.349964][ T4421] process 'syz.0.1222' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 258.379466][ T4405] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.475860][ T4405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.483462][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.490962][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.510928][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.518748][ T2806] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.526657][ T2806] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.536445][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.547979][ T2806] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.555216][ T2806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.564740][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.573714][ T2806] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.580777][ T2806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.607937][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.626477][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.643886][ T4428] loop2: detected capacity change from 0 to 256 [ 258.660684][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.677712][ T4428] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 258.692746][ T4405] device veth0_vlan entered promiscuous mode [ 258.705131][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.715556][ T4428] xt_hashlimit: size too large, truncated to 1048576 [ 258.722633][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.730576][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.745896][ T4405] device veth1_macvtap entered promiscuous mode [ 258.893064][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.038422][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.059807][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.093303][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.114465][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.217121][ T8] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 259.248812][ T4447] fuse: Bad value for 'fd' [ 259.353522][ T4448] overlayfs: overlapping lowerdir path [ 259.469339][ T4452] overlayfs: unrecognized mount option "/" or missing value [ 260.013144][ T4460] input: syz1 as /devices/virtual/input/input46 [ 260.665928][ T4461] loop1: detected capacity change from 0 to 512 [ 260.780114][ T4461] EXT4-fs: Ignoring removed oldalloc option [ 260.854767][ T4461] EXT4-fs (loop1): Test dummy encryption mode enabled [ 260.978485][ T4461] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 261.015293][ T4461] EXT4-fs (loop1): unmounting filesystem. [ 261.157785][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 261.157803][ T28] audit: type=1400 audit(1777898306.490:226): avc: denied { mount } for pid=4468 comm="syz.2.1234" name="/" dev="ramfs" ino=40925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 261.201388][ T28] audit: type=1400 audit(1777898306.490:227): avc: denied { execute } for pid=4468 comm="syz.2.1234" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=40926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 261.365305][ T4474] loop2: detected capacity change from 0 to 512 [ 261.412635][ T28] audit: type=1400 audit(1777898306.670:228): avc: denied { read write } for pid=4473 comm="syz.2.1236" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 261.442011][ T4458] overlayfs: './file0' not a directory [ 261.453146][ T4474] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1236: bg 0: block 393: padding at end of block bitmap is not set [ 261.492588][ T4477] loop3: detected capacity change from 0 to 1024 [ 261.514055][ T4474] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 261.531672][ T4477] EXT4-fs: Ignoring removed mblk_io_submit option [ 261.587492][ T28] audit: type=1400 audit(1777898306.670:229): avc: denied { open } for pid=4473 comm="syz.2.1236" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 261.613748][ T4474] EXT4-fs (loop2): 2 truncates cleaned up [ 261.636402][ T4474] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 261.638354][ T28] audit: type=1400 audit(1777898306.700:230): avc: denied { bind } for pid=4473 comm="syz.2.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 261.647521][ T4477] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 261.715210][ T28] audit: type=1400 audit(1777898307.050:231): avc: denied { setattr } for pid=4473 comm="syz.2.1236" name=".pending_reads" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 261.816113][ T28] audit: type=1400 audit(1777898307.150:232): avc: denied { listen } for pid=4473 comm="syz.2.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 261.876032][ T291] EXT4-fs (loop3): unmounting filesystem. [ 261.886261][ T28] audit: type=1400 audit(1777898307.150:233): avc: denied { accept } for pid=4473 comm="syz.2.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 261.909986][ T4493] loop5: detected capacity change from 0 to 512 [ 261.997832][ T28] audit: type=1400 audit(1777898307.200:234): avc: denied { setopt } for pid=4473 comm="syz.2.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 262.005391][ T4493] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 262.034229][ T4500] loop3: detected capacity change from 0 to 512 [ 262.041341][ T4493] FAT-fs (loop5): Filesystem has been set read-only [ 262.048788][ T4493] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 262.071378][ T4493] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 262.252192][ T289] EXT4-fs (loop2): unmounting filesystem. [ 262.274503][ T4493] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1241'. [ 262.311119][ T4512] overlayfs: unrecognized mount option "/" or missing value [ 262.582380][ T4532] loop1: detected capacity change from 0 to 512 [ 262.652815][ T28] audit: type=1400 audit(1777898307.980:235): avc: denied { execute } for pid=4525 comm="syz.2.1252" name="file0" dev="tmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 263.090969][ T4548] loop3: detected capacity change from 0 to 512 [ 263.125619][ T4548] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 263.136464][ T4548] FAT-fs (loop3): Filesystem has been set read-only [ 263.144768][ T4548] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 263.154864][ T4548] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 263.184411][ T4548] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1259'. [ 263.198658][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.246860][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.303186][ T4563] input: syz1 as /devices/virtual/input/input47 [ 263.342862][ T4551] netlink: 'syz.1.1260': attribute type 4 has an invalid length. [ 263.510237][ T4565] input: syz1 as /devices/virtual/input/input48 [ 263.567425][ T4570] loop2: detected capacity change from 0 to 512 [ 263.623138][ T2618] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 264.027851][ T4585] overlayfs: unrecognized mount option "/" or missing value [ 264.084181][ T4596] xt_hashlimit: size too large, truncated to 1048576 [ 264.146809][ T4602] cgroup: Need name or subsystem set [ 264.222921][ T4610] loop1: detected capacity change from 0 to 512 [ 264.478358][ T4613] input: syz1 as /devices/virtual/input/input49 [ 264.844088][ T4627] loop2: detected capacity change from 0 to 256 [ 264.906079][ T4631] input: syz1 as /devices/virtual/input/input50 [ 265.057353][ T4644] netlink: 'syz.3.1290': attribute type 2 has an invalid length. [ 265.218985][ T4654] loop2: detected capacity change from 0 to 512 [ 265.311846][ T4654] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 265.328475][ T4654] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.438080][ T4667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 265.449883][ T289] EXT4-fs (loop2): unmounting filesystem. [ 265.741548][ T4680] loop0: detected capacity change from 0 to 4096 [ 265.765574][ T4680] EXT4-fs (loop0): Test dummy encryption mode enabled [ 265.776589][ T4680] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 265.785082][ T4680] System zones: 0-5 [ 265.797521][ T4680] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 266.091309][ T1097] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 266.271079][ T4678] loop1: detected capacity change from 0 to 131072 [ 266.281372][ T1097] usb 1-1: Using ep0 maxpacket: 32 [ 266.292267][ T1097] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 266.301425][ T4678] F2FS-fs (loop1): Unrecognized mount option "alloc_mĚ" or missing value [ 266.320406][ T1097] usb 1-1: config 0 has no interface number 0 [ 266.340741][ T1097] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 266.366225][ T1097] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.384220][ T1097] usb 1-1: Product: syz [ 266.389521][ T4700] loop1: detected capacity change from 0 to 512 [ 266.392888][ T1097] usb 1-1: Manufacturer: syz [ 266.409327][ T1097] usb 1-1: SerialNumber: syz [ 266.428763][ T1097] usb 1-1: config 0 descriptor?? [ 266.437424][ T4700] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1308: bad orphan inode 14 [ 266.441505][ T1097] smsc95xx v2.0.0 [ 266.471157][ T4700] ext4_test_bit(bit=13, block=4) = 1 [ 266.494182][ T4700] is_bad_inode(inode)=0 [ 266.511378][ T4700] NEXT_ORPHAN(inode)=0 [ 266.516962][ T4700] max_ino=32 [ 266.520313][ T4700] i_nlink=1 [ 266.523847][ T4700] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 266.551816][ T290] EXT4-fs (loop1): unmounting filesystem. [ 266.753766][ T4712] loop1: detected capacity change from 0 to 256 [ 266.760257][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 266.760276][ T28] audit: type=1400 audit(1777898312.090:245): avc: denied { getopt } for pid=4702 comm="syz.1.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 266.797799][ T4712] FAT-fs (loop1): Directory bread(block 64) failed [ 266.797842][ T4712] FAT-fs (loop1): Directory bread(block 65) failed [ 266.797878][ T4712] FAT-fs (loop1): Directory bread(block 66) failed [ 266.797896][ T4712] FAT-fs (loop1): Directory bread(block 67) failed [ 266.797992][ T4712] FAT-fs (loop1): Directory bread(block 68) failed [ 266.798013][ T4712] FAT-fs (loop1): Directory bread(block 69) failed [ 266.798048][ T4712] FAT-fs (loop1): Directory bread(block 70) failed [ 266.798090][ T4712] FAT-fs (loop1): Directory bread(block 71) failed [ 266.798131][ T4712] FAT-fs (loop1): Directory bread(block 72) failed [ 266.798149][ T4712] FAT-fs (loop1): Directory bread(block 73) failed [ 266.844247][ T1097] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 266.844286][ T1097] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 266.911298][ T1561] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 267.091329][ T1561] usb 6-1: Using ep0 maxpacket: 32 [ 267.104247][ T1561] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 267.113002][ T1561] usb 6-1: config 0 has no interface number 0 [ 267.119153][ T1561] usb 6-1: config 0 interface 184 has no altsetting 0 [ 267.138063][ T1561] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 267.147899][ T1561] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.156285][ T1561] usb 6-1: Product: syz [ 267.160835][ T1561] usb 6-1: Manufacturer: syz [ 267.166230][ T1561] usb 6-1: SerialNumber: syz [ 267.175850][ T1561] usb 6-1: config 0 descriptor?? [ 267.190071][ T1561] smsc75xx v1.0.0 [ 267.246001][ T1097] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 267.259683][ T1097] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 267.260040][ T4719] input: syz1 as /devices/virtual/input/input51 [ 267.273104][ T1097] usb 1-1: USB disconnect, device number 3 [ 267.788158][ T287] EXT4-fs (loop0): unmounting filesystem. [ 267.802310][ T1561] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 267.813384][ T1561] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 267.823163][ T1561] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 267.841862][ T4730] xt_hashlimit: size too large, truncated to 1048576 [ 267.861844][ T4730] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 268.151315][ T1097] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 268.340974][ T1561] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 268.341323][ T1097] usb 1-1: Using ep0 maxpacket: 8 [ 268.363083][ T1561] usb 6-1: USB disconnect, device number 2 [ 268.376243][ T1097] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.389876][ T1097] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 268.399725][ T28] audit: type=1400 audit(1777898313.730:246): avc: denied { create } for pid=4734 comm="syz.3.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 268.420414][ T1097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.451768][ T1097] usb 1-1: config 0 descriptor?? [ 268.556970][ T28] audit: type=1400 audit(1777898313.890:247): avc: denied { connect } for pid=4752 comm="syz.3.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.617373][ T28] audit: type=1400 audit(1777898313.890:248): avc: denied { write } for pid=4752 comm="syz.3.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.643049][ T4755] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1007 sclass=netlink_audit_socket pid=4755 comm=syz.2.1326 [ 268.662173][ T28] audit: type=1400 audit(1777898313.890:249): avc: denied { watch watch_reads } for pid=4752 comm="syz.3.1325" path="/265/file0" dev="tmpfs" ino=1432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 268.667108][ T1097] usb 1-1: USB disconnect, device number 4 [ 268.710122][ T4757] input: syz1 as /devices/virtual/input/input52 [ 269.272318][ T4784] loop0: detected capacity change from 0 to 4096 [ 269.289325][ T4784] EXT4-fs (loop0): Test dummy encryption mode enabled [ 269.305478][ T4784] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c019, mo2=0003] [ 269.313843][ T4784] System zones: 0-5 [ 269.318724][ T4784] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 269.964203][ T4798] loop2: detected capacity change from 0 to 1024 [ 270.038995][ T4798] journal_path: Lookup failure for './bus' [ 270.157739][ T1561] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 270.167809][ T4798] EXT4-fs: error: could not find journal device path [ 270.498844][ T4803] loop2: detected capacity change from 0 to 512 [ 270.514982][ T287] EXT4-fs (loop0): unmounting filesystem. [ 270.543462][ T1561] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 270.600858][ T1561] usb 2-1: config 0 has no interface number 0 [ 270.639047][ T1561] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.759023][ T1561] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.781331][ T1561] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 270.790532][ T1561] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 270.801299][ T1561] usb 2-1: Manufacturer: syz [ 270.807474][ T1561] usb 2-1: config 0 descriptor?? [ 270.817138][ T4811] input: syz1 as /devices/virtual/input/input53 [ 270.871343][ T1097] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 270.880635][ T4808] kvm: pic: non byte write [ 270.972569][ T28] audit: type=1400 audit(1777898316.310:250): avc: denied { accept } for pid=4820 comm="syz.5.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 271.052648][ T1097] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.067368][ T1097] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.084013][ T1097] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 271.102897][ T1097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.123175][ T1097] usb 4-1: config 0 descriptor?? [ 271.168801][ T28] audit: type=1326 audit(1777898316.500:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.5.1349" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f52b9cdd9 code=0x7ffc0000 [ 271.207735][ T28] audit: type=1326 audit(1777898316.500:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.5.1349" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f8f52b9cdd9 code=0x7ffc0000 [ 271.237345][ T4796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.255233][ T4796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.265076][ T28] audit: type=1326 audit(1777898316.500:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.5.1349" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f52b9cdd9 code=0x7ffc0000 [ 271.298601][ T4832] loop0: detected capacity change from 0 to 512 [ 271.305960][ T28] audit: type=1326 audit(1777898316.500:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.5.1349" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f52b9cdd9 code=0x7ffc0000 [ 271.306766][ T4796] futex_wake_op: syz.1.1339 tries to shift op by 32; fix this program [ 271.348442][ T4832] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1351: bg 0: block 393: padding at end of block bitmap is not set [ 271.379372][ T1561] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 271.388439][ T4832] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 271.398837][ T4832] EXT4-fs (loop0): 2 truncates cleaned up [ 271.405414][ T4832] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 271.482741][ T287] EXT4-fs (loop0): unmounting filesystem. [ 271.549213][ T1097] waltop 0003:172F:0501.0002: item fetching failed at offset 5/7 [ 271.557664][ T1097] waltop: probe of 0003:172F:0501.0002 failed with error -22 [ 271.594672][ T475] usb 2-1: USB disconnect, device number 2 [ 271.705263][ T4848] random: crng reseeded on system resumption [ 271.747031][ T4850] input: syz1 as /devices/virtual/input/input54 [ 271.758254][ T1097] usb 4-1: USB disconnect, device number 2 [ 271.775902][ T4852] fuse: Unknown parameter 'use00000000000000000000' [ 271.860371][ T4854] kvm: pic: non byte write [ 272.150092][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 272.150109][ T28] audit: type=1400 audit(1777898317.480:264): avc: denied { bind } for pid=4864 comm="syz.2.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 272.231105][ T28] audit: type=1400 audit(1777898317.480:265): avc: denied { create } for pid=4864 comm="syz.2.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 272.326858][ T4881] input: syz1 as /devices/virtual/input/input55 [ 272.443300][ T4873] loop5: detected capacity change from 0 to 40427 [ 272.474447][ T4873] F2FS-fs (loop5): Unrecognized mount option "./file1" or missing value [ 272.527704][ T4879] loop1: detected capacity change from 0 to 40427 [ 272.534523][ T2618] I/O error, dev loop5, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.650401][ T4873] loop5: detected capacity change from 0 to 256 [ 272.657622][ T2621] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.684865][ T4873] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 272.735294][ T4873] capability: warning: `syz.5.1367' uses deprecated v2 capabilities in a way that may be insecure [ 272.893417][ T4898] kvm: pic: non byte write [ 273.027711][ T4912] input: syz1 as /devices/virtual/input/input56 [ 273.034567][ T475] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 273.198586][ T4916] loop3: detected capacity change from 0 to 32768 [ 273.261486][ T1561] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 273.291473][ T4918] overlayfs: unrecognized mount option "/" or missing value [ 273.332214][ T475] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.343815][ T475] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.355488][ T475] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.365778][ T475] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.374598][ T475] usb 2-1: Product: syz [ 273.379384][ T475] usb 2-1: Manufacturer: syz [ 273.384527][ T475] usb 2-1: SerialNumber: syz [ 273.404393][ T4919] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 273.469684][ T4916] loop3: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 273.480493][ T4916] loop3: p2 size 16775168 extends beyond EOD, [ 273.593062][ T1561] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.625858][ T1561] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.643891][ T1561] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.670162][ T4916] truncated [ 273.674661][ T1561] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.694436][ T4916] loop3: p6 size 16775168 extends beyond EOD, truncated [ 273.703016][ T1561] usb 1-1: Product: syz [ 273.713836][ T1561] usb 1-1: Manufacturer: syz [ 273.724071][ T1561] usb 1-1: SerialNumber: syz [ 273.731154][ T4916] loop3: p8 size 16775168 extends beyond EOD, truncated [ 273.851425][ T28] audit: type=1400 audit(1777898319.170:266): avc: denied { create } for pid=4878 comm="syz.1.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 273.893374][ T4916] loop3: p10 size 16775168 extends beyond EOD, truncated [ 274.111919][ T4923] loop2: detected capacity change from 0 to 512 [ 274.127123][ T4923] EXT4-fs (loop2): Test dummy encryption mode enabled [ 274.134448][ T4923] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 274.148659][ T4923] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 274.173598][ T4923] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1383: bad orphan inode 131083 [ 274.184549][ T4916] loop3: p12 size 16775168 extends beyond EOD, truncated [ 274.193211][ T4916] loop3: p14 size 16775168 extends beyond EOD, truncated [ 274.200676][ T4923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 274.223383][ T4916] loop3: p16 size 16775168 extends beyond EOD, truncated [ 274.232966][ T28] audit: type=1400 audit(1777898319.570:267): avc: denied { append } for pid=4926 comm="syz.5.1384" name="001" dev="devtmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 274.269108][ T4916] loop3: p18 size 16775168 extends beyond EOD, truncated [ 274.273024][ T4927] loop5: detected capacity change from 0 to 512 [ 274.277750][ T4916] loop3: p20 size 16775168 extends beyond EOD, truncated [ 274.291178][ T4923] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 274.295934][ T4927] EXT4-fs: Ignoring removed orlov option [ 274.299840][ T475] usb 2-1: 0:2 : does not exist [ 274.311624][ T4916] loop3: p22 size 16775168 extends beyond EOD, truncated [ 274.318975][ T4927] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 274.325971][ T475] usb 2-1: USB disconnect, device number 3 [ 274.332660][ T4927] EXT4-fs (loop5): Test dummy encryption mode enabled [ 274.339536][ T4916] loop3: p24 size 16775168 extends beyond EOD, [ 274.346306][ T28] audit: type=1400 audit(1777898319.680:268): avc: denied { mounton } for pid=4922 comm="syz.2.1383" path="/269/bus/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.346967][ T4929] overlayfs: upper fs needs to support d_type. [ 274.354673][ T28] audit: type=1400 audit(1777898319.680:269): avc: denied { setattr } for pid=4922 comm="syz.2.1383" name="work" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 274.379785][ T4927] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 274.385942][ T4916] truncated [ 274.413728][ T28] audit: type=1400 audit(1777898319.750:270): avc: denied { write } for pid=4922 comm="syz.2.1383" name="work" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 274.419865][ T4916] loop3: p26 size 16775168 extends beyond EOD, [ 274.426706][ T4927] EXT4-fs (loop5): 1 truncate cleaned up [ 274.443332][ T4916] truncated [ 274.450253][ T28] audit: type=1400 audit(1777898319.750:271): avc: denied { add_name } for pid=4922 comm="syz.2.1383" name="#1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 274.457228][ T4916] loop3: p28 size 16775168 extends beyond EOD, [ 274.464178][ T28] audit: type=1400 audit(1777898319.750:272): avc: denied { remove_name } for pid=4922 comm="syz.2.1383" name="#1" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 274.479635][ T4916] truncated [ 274.486495][ T4927] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 274.511644][ T4916] loop3: p30 size 16775168 extends beyond EOD, [ 274.514338][ T28] audit: type=1400 audit(1777898319.750:273): avc: denied { rename } for pid=4922 comm="syz.2.1383" name="#1" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 274.522732][ T4916] truncated [ 274.524140][ T4916] loop3: p32 size 16775168 extends beyond EOD, truncated [ 274.563458][ T4916] loop3: p34 size 16775168 extends beyond EOD, truncated [ 274.581358][ T4916] loop3: p36 size 16775168 extends beyond EOD, truncated [ 274.590024][ T4916] loop3: p38 size 16775168 extends beyond EOD, truncated [ 274.598546][ T4405] EXT4-fs (loop5): unmounting filesystem. [ 274.599107][ T4916] loop3: p40 size 16775168 extends beyond EOD, truncated [ 274.612958][ T2621] udevd[2621]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 274.616971][ T289] EXT4-fs (loop2): unmounting filesystem. [ 274.630588][ T4916] loop3: p42 size 16775168 extends beyond EOD, truncated [ 274.648404][ T8] tipc: Disabling bearer [ 274.662489][ T8] tipc: Left network mode [ 274.663535][ T4934] loop5: detected capacity change from 0 to 512 [ 274.673796][ T4916] loop3: p44 size 16775168 extends beyond EOD, truncated [ 274.696416][ T4916] loop3: p46 size 16775168 extends beyond EOD, truncated [ 274.715383][ T4916] loop3: p48 size 16775168 extends beyond EOD, truncated [ 274.728598][ T4916] loop3: p50 size 16775168 extends beyond EOD, truncated [ 274.740410][ T4934] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1386: bg 0: block 393: padding at end of block bitmap is not set [ 274.760995][ T4934] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 274.770996][ T4916] loop3: p52 size 16775168 extends beyond EOD, truncated [ 274.778774][ T4934] EXT4-fs (loop5): 2 truncates cleaned up [ 274.785101][ T4934] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 274.792122][ T4916] loop3: p54 size 16775168 extends beyond EOD, truncated [ 274.843411][ T4405] EXT4-fs (loop5): unmounting filesystem. [ 274.850947][ T4916] loop3: p56 size 16775168 extends beyond EOD, truncated [ 274.872781][ T4916] loop3: p58 size 16775168 extends beyond EOD, truncated [ 274.906043][ T4916] loop3: p60 size 16775168 extends beyond EOD, truncated [ 274.925967][ T4916] loop3: p62 size 16775168 extends beyond EOD, truncated [ 274.941708][ T4944] input: syz1 as /devices/virtual/input/input57 [ 274.953755][ T4947] kvm: pic: non byte write [ 274.971786][ T4916] loop3: p64 size 16775168 extends beyond EOD, truncated [ 274.989413][ T4916] loop3: p66 size 16775168 extends beyond EOD, truncated [ 275.001792][ T4938] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.009435][ T4938] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.017531][ T4916] loop3: p68 size 16775168 extends beyond EOD, truncated [ 275.032205][ T4916] loop3: p70 size 16775168 extends beyond EOD, truncated [ 275.048252][ T4916] loop3: p72 size 16775168 extends beyond EOD, truncated [ 275.054372][ T4938] device bridge_slave_0 entered promiscuous mode [ 275.056595][ T4916] loop3: p74 size 16775168 extends beyond EOD, truncated [ 275.072150][ T4938] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.079667][ T4916] loop3: p76 size 16775168 extends beyond EOD, truncated [ 275.090721][ T4938] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.110447][ T4916] loop3: p78 size 16775168 extends beyond EOD, truncated [ 275.119013][ T4938] device bridge_slave_1 entered promiscuous mode [ 275.136208][ T4916] loop3: p80 size 16775168 extends beyond EOD, truncated [ 275.149184][ T4910] loop0: detected capacity change from 0 to 256 [ 275.158919][ T4916] loop3: p82 size 16775168 extends beyond EOD, truncated [ 275.176701][ T4910] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 275.202851][ T4916] loop3: p84 size 16775168 extends beyond EOD, truncated [ 275.218338][ T4952] kvm [4951]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x166 [ 275.219593][ T4916] loop3: p86 size 16775168 extends beyond EOD, truncated [ 275.254143][ T4916] loop3: p88 size 16775168 extends beyond EOD, truncated [ 275.271612][ T4916] loop3: p90 size 16775168 extends beyond EOD, truncated [ 275.274604][ T4938] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.286471][ T4938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.289339][ T1561] cdc_ncm 1-1:1.0: bind() failure [ 275.294051][ T4938] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.306353][ T4938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.307386][ T1561] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 275.323725][ T4916] loop3: p92 size 16775168 extends beyond EOD, truncated [ 275.333900][ T4916] loop3: p94 size 16775168 extends beyond EOD, truncated [ 275.341780][ T1561] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 275.349301][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.357969][ T4916] loop3: p96 size 16775168 extends beyond EOD, truncated [ 275.366415][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.378419][ T1561] usb 1-1: USB disconnect, device number 5 [ 275.394183][ T4916] loop3: p98 size 16775168 extends beyond EOD, truncated [ 275.401843][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.410838][ T4916] loop3: p100 size 16775168 extends beyond EOD, truncated [ 275.422757][ T4916] loop3: p102 size 16775168 extends beyond EOD, truncated [ 275.432003][ T4916] loop3: p104 size 16775168 extends beyond EOD, truncated [ 275.440830][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.441652][ T4916] loop3: p106 size 16775168 extends beyond EOD, truncated [ 275.455207][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.457935][ T4916] loop3: p108 size 16775168 extends beyond EOD, truncated [ 275.463578][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.471880][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.488447][ T4916] loop3: p110 size 16775168 extends beyond EOD, truncated [ 275.497523][ T4916] loop3: p112 size 16775168 extends beyond EOD, truncated [ 275.502490][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.506400][ T4916] loop3: p114 size 16775168 extends beyond EOD, [ 275.512119][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.512148][ T4916] truncated [ 275.528549][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.530551][ T4916] loop3: p116 size 16775168 extends beyond EOD, truncated [ 275.537034][ T612] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 275.545598][ T4916] loop3: p118 size 16775168 extends beyond EOD, truncated [ 275.561181][ T4916] loop3: p120 size 16775168 extends beyond EOD, truncated [ 275.570242][ T4916] loop3: p122 size 16775168 extends beyond EOD, truncated [ 275.582073][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.582181][ T4916] loop3: p124 size 16775168 extends beyond EOD, truncated [ 275.598727][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.599571][ T4916] loop3: p126 size 16775168 extends beyond EOD, truncated [ 275.616384][ T4916] loop3: p128 size 16775168 extends beyond EOD, truncated [ 275.618179][ T4938] device veth0_vlan entered promiscuous mode [ 275.631867][ T4916] loop3: p130 size 16775168 extends beyond EOD, truncated [ 275.639883][ T8] device bridge_slave_1 left promiscuous mode [ 275.647999][ T4916] loop3: p132 size 16775168 extends beyond EOD, truncated [ 275.656154][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.665173][ T8] device bridge_slave_0 left promiscuous mode [ 275.672877][ T4916] loop3: p134 size 16775168 extends beyond EOD, truncated [ 275.680332][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.689404][ T4916] loop3: p136 size 16775168 extends beyond EOD, truncated [ 275.699046][ T8] device veth1_macvtap left promiscuous mode [ 275.706893][ T4916] loop3: p138 size 16775168 extends beyond EOD, truncated [ 275.714535][ T8] device veth0_vlan left promiscuous mode [ 275.721953][ T4916] loop3: p140 size 16775168 extends beyond EOD, truncated [ 275.742037][ T4916] loop3: p142 size 16775168 extends beyond EOD, truncated [ 275.751310][ T612] usb 2-1: Using ep0 maxpacket: 16 [ 275.757391][ T4916] loop3: p144 size 16775168 extends beyond EOD, truncated [ 275.765918][ T612] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.779227][ T4916] loop3: p146 size 16775168 extends beyond EOD, truncated [ 275.790833][ T612] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.812893][ T612] usb 2-1: config 0 interface 0 has no altsetting 0 [ 275.831540][ T612] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 275.834300][ T4962] xt_hashlimit: size too large, truncated to 1048576 [ 275.840895][ T612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.848091][ T4916] loop3: p148 size 16775168 extends beyond EOD, truncated [ 275.891559][ T612] usb 2-1: config 0 descriptor?? [ 275.899358][ T4916] loop3: p150 size 16775168 extends beyond EOD, truncated [ 275.921701][ T4916] loop3: p152 size 16775168 extends beyond EOD, truncated [ 275.930394][ T4916] loop3: p154 size 16775168 extends beyond EOD, truncated [ 275.943359][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.952885][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.961508][ T4916] loop3: p156 size 16775168 extends beyond EOD, truncated [ 275.980008][ T4938] device veth1_macvtap entered promiscuous mode [ 275.994727][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.002850][ T4916] loop3: p158 size 16775168 extends beyond EOD, truncated [ 276.011849][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.019998][ T4916] loop3: p160 size 16775168 extends beyond EOD, truncated [ 276.028390][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.037871][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.046820][ T4916] loop3: p162 size 16775168 extends beyond EOD, truncated [ 276.055475][ T4916] loop3: p164 size 16775168 extends beyond EOD, truncated [ 276.063360][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 276.076579][ T4916] loop3: p166 size 16775168 extends beyond EOD, truncated [ 276.088344][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.099011][ T4916] loop3: p168 size 16775168 extends beyond EOD, truncated [ 276.107742][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.117083][ T612] usbhid 2-1:0.0: can't add hid device: -71 [ 276.124626][ T4916] loop3: p170 size 16775168 extends beyond EOD, truncated [ 276.133489][ T612] usbhid: probe of 2-1:0.0 failed with error -71 [ 276.140812][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.152315][ T612] usb 2-1: USB disconnect, device number 4 [ 276.159112][ T4916] loop3: p172 size 16775168 extends beyond EOD, truncated [ 276.167014][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.194195][ T4916] loop3: p174 size 16775168 extends beyond EOD, truncated [ 276.234422][ T4916] loop3: p176 size 16775168 extends beyond EOD, truncated [ 276.263328][ T4916] loop3: p178 size 16775168 extends beyond EOD, truncated [ 276.282596][ T4916] loop3: p180 size 16775168 extends beyond EOD, truncated [ 276.290789][ T4916] loop3: p182 size 16775168 extends beyond EOD, truncated [ 276.320545][ T4916] loop3: p184 size 16775168 extends beyond EOD, truncated [ 276.347924][ T4916] loop3: p186 size 16775168 extends beyond EOD, truncated [ 276.375447][ T4916] loop3: p188 size 16775168 extends beyond EOD, truncated [ 276.403108][ T4916] loop3: p190 size 16775168 extends beyond EOD, truncated [ 276.424065][ T4977] kvm [4975]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x166 [ 276.425186][ T4916] loop3: p192 size 16775168 extends beyond EOD, truncated [ 276.458436][ T4916] loop3: p194 size 16775168 extends beyond EOD, truncated [ 276.472534][ T4916] loop3: p196 size 16775168 extends beyond EOD, truncated [ 276.496466][ T4916] loop3: p198 size 16775168 extends beyond EOD, truncated [ 276.515234][ T4916] loop3: p200 size 16775168 extends beyond EOD, truncated [ 276.532164][ T4916] loop3: p202 size 16775168 extends beyond EOD, truncated [ 276.540303][ T4983] kvm: pic: non byte write [ 276.549390][ T4916] loop3: p204 size 16775168 extends beyond EOD, truncated [ 276.566231][ T4916] loop3: p206 size 16775168 extends beyond EOD, truncated [ 276.582287][ T4916] loop3: p208 size 16775168 extends beyond EOD, truncated [ 276.598031][ T4916] loop3: p210 size 16775168 extends beyond EOD, truncated [ 276.616188][ T4916] loop3: p212 size 16775168 extends beyond EOD, truncated [ 276.634693][ T4916] loop3: p214 size 16775168 extends beyond EOD, truncated [ 276.649521][ T4916] loop3: p216 size 16775168 extends beyond EOD, truncated [ 276.665061][ T4916] loop3: p218 size 16775168 extends beyond EOD, truncated [ 276.689937][ T4916] loop3: p220 size 16775168 extends beyond EOD, truncated [ 276.711204][ T4916] loop3: p222 size 16775168 extends beyond EOD, truncated [ 276.734360][ T4990] input: syz1 as /devices/virtual/input/input58 [ 276.736193][ T4916] loop3: p224 size 16775168 extends beyond EOD, truncated [ 276.782369][ T4916] loop3: p226 size 16775168 extends beyond EOD, truncated [ 276.805746][ T4916] loop3: p228 size 16775168 extends beyond EOD, truncated [ 276.830038][ T4916] loop3: p230 size 16775168 extends beyond EOD, truncated [ 276.850434][ T4916] loop3: p232 size 16775168 extends beyond EOD, truncated [ 276.872353][ T4916] loop3: p234 size 16775168 extends beyond EOD, truncated [ 276.894474][ T4916] loop3: p236 size 16775168 extends beyond EOD, truncated [ 276.913279][ T4916] loop3: p238 size 16775168 extends beyond EOD, truncated [ 276.936659][ T4916] loop3: p240 size 16775168 extends beyond EOD, truncated [ 276.960783][ T4916] loop3: p242 size 16775168 extends beyond EOD, truncated [ 276.994392][ T4916] loop3: p244 size 16775168 extends beyond EOD, truncated [ 277.019225][ T4916] loop3: p246 size 16775168 extends beyond EOD, truncated [ 277.043966][ T4916] loop3: p248 size 16775168 extends beyond EOD, truncated [ 277.078954][ T4916] loop3: p250 size 16775168 extends beyond EOD, truncated [ 277.100692][ T4916] loop3: p252 size 16775168 extends beyond EOD, truncated [ 277.124845][ T4916] loop3: p254 size 16775168 extends beyond EOD, truncated [ 277.273831][ T4998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.291685][ T4998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.357652][ T5001] netlink: 'syz.1.1406': attribute type 3 has an invalid length. [ 277.372658][ T5001] loop1: detected capacity change from 0 to 256 [ 277.389844][ T5001] FAT-fs (loop1): Directory bread(block 64) failed [ 277.397100][ T5001] FAT-fs (loop1): Directory bread(block 65) failed [ 277.404533][ T5001] FAT-fs (loop1): Directory bread(block 66) failed [ 277.411923][ T5001] FAT-fs (loop1): Directory bread(block 67) failed [ 277.419049][ T5001] FAT-fs (loop1): Directory bread(block 68) failed [ 277.426376][ T5001] FAT-fs (loop1): Directory bread(block 69) failed [ 277.433648][ T5001] FAT-fs (loop1): Directory bread(block 70) failed [ 277.441822][ T2612] udevd[2612]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 277.450067][ T4935] udevd[4935]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 277.453796][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 277.463401][ T2621] udevd[2621]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 277.482047][ T2622] udevd[2622]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 277.483304][ T2618] udevd[2618]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 277.504446][ T5001] FAT-fs (loop1): Directory bread(block 71) failed [ 277.512808][ T2612] udevd[2612]: inotify_add_watch(7, /dev/loop3p14, 10) failed: No such file or directory [ 277.531405][ T1097] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 277.544966][ T4935] udevd[4935]: inotify_add_watch(7, /dev/loop3p15, 10) failed: No such file or directory [ 277.556653][ T2622] udevd[2622]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 277.572185][ T5001] FAT-fs (loop1): Directory bread(block 72) failed [ 277.574338][ T2621] udevd[2621]: inotify_add_watch(7, /dev/loop3p17, 10) failed: No such file or directory [ 277.594077][ T5001] FAT-fs (loop1): Directory bread(block 73) failed [ 277.631211][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 277.642004][ T28] audit: type=1400 audit(1777898322.960:279): avc: denied { search } for pid=5000 comm="syz.1.1406" name="/" dev="configfs" ino=10035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.670980][ T28] audit: type=1400 audit(1777898322.960:280): avc: denied { setattr } for pid=5000 comm="syz.1.1406" name="/" dev="configfs" ino=10035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.722672][ T612] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 277.732742][ T1097] usb 1-1: Using ep0 maxpacket: 16 [ 277.740556][ T1097] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 277.749136][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.760852][ T1097] usb 1-1: config 0 has no interface number 0 [ 277.768212][ T19] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 277.778201][ T1097] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 277.821383][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.830853][ T1097] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 277.846230][ T19] usb 4-1: config 0 descriptor?? [ 278.011370][ T28] audit: type=1400 audit(1777898323.280:281): avc: denied { unmount } for pid=4405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 278.231204][ T5019] fuse: Unknown parameter 'user_id00000000000000000000' [ 278.924586][ T1097] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 278.934713][ T1097] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.941052][ T5025] loop1: detected capacity change from 0 to 512 [ 278.943526][ T1097] usb 1-1: Product: syz [ 278.954347][ T1097] usb 1-1: Manufacturer: syz [ 278.959176][ T1097] usb 1-1: SerialNumber: syz [ 278.965771][ T612] usb 7-1: unable to get BOS descriptor or descriptor too short [ 278.974403][ T5025] EXT4-fs: Ignoring removed nobh option [ 278.980926][ T1097] usb 1-1: config 0 descriptor?? [ 278.988889][ T4997] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 278.999054][ T612] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 279.001215][ T4997] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 279.012136][ T5025] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1412: bad orphan inode 15 [ 279.028376][ T5025] ext4_test_bit(bit=14, block=5) = 0 [ 279.034202][ T5025] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 279.043824][ T612] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 279.053473][ T612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.062054][ T612] usb 7-1: Product: syz [ 279.062075][ T612] usb 7-1: Manufacturer: syz [ 279.062089][ T612] usb 7-1: SerialNumber: syz [ 279.204443][ T28] audit: type=1400 audit(1777898324.540:282): avc: denied { shutdown } for pid=5024 comm="syz.1.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 279.244872][ T1097] asix: probe of 1-1:0.34 failed with error -71 [ 279.256055][ T1097] usb 1-1: USB disconnect, device number 6 [ 279.290815][ T5003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.299972][ T5003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.341845][ T4992] input: syz1 as /devices/virtual/input/input59 [ 279.360877][ T19] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 279.372517][ T612] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 279.381128][ T612] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 279.392755][ T19] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input60 [ 279.405313][ T612] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 279.413949][ T612] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 279.437323][ T612] usb 7-1: USB disconnect, device number 2 [ 279.485318][ T19] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 279.587085][ T4992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.597888][ T4992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.621875][ C0] Mem-Info: [ 279.625148][ C0] active_anon:16260 inactive_anon:2 isolated_anon:0 [ 279.625148][ C0] active_file:25518 inactive_file:2424 isolated_file:0 [ 279.625148][ C0] unevictable:0 dirty:168 writeback:0 [ 279.625148][ C0] slab_reclaimable:8777 slab_unreclaimable:74821 [ 279.625148][ C0] mapped:32581 shmem:3097 pagetables:818 [ 279.625148][ C0] sec_pagetables:0 bounce:0 [ 279.625148][ C0] kernel_misc_reclaimable:0 [ 279.625148][ C0] free:1499797 free_pcp:7357 free_cma:0 [ 279.671277][ C0] Node 0 active_anon:65040kB inactive_anon:8kB active_file:102072kB inactive_file:9696kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130324kB dirty:672kB writeback:0kB shmem:12388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5152kB pagetables:3272kB sec_pagetables:0kB all_unreclaimable? no [ 279.704004][ C0] DMA32 free:2966484kB boost:0kB min:31276kB low:39092kB high:46908kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971884kB mlocked:0kB bounce:0kB free_pcp:5400kB local_pcp:5400kB free_cma:0kB [ 279.732456][ C0] lowmem_reserve[]: 0 3932 3932 3932 [ 279.738167][ C0] Normal free:3032704kB boost:0kB min:42448kB low:53060kB high:63672kB reserved_highatomic:0KB active_anon:65040kB inactive_anon:8kB active_file:102072kB inactive_file:9696kB unevictable:0kB writepending:672kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:24028kB local_pcp:1716kB free_cma:0kB [ 279.768824][ C0] lowmem_reserve[]: 0 0 0 0 [ 279.773744][ C0] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2966484kB [ 279.789447][ C0] Normal: 426*4kB (UME) 855*8kB (ME) 234*16kB (UME) 410*32kB (UME) 207*64kB (UME) 97*128kB (ME) 97*256kB (UM) 61*512kB (UME) 27*1024kB (UME) 3*2048kB (UME) 706*4096kB (UM) = 3032704kB [ 279.808261][ C0] 31067 total pagecache pages [ 279.813048][ C0] 2 pages in swap cache [ 279.817301][ C0] Free swap = 124472kB [ 279.821642][ C0] Total swap = 124996kB [ 279.825985][ C0] 2097051 pages RAM [ 279.830012][ C0] 0 pages HighMem/MovableOnly [ 279.834773][ C0] 347480 pages reserved [ 279.839009][ C0] 0 pages cma reserved [ 279.851858][ T290] EXT4-fs (loop1): unmounting filesystem. [ 279.922728][ T5033] input: syz1 as /devices/virtual/input/input61 [ 279.960888][ T5004] udevd[5004]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 280.049052][ T28] audit: type=1400 audit(1777898325.380:283): avc: denied { ioctl } for pid=4991 comm="syz.3.1404" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 280.049716][ T5035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.083930][ T5035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.141091][ T19] usb 4-1: USB disconnect, device number 3 [ 280.155055][ T5041] loop0: detected capacity change from 0 to 512 [ 280.182021][ T5041] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 280.193733][ T5041] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 280.236657][ T5041] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 280.247569][ T5041] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 280.263163][ T28] audit: type=1400 audit(1777898325.600:284): avc: denied { append } for pid=5039 comm="syz.0.1415" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 280.288622][ T287] EXT4-fs (loop0): unmounting filesystem. [ 280.416174][ T5056] loop0: detected capacity change from 0 to 512 [ 280.611611][ T5067] fuse: Unknown parameter 'user_id00000000000000000000' [ 280.718958][ T28] audit: type=1400 audit(1777898326.050:285): avc: denied { write } for pid=5058 comm="syz.6.1420" name="netlink" dev="proc" ino=4026532421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 280.944897][ T5082] input: syz1 as /devices/virtual/input/input62 [ 281.141398][ T307] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 281.185300][ T5084] loop1: detected capacity change from 0 to 256 [ 281.342387][ T307] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.361440][ T307] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 281.375690][ T307] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.410259][ T307] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.419693][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.428503][ T307] usb 6-1: Product: syz [ 281.432840][ T307] usb 6-1: Manufacturer: syz [ 281.441466][ T307] usb 6-1: SerialNumber: syz [ 281.451956][ T307] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 281.469356][ T307] cdc_ncm 6-1:1.0: bind() failure [ 281.485005][ T5096] fuse: Unknown parameter 'user00000000000000000000' [ 281.505395][ T5098] fuse: Unknown parameter 'user_id00000000000000000000' [ 281.630771][ T28] audit: type=1400 audit(1777898326.960:286): avc: denied { map } for pid=5102 comm="syz.0.1435" path="socket:[47296]" dev="sockfs" ino=47296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 281.656238][ T28] audit: type=1400 audit(1777898326.960:287): avc: denied { read } for pid=5102 comm="syz.0.1435" path="socket:[47296]" dev="sockfs" ino=47296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 281.807597][ T5116] input: syz1 as /devices/virtual/input/input63 [ 282.197723][ T291] ------------[ cut here ]------------ [ 282.203393][ T291] WARNING: CPU: 0 PID: 291 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 282.211561][ T291] Modules linked in: [ 282.215732][ T291] CPU: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 [ 282.223256][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 282.233440][ T291] RIP: 0010:drop_nlink+0xc5/0x110 [ 282.238845][ T291] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 d3 ab f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fb 0e ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 282.259274][ T291] RSP: 0018:ffffc9000da7fc38 EFLAGS: 00010293 [ 282.266066][ T291] RAX: ffffffff81c66755 RBX: ffff88811d750fa0 RCX: ffff8881093ca880 [ 282.274908][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.283151][ T291] RBP: ffffc9000da7fc60 R08: 0000000000000003 R09: 0000000000000004 [ 282.291508][ T291] R10: dffffc0000000000 R11: fffff52001b4ff78 R12: dffffc0000000000 [ 282.299682][ T291] R13: 1ffff11023aea1fd R14: ffff88811d750fe8 R15: 0000000000000000 [ 282.307792][ T291] FS: 000055558650e500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 282.316865][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.323906][ T291] CR2: 0000555586531948 CR3: 0000000130644000 CR4: 00000000003526b0 [ 282.332279][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.340314][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 282.348509][ T291] Call Trace: [ 282.351828][ T291] [ 282.354957][ T291] shmem_rmdir+0x5b/0x90 [ 282.359224][ T291] vfs_rmdir+0x393/0x500 [ 282.363640][ T291] incfs_kill_sb+0x105/0x220 [ 282.368461][ T291] deactivate_locked_super+0xb5/0x120 [ 282.374072][ T291] deactivate_super+0xaf/0xe0 [ 282.378867][ T291] cleanup_mnt+0x474/0x500 [ 282.383410][ T291] __cleanup_mnt+0x19/0x20 [ 282.388211][ T291] task_work_run+0x1e1/0x250 [ 282.392888][ T291] ? __cfi_task_work_run+0x10/0x10 [ 282.398557][ T291] ? __x64_sys_umount+0x12d/0x170 [ 282.403916][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 282.409314][ T291] exit_to_user_mode_loop+0x9b/0xb0 [ 282.414740][ T291] exit_to_user_mode_prepare+0x87/0xd0 [ 282.420232][ T291] syscall_exit_to_user_mode+0x1a/0x30 [ 282.421329][ T475] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 282.425800][ T291] do_syscall_64+0x58/0xa0 [ 282.425827][ T291] ? clear_bhb_loop+0x30/0x80 [ 282.442453][ T291] ? clear_bhb_loop+0x30/0x80 [ 282.447392][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.453452][ T291] RIP: 0033:0x7fa12939e017 [ 282.457885][ T291] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 282.478397][ T291] RSP: 002b:00007ffe4dd01148 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 282.487124][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa12939e017 [ 282.495836][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4dd01200 [ 282.503868][ T291] RBP: 00007ffe4dd01200 R08: 00007ffe4dd02200 R09: 00000000ffffffff [ 282.512138][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4dd02290 [ 282.520228][ T291] R13: 00007fa129432120 R14: 0000000000044dd7 R15: 00007ffe4dd022d0 [ 282.528591][ T291] [ 282.531857][ T291] ---[ end trace 0000000000000000 ]--- [ 282.537670][ T291] ================================================================== [ 282.545743][ T291] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 282.552090][ T291] Write of size 4 at addr 0000000000000170 by task syz-executor/291 [ 282.560162][ T291] [ 282.562495][ T291] CPU: 0 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 [ 282.571708][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 282.582123][ T291] Call Trace: [ 282.585420][ T291] [ 282.588407][ T291] __dump_stack+0x21/0x24 [ 282.592864][ T291] dump_stack_lvl+0x110/0x170 [ 282.597563][ T291] ? __cfi_dump_stack_lvl+0x8/0x8 [ 282.602598][ T291] ? __cfi_call_rcu+0x10/0x10 [ 282.607294][ T291] ? ihold+0x20/0x60 [ 282.611206][ T291] ? ihold+0x20/0x60 [ 282.615293][ T291] print_report+0x3d/0x60 [ 282.619625][ T291] kasan_report+0x122/0x150 [ 282.622418][ T475] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 282.624226][ T291] ? ihold+0x20/0x60 [ 282.632885][ T475] usb 7-1: config 0 has no interface number 0 [ 282.636562][ T291] kasan_check_range+0x249/0x2a0 [ 282.643272][ T475] usb 7-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.648020][ T291] __kasan_check_write+0x14/0x20 [ 282.648046][ T291] ihold+0x20/0x60 [ 282.659146][ T475] usb 7-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.663896][ T291] vfs_rmdir+0x25f/0x500 [ 282.663924][ T291] incfs_kill_sb+0x105/0x220 [ 282.663948][ T291] deactivate_locked_super+0xb5/0x120 [ 282.670017][ T475] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 282.678077][ T291] deactivate_super+0xaf/0xe0 [ 282.678113][ T291] cleanup_mnt+0x474/0x500 [ 282.678141][ T291] __cleanup_mnt+0x19/0x20 [ 282.678158][ T291] task_work_run+0x1e1/0x250 [ 282.678180][ T291] ? __cfi_task_work_run+0x10/0x10 [ 282.682869][ T475] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 282.687386][ T291] ? __x64_sys_umount+0x12d/0x170 [ 282.687419][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 282.693548][ T475] usb 7-1: Manufacturer: syz [ 282.701970][ T291] exit_to_user_mode_loop+0x9b/0xb0 [ 282.702001][ T291] exit_to_user_mode_prepare+0x87/0xd0 [ 282.702019][ T291] syscall_exit_to_user_mode+0x1a/0x30 [ 282.702045][ T291] do_syscall_64+0x58/0xa0 [ 282.710774][ T475] usb 7-1: config 0 descriptor?? [ 282.711351][ T291] ? clear_bhb_loop+0x30/0x80 [ 282.711383][ T291] ? clear_bhb_loop+0x30/0x80 [ 282.785456][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.791560][ T291] RIP: 0033:0x7fa12939e017 [ 282.796090][ T291] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 282.816061][ T291] RSP: 002b:00007ffe4dd01148 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 282.824632][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa12939e017 [ 282.832808][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4dd01200 [ 282.841331][ T291] RBP: 00007ffe4dd01200 R08: 00007ffe4dd02200 R09: 00000000ffffffff [ 282.849425][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4dd02290 [ 282.857779][ T291] R13: 00007fa129432120 R14: 0000000000044dd7 R15: 00007ffe4dd022d0 [ 282.865818][ T291] [ 282.868974][ T291] ================================================================== [ 282.879104][ T291] Disabling lock debugging due to kernel taint [ 282.885721][ T291] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 282.894025][ T291] #PF: supervisor write access in kernel mode [ 282.900220][ T291] #PF: error_code(0x0002) - not-present page [ 282.906560][ T291] PGD 1329d2067 P4D 1329d2067 PUD 0 [ 282.911859][ T291] Oops: 0002 [#1] PREEMPT SMP KASAN [ 282.917147][ T291] CPU: 1 PID: 291 Comm: syz-executor Tainted: G B W syzkaller #0 [ 282.926690][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 282.937186][ T291] RIP: 0010:ihold+0x26/0x60 [ 282.941699][ T291] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 61 06 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 a3 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 282.961794][ T291] RSP: 0018:ffffc9000da7fc78 EFLAGS: 00010246 [ 282.967884][ T291] RAX: ffff8881093ca800 RBX: 0000000000000000 RCX: ffff8881093ca880 [ 282.975963][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.984373][ T291] RBP: ffffc9000da7fc88 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc [ 282.992805][ T291] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: ffff88811d750fac [ 283.000883][ T291] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 283.008941][ T291] FS: 000055558650e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 283.017873][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.024719][ T291] CR2: 0000000000000170 CR3: 0000000130644000 CR4: 00000000003526a0 [ 283.032874][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 283.040933][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 283.048909][ T291] Call Trace: [ 283.052281][ T291] [ 283.055306][ T291] vfs_rmdir+0x25f/0x500 [ 283.059567][ T291] incfs_kill_sb+0x105/0x220 [ 283.064250][ T291] deactivate_locked_super+0xb5/0x120 [ 283.069630][ T291] deactivate_super+0xaf/0xe0 [ 283.074407][ T291] cleanup_mnt+0x474/0x500 [ 283.078826][ T291] __cleanup_mnt+0x19/0x20 [ 283.083436][ T291] task_work_run+0x1e1/0x250 [ 283.088037][ T291] ? __cfi_task_work_run+0x10/0x10 [ 283.093522][ T291] ? __x64_sys_umount+0x12d/0x170 [ 283.098663][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 283.104305][ T291] exit_to_user_mode_loop+0x9b/0xb0 [ 283.109875][ T291] exit_to_user_mode_prepare+0x87/0xd0 [ 283.115509][ T291] syscall_exit_to_user_mode+0x1a/0x30 [ 283.121158][ T291] do_syscall_64+0x58/0xa0 [ 283.125595][ T291] ? clear_bhb_loop+0x30/0x80 [ 283.130282][ T291] ? clear_bhb_loop+0x30/0x80 [ 283.135059][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.141311][ T291] RIP: 0033:0x7fa12939e017 [ 283.145815][ T291] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 283.165945][ T291] RSP: 002b:00007ffe4dd01148 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 283.174714][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa12939e017 [ 283.183041][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4dd01200 [ 283.191273][ T291] RBP: 00007ffe4dd01200 R08: 00007ffe4dd02200 R09: 00000000ffffffff [ 283.199508][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4dd02290 [ 283.207830][ T291] R13: 00007fa129432120 R14: 0000000000044dd7 R15: 00007ffe4dd022d0 [ 283.215891][ T291] [ 283.219170][ T291] Modules linked in: [ 283.223605][ T291] CR2: 0000000000000170 [ 283.227839][ T291] ---[ end trace 0000000000000000 ]--- [ 283.233553][ T291] RIP: 0010:ihold+0x26/0x60 [ 283.238063][ T291] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 61 06 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 a3 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 283.258017][ T291] RSP: 0018:ffffc9000da7fc78 EFLAGS: 00010246 [ 283.264365][ T291] RAX: ffff8881093ca800 RBX: 0000000000000000 RCX: ffff8881093ca880 [ 283.272338][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.280657][ T291] RBP: ffffc9000da7fc88 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc [ 283.288799][ T291] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: ffff88811d750fac [ 283.296945][ T291] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 283.304918][ T291] FS: 000055558650e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 283.314112][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.320883][ T291] CR2: 0000000000000170 CR3: 0000000130644000 CR4: 00000000003526a0 [ 283.328856][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 283.336829][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 283.345066][ T291] Kernel panic - not syncing: Fatal exception [ 283.351271][ T291] Kernel Offset: disabled [ 283.355950][ T291] Rebooting in 86400 seconds..